Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
File: kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft (raw, json)
Hash identifier: xaPFROHaQJ3BNc4JCoBrISJMe9xksR0gSMeV8OCBXNw=
Subject key identifier: F0:CE:57:18:48:42:56:B1:4A:1D:6C:38:EA:D2:04:1F:63:37:4B:79
Authority key identifier: 91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
Certificate issuer: /CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Certificate serial: 01A001A5FB10E410980613636D5F086681D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
Manifest number: 1A0D
Signing time: Fri 14 Aug 2026 19:00:49 +0000
Manifest this update: Fri 14 Aug 2026 19:00:49 +0000
Manifest next update: Sat 15 Aug 2026 19:00:49 +0000
Files and hashes: 1: kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl (hash: k5prTA13QCkEQSQJTA+BEU84oockibUBIeyGTPoDufs=)
2: oPGWWYaAX9Sd9i7DrFXYN9EHrLY.roa (hash: gWn6/oluANX78L0hnctxoTZX7zawfsnjM4XEj/gL06s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a5:fb:10:e4:10:98:06:13:63:6d:5f:08:66:81:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Validity
Not Before: Aug 14 19:00:49 2026 GMT
Not After : Aug 15 19:00:49 2026 GMT
Subject: CN=f0ce5718484256b14a1d6c38ead2041f63374b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:79:5b:ed:cb:cd:87:59:3e:ef:d4:9e:34:7f:
45:5d:fb:a6:cb:f0:96:b8:c4:4a:15:b0:18:be:82:
96:8c:33:df:e0:e2:a2:b9:7d:47:f0:fc:83:01:8d:
a9:c8:a6:73:59:a9:1e:4f:8c:b7:bf:0e:ec:0b:e8:
a5:c3:71:9d:f2:94:9f:cf:4c:2b:c1:25:2c:f5:56:
54:17:36:bd:92:ed:34:ff:81:2e:87:cf:40:85:01:
1a:29:ef:cd:23:3e:83:1e:5e:1c:c8:3d:8c:d9:7c:
d4:73:c4:8e:fe:99:b3:9e:0a:b1:38:1c:6e:1d:fd:
34:d4:fb:f9:3b:85:03:8d:9b:21:61:76:74:b1:05:
f4:a4:34:18:08:0c:05:88:13:79:a2:2f:8d:be:80:
9e:a5:5c:4f:07:47:b1:91:22:4e:de:1b:61:1d:d1:
57:0e:c0:9b:10:7b:fd:da:19:97:80:2b:2e:6d:3b:
44:45:77:f2:d6:01:71:13:d1:2b:3f:69:15:aa:4f:
c0:7a:c4:10:77:87:92:b1:c9:ce:c1:90:ce:ef:87:
ed:73:8c:a7:e7:d7:f3:30:af:53:f0:c8:dc:e4:75:
e5:80:92:2a:f0:04:ca:7a:82:3e:44:ac:3b:9f:84:
e3:84:cd:cc:95:02:fc:c4:03:1c:7b:65:d8:d4:db:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CE:57:18:48:42:56:B1:4A:1D:6C:38:EA:D2:04:1F:63:37:4B:79
X509v3 Authority Key Identifier:
keyid:91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c4:ea:5a:59:dd:48:45:18:18:4c:46:8d:38:e3:ce:f3:57:
d9:25:5a:a4:33:15:68:44:73:62:c1:21:20:0b:fc:a1:a5:20:
7a:57:8a:ae:87:39:38:e8:06:8c:d4:89:a8:5b:a0:d9:e7:32:
1d:1b:cf:d6:ae:90:b2:0c:26:ec:53:b8:1c:f4:20:49:f5:4a:
70:99:93:a4:1f:db:dc:28:8b:45:01:cb:c4:e9:b6:ec:ac:5d:
7f:b2:2c:49:96:cd:da:19:f1:72:26:34:f2:6b:81:5a:87:e9:
25:b5:8a:2a:6f:c9:cb:22:ad:50:5f:48:b9:2e:28:6f:c1:d4:
f0:db:5a:68:3e:e0:4a:d4:a8:6c:36:38:54:4b:7a:6a:f6:47:
7e:f9:59:90:0c:62:fe:63:40:b1:b9:47:ee:f9:00:56:35:80:
5b:f9:94:4f:2c:3c:91:0c:0a:ac:4d:00:e5:35:67:b4:30:5c:
ad:a7:62:fc:91:e7:4c:b2:e6:ff:33:26:8b:8f:93:8c:88:4e:
27:08:f3:c8:af:dd:4a:ee:06:1b:19:16:26:33:cc:03:ce:fb:
96:ec:8a:98:96:74:ae:1d:6e:c9:43:bb:e9:51:79:77:03:38:
4e:6e:6f:7a:b6:32:d7:c2:56:15:90:28:57:79:4a:14:ab:ca:
7d:36:0b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:33:00 2026 by rpki-client