Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
File: kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft (raw, json)
Hash identifier: s8GBF4oZB/z+fgl54k8WFBvYduepyYjZivKpadrfWBU=
Subject key identifier: 7D:47:03:1E:17:CA:9E:3B:39:B1:82:7E:39:07:6F:B9:71:7A:02:B4
Authority key identifier: 91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
Certificate issuer: /CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Certificate serial: 01A151ACF5896DD50D223D7C9077E6A956DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
Manifest number: 1ABB
Signing time: Mon 19 Oct 2026 01:00:51 +0000
Manifest this update: Mon 19 Oct 2026 01:00:51 +0000
Manifest next update: Tue 20 Oct 2026 01:00:51 +0000
Files and hashes: 1: kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl (hash: +wOMVx2S6YEVcwa5h3MoarsPptCtAw7vty3zFs7A/Rg=)
2: oPGWWYaAX9Sd9i7DrFXYN9EHrLY.roa (hash: gWn6/oluANX78L0hnctxoTZX7zawfsnjM4XEj/gL06s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:ac:f5:89:6d:d5:0d:22:3d:7c:90:77:e6:a9:56:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Validity
Not Before: Oct 19 01:00:51 2026 GMT
Not After : Oct 20 01:00:51 2026 GMT
Subject: CN=7d47031e17ca9e3b39b1827e39076fb9717a02b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fa:6e:81:09:96:7b:11:8c:94:4f:7c:46:23:
29:2e:96:70:17:3e:bf:90:dd:90:21:1e:b5:54:e4:
c8:76:0f:ac:76:b4:2e:10:d8:7e:ef:e4:97:87:51:
31:74:6e:53:95:0b:2f:92:3b:bb:59:0e:e4:21:3b:
e4:8f:7b:6a:30:d2:41:74:5e:df:c0:c7:c0:e9:00:
ae:23:48:a2:fc:35:7b:0c:e2:37:bd:e7:64:3c:01:
67:c1:da:57:a5:36:1d:b1:2f:34:85:82:4b:86:d0:
bd:9f:aa:03:c4:93:fe:d5:cd:14:bb:68:9b:2e:7d:
a0:4c:85:0a:91:d6:a7:8f:9d:0d:6e:56:7b:51:88:
48:f7:62:be:18:9f:e5:7f:97:fa:1b:0c:f2:a8:22:
77:a7:58:81:87:48:98:c2:6b:14:ec:99:24:f1:df:
cc:b2:3f:34:88:7c:3b:42:2a:30:a2:b4:4d:5e:09:
ba:2e:7e:28:97:58:1c:ae:08:2e:81:3a:34:d7:05:
f7:b4:3b:5c:9a:43:b3:ce:ac:45:6c:31:59:0a:da:
de:10:08:fc:0e:5a:a0:10:a0:8b:e4:18:c7:4a:93:
c0:7a:18:b0:fb:94:45:8e:3d:76:7b:67:31:7c:fd:
7b:2b:0b:1f:94:3e:7c:97:0b:45:1f:f1:99:23:1c:
bc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:47:03:1E:17:CA:9E:3B:39:B1:82:7E:39:07:6F:B9:71:7A:02:B4
X509v3 Authority Key Identifier:
keyid:91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5d:a6:78:2b:1b:c0:bc:3a:db:6f:5a:77:57:97:5c:1a:8e:
b2:4e:03:54:04:ca:9e:10:95:81:22:a0:72:dd:fa:f9:74:23:
60:80:35:2d:d3:a2:b2:fe:c4:9c:25:0a:06:ca:93:fb:12:f7:
cd:e1:43:cc:30:4d:7f:ed:77:6d:03:46:c8:df:82:09:06:48:
7e:28:b2:a2:5c:32:d7:da:5c:69:77:3d:d0:d5:a0:f7:24:c8:
a9:21:b6:a6:e7:03:ca:44:3a:b7:6f:c0:ff:2e:59:a5:41:f9:
7d:08:f4:10:84:8f:d6:bc:87:7e:83:e8:8b:18:9d:f6:27:0e:
bb:d0:f3:37:8b:14:9b:c1:ac:0c:c9:fc:34:de:78:13:de:35:
bf:04:fd:99:a2:4c:0c:fe:6e:b8:00:4c:5c:8e:9f:20:02:be:
1d:53:83:e0:32:db:2c:8c:19:fb:c4:75:01:40:fb:01:ac:65:
2c:df:4a:39:82:e0:21:0b:21:7a:fc:81:b8:2f:85:ea:dc:19:
bd:44:86:4e:90:7d:b6:8a:08:79:ba:4d:ba:d2:a2:b2:d7:c6:
e2:ac:0e:36:d7:60:d3:cd:ca:14:e7:a2:c3:52:cb:c3:2d:ad:
f0:73:6f:95:8f:82:23:fa:52:f4:b7:5b:b1:b2:05:13:31:53:
cc:27:1b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 09:35:26 2026 by rpki-client