Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: Eo7ZkfXobnnMWqAg9TDzJnekeKDp+NMLteQhTjAfwNo=
Subject key identifier: E6:C7:DC:42:49:4D:22:2F:DF:51:F1:BD:E8:75:22:45:F0:61:8A:17
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 01A1DF83766E96B628C15FDDA5E4D511E7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 14:01:37 +0000
Manifest this update: Sun 15 Nov 2026 14:01:37 +0000
Manifest next update: Mon 16 Nov 2026 14:01:37 +0000
Files and hashes: 1: 8JbX4W9CpZR4sp8oXbshsMu3qhg.roa (hash: hCHQyL16C72+1THFmVb/zaNecTBJgYxVKSF0WwCJuaU=)
2: AVx1s96DRHZcCwdlQg5COsBPl7g.asa (hash: wYwV0iDMhs5FKfv+LLpy2aNRbVxO/Y+rGm83NlQ+S24=)
3: BiY8FkJ6QhxFh-KpB3NsT2LpAnQ.roa (hash: ube55hCllmSHhMFruM84ELj1ZKtITmMvONboq60emvo=)
4: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: ybvr+fivWpbv9Ri/j56gr5kzbNsKVo7bKB9as0A1gOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:76:6e:96:b6:28:c1:5f:dd:a5:e4:d5:11:e7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Nov 15 14:01:37 2026 GMT
Not After : Nov 16 14:01:37 2026 GMT
Subject: CN=e6c7dc42494d222fdf51f1bde8752245f0618a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:09:fc:3b:72:02:10:b0:16:a3:93:ac:71:dd:
2e:c3:13:ad:86:ca:86:af:97:e5:c7:90:cd:fe:07:
91:fb:cc:19:f3:cb:04:59:cf:c3:e7:a8:81:ef:1b:
9e:8b:b5:80:ed:b3:8c:62:56:02:38:45:11:fd:f4:
3b:1d:00:2e:7f:1c:f4:40:eb:70:af:f1:11:1d:5f:
49:aa:91:9d:ec:28:d8:d7:72:1e:18:15:a5:9e:68:
f8:dc:51:b3:03:ec:51:5e:99:e7:79:90:2c:e8:99:
87:79:83:cd:d9:22:e6:ce:a5:93:ea:0a:da:bb:b6:
c8:d3:eb:48:be:51:08:c0:5e:6e:dc:13:3e:b8:73:
5e:8e:b7:4e:84:0a:cf:2d:65:79:32:13:bc:fe:50:
81:b0:2d:b7:7e:27:07:b1:7f:98:43:f5:c3:6e:be:
4f:e0:cd:87:8d:1c:36:e8:76:df:4e:42:e5:d2:bf:
17:2a:71:13:5d:ae:be:80:58:d4:6d:40:c2:f2:98:
64:d8:1c:2e:be:68:ff:b8:6e:b6:4d:d5:cd:06:53:
42:0b:48:0a:f1:7e:22:88:4b:46:10:89:3b:10:cc:
91:1c:42:5b:eb:d0:4a:28:8a:4f:bd:72:1d:db:24:
b1:19:49:9e:97:38:d7:79:3d:6b:4e:86:94:58:b0:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C7:DC:42:49:4D:22:2F:DF:51:F1:BD:E8:75:22:45:F0:61:8A:17
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0f:9d:fa:ab:f0:80:ec:fc:dd:47:f7:1e:88:1c:4d:b7:08:
50:61:72:e2:ac:22:81:4a:3e:fb:e0:d2:9e:e5:4c:09:de:af:
7d:70:11:70:30:4c:7c:7f:f4:27:4a:1f:87:8e:d1:49:46:81:
d7:d0:79:7a:91:98:e4:63:1e:28:8f:45:22:a2:73:95:3d:56:
8b:83:1c:11:65:36:a6:c1:2e:12:ba:cf:13:61:3b:6d:48:f6:
77:e7:c0:ad:49:d0:b5:66:90:e9:3e:d6:c1:f6:f5:75:f9:43:
4f:77:1a:90:56:f6:59:2b:bf:d0:0f:6c:e3:11:b3:e9:64:1f:
73:3b:fb:dd:43:fa:bf:ca:39:c7:69:f3:71:1e:42:9b:8b:1e:
ff:16:05:bc:5f:b6:1f:c6:ce:7f:f4:48:e3:5b:75:5e:e0:2d:
29:f9:c2:7f:f8:ea:a6:da:85:9b:04:d4:25:c3:00:1e:23:c6:
7a:1c:c8:6b:87:c4:4d:12:38:83:4a:c1:4b:d5:b6:d3:42:14:
a5:6f:88:77:40:8b:56:24:f9:6e:d4:b1:43:13:be:12:f9:cd:
ad:36:73:95:a5:fc:98:f6:f7:0f:f2:38:33:a5:e3:8d:b1:c3:
38:9b:cc:7e:49:2e:c5:99:b3:34:7a:bd:b4:a1:92:8e:8c:20:
9d:2a:11:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:59:17 2026 by rpki-client