Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier: 1U7IxZiLXc72R3pbVvALlj7pMjX4iGPwlN4W14XSuWM=
Subject key identifier: 9D:92:27:D0:27:0D:7C:E7:00:6B:D9:A7:51:29:0B:57:AD:50:E0:3A
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 01A118992B0A9DD67B20F58AF65CD09884C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number: 0FAE
Signing time: Wed 07 Oct 2026 23:00:53 +0000
Manifest this update: Wed 07 Oct 2026 23:00:53 +0000
Manifest next update: Thu 08 Oct 2026 23:00:53 +0000
Files and hashes: 1: 1ObfCdLE7dKk-d-Joasz4Il0A1o.roa (hash: p/QxJngDf+aUBVUX1Y9rupN0VdWFzSbmnVUDpsP2Y34=)
2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: FDkK9pUmIz19qX+v0YTlyWNTL1xpuy5Pv1MVQhPGB40=)
3: h28P9psTB0BJCTdOtSuL769CZEY.roa (hash: WnzE0ULZO+Ns9cDIOM8A2gQx3rSBVndAJ664fi5lHZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 18:47:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:99:2b:0a:9d:d6:7b:20:f5:8a:f6:5c:d0:98:84:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Oct 7 23:00:53 2026 GMT
Not After : Oct 8 23:00:53 2026 GMT
Subject: CN=9d9227d0270d7ce7006bd9a751290b57ad50e03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e8:50:6f:4e:ed:fa:f7:4a:f0:cd:f6:11:69:
18:65:9c:0e:90:a4:3c:31:f6:fd:04:e1:d1:52:da:
26:73:8d:d3:93:38:5b:f9:3a:36:b9:ff:cb:8e:01:
88:0f:83:e7:6e:bb:b9:28:3c:fc:29:0b:33:18:9d:
1f:5b:42:79:f8:62:48:8b:3b:06:e4:5d:9d:e7:4b:
1d:47:d2:d2:c8:ea:60:ee:b4:78:ee:33:2d:e2:00:
8d:74:f4:c8:4d:72:07:48:a7:2b:67:64:59:33:da:
0c:69:4f:56:eb:23:a0:0b:d7:7c:10:80:2b:10:ba:
b4:0c:c1:39:a4:66:92:f9:ac:fc:62:14:66:df:ef:
2e:0f:ab:e1:39:da:dd:73:3c:40:3f:ee:7a:be:37:
27:1a:72:ed:de:69:02:0f:b9:b0:ff:3e:34:d1:ed:
57:1a:e8:1d:f2:04:40:95:76:f0:78:a2:c4:fb:c9:
17:07:de:4e:17:56:53:17:a9:5c:78:4c:6a:ca:b7:
51:56:26:c0:42:8d:eb:38:0d:eb:1d:42:d1:c4:ee:
48:04:45:ba:dd:67:ae:9c:c2:fc:40:2a:23:84:22:
6f:52:92:31:87:ae:4a:23:26:42:47:5c:4e:70:45:
d5:e6:e6:fe:a6:2d:ad:65:89:42:d6:4d:74:f6:a6:
2b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:92:27:D0:27:0D:7C:E7:00:6B:D9:A7:51:29:0B:57:AD:50:E0:3A
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:50:12:f0:ed:9b:d8:18:7e:cc:b8:bf:13:a7:da:f1:52:1b:
d7:ea:14:90:c9:d9:e7:6c:00:fe:b1:3e:a9:23:d3:e0:12:6e:
16:ff:9b:3c:24:f1:57:4c:df:95:bc:5d:24:34:0b:04:21:b0:
2f:40:6b:3c:48:5f:5f:a0:cb:b5:4f:59:f8:c2:66:43:25:d9:
9f:e3:4f:20:cf:90:53:1c:2f:95:79:93:71:5e:bb:48:99:2f:
ab:61:b0:d2:78:d2:92:be:fb:4b:8f:5f:be:8c:f4:23:0b:1e:
cd:c7:9c:7a:38:96:4b:23:55:d8:2f:9f:7a:9a:45:f0:82:86:
6e:d6:b5:ab:c7:de:84:c3:be:96:84:8b:ac:cd:fa:ef:e6:db:
73:54:81:8a:d5:8d:b5:7f:18:c3:5c:b7:c9:ef:d8:c7:6b:2d:
4f:d6:e9:89:a0:76:ab:ca:a3:05:66:cf:e6:80:42:92:55:50:
0c:28:56:f8:7d:bb:5f:20:ba:66:19:68:51:48:5f:90:a3:55:
e0:f7:41:68:a2:9d:2f:26:03:4a:f9:bd:60:2a:f5:58:9e:12:
3c:22:80:28:1e:5e:80:c6:2b:b2:83:cd:28:57:6b:21:6b:45:
37:86:7e:3c:cd:de:35:5e:1b:2c:04:01:51:14:7a:d0:cb:91:
0d:c0:64:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:53:50 2026 by rpki-client