Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
File: KXoNnIYU9TK96fRl3U93poEX6VY.mft (raw, json)
Hash identifier: EFyK834XHnihbO6yOISTo0CMbDkdGCxUSglFRymZ7F8=
Subject key identifier: 85:F7:D9:CF:15:57:84:AC:F3:4B:DF:27:F9:CF:1F:89:8C:22:D5:3E
Authority key identifier: 29:7A:0D:9C:86:14:F5:32:BD:E9:F4:65:DD:4F:77:A6:81:17:E9:56
Certificate issuer: /CN=297a0d9c8614f532bde9f465dd4f77a68117e956
Certificate serial: 01A113A9A8870BCED16B70B8E6FF1B0FF711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
Manifest number: 0108
Signing time: Wed 07 Oct 2026 00:00:48 +0000
Manifest this update: Wed 07 Oct 2026 00:00:48 +0000
Manifest next update: Thu 08 Oct 2026 00:00:48 +0000
Files and hashes: 1: KXoNnIYU9TK96fRl3U93poEX6VY.crl (hash: 63nccKUz1WqVJ/GDDg9CWVeAAxFUlygFcVevfmfZpZE=)
2: fmT6qGd_82DfL36JETvp_cYAJEA.roa (hash: +LPv3kGR0ahEJ11+PYzJHGAwvNRYkD0wo7DqeBKeWd0=)
3: hLMrHZeDr1exS-w5Q__NBh2TEMw.roa (hash: vbYv6I3D0Tp+aqvC92NpbtFK8cSesM/xfDG+wj8JE5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:a9:a8:87:0b:ce:d1:6b:70:b8:e6:ff:1b:0f:f7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297a0d9c8614f532bde9f465dd4f77a68117e956
Validity
Not Before: Oct 7 00:00:48 2026 GMT
Not After : Oct 8 00:00:48 2026 GMT
Subject: CN=85f7d9cf155784acf34bdf27f9cf1f898c22d53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:90:e6:84:5b:14:ca:33:d2:eb:fb:ad:8a:8e:
a5:26:aa:3f:81:b2:6d:84:df:0f:bb:ef:8d:66:ca:
6b:28:51:97:d2:c5:b5:81:d8:84:92:58:5a:42:ff:
fa:95:47:c7:83:1c:34:c4:1a:72:0e:43:df:53:e1:
ea:43:56:14:24:ca:b9:20:72:30:56:49:a1:56:c6:
bf:50:1a:7f:57:3f:b1:06:8f:45:7f:16:2b:34:9d:
41:48:5a:ff:f8:17:29:f8:7c:23:27:0d:30:e5:32:
9e:d6:e4:23:5c:47:cc:e3:0a:90:78:bf:27:60:e8:
74:24:85:d8:3a:78:2c:80:2d:32:4c:8d:ea:d6:dd:
e0:42:26:50:61:ae:e4:05:34:db:8f:00:f3:7b:09:
23:48:3b:c5:f3:63:3f:b6:97:64:21:60:2d:e5:59:
6f:89:2b:4d:3c:5c:35:f6:89:16:e3:50:16:1d:30:
4a:46:ef:a0:0d:d5:06:cf:fb:32:2f:bf:d4:27:5b:
3c:77:13:90:e4:55:a6:36:38:7a:96:7b:2b:f1:40:
ab:5e:df:c2:cc:f1:c2:30:72:2d:e5:f7:9d:de:b2:
56:8b:41:bb:d4:ee:63:67:d1:8b:93:3a:52:56:88:
4a:8c:ab:62:c8:22:3f:62:0a:a3:5b:47:33:00:ad:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F7:D9:CF:15:57:84:AC:F3:4B:DF:27:F9:CF:1F:89:8C:22:D5:3E
X509v3 Authority Key Identifier:
keyid:29:7A:0D:9C:86:14:F5:32:BD:E9:F4:65:DD:4F:77:A6:81:17:E9:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXoNnIYU9TK96fRl3U93poEX6VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/ba27fb-2550-49ad-b0ef-5b83d0e96012/1/KXoNnIYU9TK96fRl3U93poEX6VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:10:6e:01:ab:25:f3:84:b4:aa:1c:da:ed:c9:6d:fc:71:71:
28:52:e7:60:44:e3:a2:23:02:81:1d:ac:11:74:50:15:a7:78:
43:10:0a:e1:7b:0d:8c:c0:c8:c1:0f:a5:af:b6:03:25:78:1d:
f4:16:bb:f8:ea:08:86:b5:5f:7f:24:19:42:64:34:04:9f:4e:
b0:10:4a:67:d4:b7:1f:f5:43:77:39:51:57:79:d6:f2:40:d4:
69:41:1c:b4:44:51:38:7d:20:72:53:89:3f:1f:f3:73:39:45:
10:8a:4d:20:34:44:62:87:90:90:07:d2:c6:c8:64:3f:f7:d4:
a5:af:1e:be:e7:cf:04:ae:da:4a:f9:f7:6e:cf:16:2d:10:a8:
af:1e:61:0a:76:b1:d9:d6:9d:b4:c6:cd:15:ed:5f:a0:d4:fa:
54:d4:f2:1f:ea:12:6f:5c:81:9d:8e:02:f7:8a:fa:86:e2:00:
90:a5:62:5b:a3:29:d5:4d:c9:f7:f0:16:76:fb:63:79:7e:ba:
b8:81:58:23:56:35:f4:d0:b4:c0:70:4c:16:13:67:13:9a:8f:
18:2a:38:41:11:69:7d:83:ed:31:02:31:b5:b7:5e:2c:8b:fd:
d5:64:ac:27:66:c2:4a:a1:b4:6a:c1:a6:9c:bc:b4:4a:96:4d:
30:23:88:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:29:59 2026 by rpki-client