Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: qXcvtBRsZYpYXdGXYNMtSRwjmOhMewNvawmrAnRhpG8=
Subject key identifier: BA:B6:55:F3:63:A3:FA:F1:9C:7F:81:64:6C:F0:C1:7E:B0:AB:02:22
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 01A03E603A7891DAC87F46974050F2102726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 1A25
Signing time: Wed 26 Aug 2026 14:01:28 +0000
Manifest this update: Wed 26 Aug 2026 14:01:28 +0000
Manifest next update: Thu 27 Aug 2026 14:01:28 +0000
Files and hashes: 1: Ym3zwZvIklwn7so4hL0dv1aKBW8.roa (hash: qOJfCzveyraO0OeXrlle0Smp5KbGhvlylearMNdgHnk=)
2: YxY1BNqNntb9_rMbUTeJ_0YPx2Y.asa (hash: 9EJbKH7qVFxDEjq7ju1hKcNKpr3FzmvX6YfOfaFcrXE=)
3: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: OzNdfaK+Nyn621qKC1wOp9x4ceyeOWZpXCnAXUfxL84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:60:3a:78:91:da:c8:7f:46:97:40:50:f2:10:27:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Aug 26 14:01:28 2026 GMT
Not After : Aug 27 14:01:28 2026 GMT
Subject: CN=bab655f363a3faf19c7f81646cf0c17eb0ab0222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d7:0a:24:dc:95:f1:ce:95:f2:71:20:a3:24:
08:12:21:65:95:b7:4e:87:34:d7:62:56:05:5f:73:
af:76:41:c6:fc:37:f4:21:0a:52:be:37:9c:0b:fc:
1b:29:8d:62:5d:82:f7:ff:34:16:3f:e7:e3:a1:10:
d9:65:4b:1d:7d:33:da:98:bc:16:fb:2f:4f:46:e2:
6d:35:f9:12:fb:18:dd:9a:bf:e6:f2:2e:a9:4d:cd:
e2:ce:77:d3:76:5e:08:fa:54:3a:0e:57:1a:66:c7:
68:4e:00:93:77:1d:8f:50:bc:fa:a0:20:76:bd:e8:
72:57:e3:1e:c3:14:3f:88:cf:32:b7:60:2b:52:db:
92:fe:68:d6:7a:a0:da:a8:c3:5d:2a:a6:48:7b:6d:
6c:0c:c8:77:75:05:ab:2d:02:5a:10:8b:ea:d7:76:
4b:48:04:78:c9:ce:84:13:1b:40:3d:56:e4:90:e5:
b3:fa:fa:c2:d8:7f:49:d2:11:c6:4b:cd:39:ed:42:
28:4c:c9:8d:1f:52:c6:37:4f:39:33:5f:af:a0:9f:
23:1c:2e:29:d6:86:5e:e2:29:ea:04:67:73:55:92:
c6:8b:e7:29:84:fa:40:04:fc:a7:1b:26:c4:54:96:
60:dc:a5:32:99:16:34:39:81:aa:92:91:67:27:fa:
7b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:B6:55:F3:63:A3:FA:F1:9C:7F:81:64:6C:F0:C1:7E:B0:AB:02:22
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:70:1d:d3:16:da:be:06:ba:2a:0c:76:66:7c:01:c6:d4:41:
f1:a7:9c:23:a1:40:ec:10:bd:98:40:29:ab:28:a4:37:b6:21:
a2:b3:15:2f:e3:a2:4c:04:c3:0f:2e:2b:b5:6c:79:11:b1:0c:
5b:1d:45:0c:19:b1:98:72:9a:f7:d7:55:34:93:b4:82:27:5b:
0b:27:f1:47:6d:73:78:e8:0c:55:27:3b:88:58:98:26:5f:3a:
f3:84:56:70:d9:62:44:b9:15:4e:9d:e1:b8:ed:c0:37:36:93:
bd:c9:6d:b6:3b:2c:78:6f:bb:4e:73:07:63:e8:d9:6d:3e:13:
0e:42:e0:5d:34:12:e1:51:0d:3d:ce:26:5d:61:90:90:9d:b3:
c9:0c:b0:0e:24:18:46:ce:93:d7:a5:b2:dd:ab:57:25:ee:e6:
02:9d:ff:55:35:2b:1a:46:75:50:72:e6:e8:20:3c:e9:3c:bb:
b0:29:8e:a7:88:58:bb:fb:af:f5:c7:89:59:75:fd:04:9e:34:
7c:56:35:74:da:0d:e9:01:1e:f7:d6:7f:ac:b9:db:34:b3:84:
39:b9:a0:18:ef:e8:20:3f:e4:56:75:53:e3:72:fb:8b:5b:cd:
3b:95:b1:57:7a:37:ff:22:71:cc:81:f4:39:0d:45:4e:2e:52:
46:2c:eb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:14:20 2026 by rpki-client