Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier: l16IwbtVqn/1IrnRJ6ZAZ+ogShRgvlK/YQKhoRhQsDc=
Subject key identifier: CF:13:17:40:17:24:17:58:D2:61:7D:79:53:EE:98:54:1D:F3:00:93
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 01A01F794591398562A0F9DC8F7666B451E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number: 0F2D
Signing time: Thu 20 Aug 2026 14:00:36 +0000
Manifest this update: Thu 20 Aug 2026 14:00:36 +0000
Manifest next update: Fri 21 Aug 2026 14:00:36 +0000
Files and hashes: 1: 1ObfCdLE7dKk-d-Joasz4Il0A1o.roa (hash: p/QxJngDf+aUBVUX1Y9rupN0VdWFzSbmnVUDpsP2Y34=)
2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: F5oemuE2bPevzlDy8JGRAh20KZBVbRSwL1Opt5X9hQs=)
3: h28P9psTB0BJCTdOtSuL769CZEY.roa (hash: WnzE0ULZO+Ns9cDIOM8A2gQx3rSBVndAJ664fi5lHZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:79:45:91:39:85:62:a0:f9:dc:8f:76:66:b4:51:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Aug 20 14:00:36 2026 GMT
Not After : Aug 21 14:00:36 2026 GMT
Subject: CN=cf13174017241758d2617d7953ee98541df30093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:bb:6a:ff:c4:0d:75:bb:6e:2e:0d:8b:4f:
ee:33:fe:a9:35:cc:fe:3b:94:3d:8a:83:8d:d4:0a:
19:42:72:b3:e0:da:09:08:9f:9a:69:0d:d1:7c:c8:
eb:a1:3a:47:94:f7:38:19:de:4e:26:44:d7:1d:a2:
9b:39:62:17:ba:63:3b:72:46:da:e5:e6:5e:2b:9a:
7f:1d:1f:ce:75:e3:9f:7e:00:db:63:95:9f:1f:5a:
33:6f:c9:9f:ec:55:55:13:69:41:ba:43:14:ab:cb:
d6:42:ba:83:cc:ce:f9:a6:54:6c:5f:8c:c9:7b:37:
ac:f7:65:a8:3d:d1:ec:2d:c9:ac:dc:df:9f:59:43:
e6:c5:be:ce:46:c5:7d:aa:b8:b2:c3:3c:e9:68:db:
e1:af:ab:95:cf:ae:83:f7:6c:46:47:62:97:aa:92:
6e:8e:c0:ee:22:75:ed:f8:6c:9f:d9:9e:61:fe:c1:
95:22:91:14:24:98:56:8c:e8:52:34:18:75:95:c2:
c8:6f:42:23:34:c0:0f:80:e5:86:e5:d3:10:74:8a:
ec:0e:10:7a:ce:16:00:69:75:50:db:cd:a2:0f:fb:
75:16:92:c1:ea:7e:3e:f7:a1:62:1d:5c:b5:a4:33:
a9:aa:5f:03:e6:78:31:cd:53:22:06:96:47:17:2d:
ef:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:13:17:40:17:24:17:58:D2:61:7D:79:53:EE:98:54:1D:F3:00:93
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:14:0d:5f:80:48:c3:8a:f5:88:2e:6d:32:dd:6b:35:69:9a:
d0:c7:2b:75:4e:37:fc:81:55:3e:cc:c6:78:dc:9f:a5:ea:a2:
6e:ad:f6:db:05:36:9a:6e:13:63:6c:f9:39:d3:a8:09:c9:ce:
80:28:2b:14:12:ee:18:f0:d6:63:97:0c:83:78:4e:ad:71:82:
b1:ea:b4:47:73:e9:0b:dd:73:3d:a6:08:ff:45:b3:32:19:a9:
ac:fe:10:55:81:32:a2:2f:96:88:da:34:96:b1:1e:a3:48:11:
79:27:12:67:7e:94:39:b7:74:bb:80:19:93:fa:45:7d:3f:2c:
eb:d1:b5:7e:19:f7:2c:7f:cc:96:d0:9a:f9:61:02:be:8a:16:
6a:42:86:4a:80:68:0a:e9:0a:cd:e0:61:b2:99:c7:b0:95:da:
ce:75:03:75:1f:5f:9e:21:70:f8:f4:26:ae:a0:e3:67:ea:8c:
82:1f:39:76:31:a7:28:4c:62:54:84:0f:7e:36:98:c5:8c:e8:
3c:2a:ca:1f:6b:5e:4e:41:ee:07:9b:b4:14:36:58:2a:92:16:
3d:6d:fa:57:ec:1f:55:76:8e:7b:fa:59:88:42:43:6c:ea:02:
0a:63:e9:f5:02:2e:b1:38:9d:8c:81:89:af:d1:5c:39:0c:a9:
83:e8:1b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:39 2026 by rpki-client