Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: 4WBLjAi2C05TqbqrYwtITR/y2p1QZkTCFNZ0XrawpkA=
Subject key identifier: 4A:B3:8D:AD:01:F9:34:0F:51:F6:5B:1C:55:47:C0:6C:76:C0:39:83
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 01A03C70F74B40043F37E7C87CD3D8B87279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 1A20
Signing time: Wed 26 Aug 2026 05:00:31 +0000
Manifest this update: Wed 26 Aug 2026 05:00:31 +0000
Manifest next update: Thu 27 Aug 2026 05:00:31 +0000
Files and hashes: 1: 8JbX4W9CpZR4sp8oXbshsMu3qhg.roa (hash: hCHQyL16C72+1THFmVb/zaNecTBJgYxVKSF0WwCJuaU=)
2: AVx1s96DRHZcCwdlQg5COsBPl7g.asa (hash: wYwV0iDMhs5FKfv+LLpy2aNRbVxO/Y+rGm83NlQ+S24=)
3: BiY8FkJ6QhxFh-KpB3NsT2LpAnQ.roa (hash: ube55hCllmSHhMFruM84ELj1ZKtITmMvONboq60emvo=)
4: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: hDrz6CttmpbvA8lmt22VAeIvL8C1Mih4ISXi6xBvsY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:70:f7:4b:40:04:3f:37:e7:c8:7c:d3:d8:b8:72:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Aug 26 05:00:31 2026 GMT
Not After : Aug 27 05:00:31 2026 GMT
Subject: CN=4ab38dad01f9340f51f65b1c5547c06c76c03983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:17:45:6f:b4:6b:ba:60:20:1a:11:11:98:a7:
cc:b5:5d:e4:57:66:bd:15:12:2c:5e:7c:33:7f:7c:
61:94:01:87:7e:8a:6e:de:50:97:7b:63:90:fc:18:
35:48:04:20:fe:e7:15:9c:15:5d:d7:99:12:1d:11:
c8:c0:e9:6b:d5:e5:43:ab:eb:01:6d:e9:87:3d:ac:
c1:5e:53:d2:bc:f3:14:b4:69:4d:5f:6b:45:86:f8:
c0:f3:d3:a6:f3:ac:59:90:ee:17:52:38:5e:45:1b:
93:27:ab:ae:e4:ae:21:7d:49:7b:33:c9:23:4f:03:
bb:41:a1:53:bc:73:7e:d9:4d:e1:b4:36:b5:a2:ad:
2b:de:e2:55:b1:aa:46:41:7d:1a:68:66:33:46:08:
4f:60:14:d4:d1:ea:d9:46:20:55:2c:ad:2d:fc:9c:
f5:b5:f7:8f:41:95:58:68:64:33:3d:af:dd:a5:59:
86:63:8f:36:77:bf:b0:45:3c:df:b6:ca:3d:1f:73:
ab:f3:45:7c:84:18:c8:6e:ef:1b:90:de:1e:b9:52:
6a:21:08:f9:9e:d6:84:f0:09:e2:67:71:3c:1d:5f:
e2:b4:0e:41:40:8b:d7:95:ec:e8:67:bd:ff:c2:f2:
43:d6:82:2e:0b:e6:e4:da:8d:ca:ce:ca:d2:17:a1:
f2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B3:8D:AD:01:F9:34:0F:51:F6:5B:1C:55:47:C0:6C:76:C0:39:83
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:de:cf:e0:11:a3:e5:10:71:bf:cd:1b:9b:86:9c:d2:18:8f:
e9:8a:74:aa:a3:f6:ed:fd:71:b4:60:bd:0b:93:90:74:58:d2:
26:32:7a:ce:0d:b3:21:b9:67:60:8a:fb:0a:f0:6a:4b:4c:2e:
ab:a6:ff:01:74:a9:69:e3:ec:ea:8e:c0:5a:cd:5a:0c:89:a2:
aa:e8:0f:fa:93:dc:5c:fd:aa:0b:9d:9e:00:79:5b:1a:ee:19:
af:5e:76:28:f0:34:f6:a0:9e:b6:e2:d2:c5:f0:6b:7d:27:02:
dc:d2:c2:fa:e8:26:66:13:a8:4c:fb:6a:51:e0:73:fa:b9:fe:
d2:f3:7b:d6:db:e0:bf:a2:07:17:61:45:01:7f:74:e2:ea:40:
a4:6a:00:9e:86:75:86:c4:77:96:72:a2:82:81:ee:29:93:60:
39:c2:48:93:b0:2e:88:74:fc:f7:d6:fd:15:f4:a9:0d:21:3a:
38:a2:30:a7:68:99:c2:9f:19:2e:8d:65:0f:4d:8a:fc:03:1a:
04:2b:7a:6b:b2:f2:b7:b2:80:18:f3:65:ac:7d:4e:47:a3:b2:
b3:f5:0b:70:29:0b:62:c9:c4:70:54:85:1c:b0:1e:1f:17:8f:
9e:64:82:ce:77:31:13:d3:76:48:e7:b6:cd:a9:65:03:2c:dc:
a8:18:df:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:12:17 2026 by rpki-client