Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: o3/i6ebpWXuPPfss+QSG9m8GgMQa/lEXCpwm/FMFDds=
Subject key identifier: 59:E2:76:85:B2:59:2E:34:02:6E:F8:10:99:5D:6E:7C:0D:C2:89:CC
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 01A0442ADAE09B6E1C8ECEDFBE73B6A5EF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 1A24
Signing time: Thu 27 Aug 2026 17:00:54 +0000
Manifest this update: Thu 27 Aug 2026 17:00:54 +0000
Manifest next update: Fri 28 Aug 2026 17:00:54 +0000
Files and hashes: 1: 8JbX4W9CpZR4sp8oXbshsMu3qhg.roa (hash: hCHQyL16C72+1THFmVb/zaNecTBJgYxVKSF0WwCJuaU=)
2: AVx1s96DRHZcCwdlQg5COsBPl7g.asa (hash: wYwV0iDMhs5FKfv+LLpy2aNRbVxO/Y+rGm83NlQ+S24=)
3: BiY8FkJ6QhxFh-KpB3NsT2LpAnQ.roa (hash: ube55hCllmSHhMFruM84ELj1ZKtITmMvONboq60emvo=)
4: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: 1r3rjZ+iF2fTCiZRHuV03Hgl3HseQN0K9cMb+T5IDtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 14:04:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:2a:da:e0:9b:6e:1c:8e:ce:df:be:73:b6:a5:ef:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Aug 27 17:00:54 2026 GMT
Not After : Aug 28 17:00:54 2026 GMT
Subject: CN=59e27685b2592e34026ef810995d6e7c0dc289cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:5e:6b:38:67:27:25:cf:29:16:f9:5d:ce:
7c:88:d4:3e:b7:6c:9b:94:71:5a:29:74:45:e9:18:
ad:e1:f0:12:f8:36:a4:e2:d5:c0:e0:9d:26:32:9d:
5e:3d:dc:a5:eb:da:9e:fc:b9:22:52:d1:4b:23:a6:
e5:39:83:d0:49:28:33:66:c3:f9:93:f5:72:a0:b8:
e7:5b:5f:22:9b:1c:19:e1:b3:f3:d8:d2:3e:7b:4a:
25:68:c8:ff:07:54:4a:f8:e8:fa:6a:2c:4c:3e:94:
7f:16:73:a1:2c:64:ee:6f:b9:9c:82:73:cb:00:a2:
ed:f8:b7:6d:2f:74:6d:a3:7a:72:9e:b2:a4:78:94:
20:78:ab:03:83:ca:42:7c:e4:3e:47:06:53:2a:60:
b5:ca:34:d5:6e:bb:49:71:58:a8:d8:c0:a0:49:17:
83:09:bb:3d:f8:9c:11:37:c6:b3:c0:f3:86:35:95:
53:17:91:09:e5:fb:b6:cf:2d:ff:e8:a3:e2:d4:a0:
4c:d6:3c:b9:32:3e:1b:bb:7a:0d:a9:60:e7:01:08:
d2:7a:1c:73:dc:20:cc:61:55:a1:6e:9d:dc:b0:a8:
00:ca:4e:89:c8:e7:e0:15:4c:72:fc:46:a6:79:16:
4e:be:3c:81:1b:29:db:bb:fe:08:76:ef:44:2d:78:
de:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:E2:76:85:B2:59:2E:34:02:6E:F8:10:99:5D:6E:7C:0D:C2:89:CC
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:57:c2:97:38:d1:36:df:c3:42:87:4f:16:1c:4b:e9:0f:75:
7e:58:1d:2f:0c:3d:99:04:3d:33:fb:24:84:fb:f9:b9:56:c8:
f3:69:cd:9a:2d:3a:f6:9b:86:1f:15:0a:c1:68:c4:23:e3:fe:
66:96:00:7c:b7:dd:cf:dd:ee:8c:04:7a:ea:67:54:e2:3b:e2:
59:17:29:12:0b:d1:86:b4:bb:4a:6b:b4:6f:e2:b3:e5:9e:90:
d0:f8:c1:19:6a:43:62:63:03:e4:87:60:17:fb:54:3f:52:8b:
ff:bc:81:60:9d:21:37:74:5b:ee:5e:89:f8:a4:3c:52:80:3e:
f8:55:54:bb:43:18:7d:9e:61:73:ae:74:cb:13:1e:99:c9:02:
bc:ec:d5:0f:6c:75:7a:ca:ab:06:14:ef:b5:0e:36:86:e1:29:
ce:ce:46:e7:86:f3:36:e0:e6:51:c9:61:d4:cf:04:13:91:53:
fe:20:39:78:61:f8:56:24:c9:1c:a4:66:6a:23:44:86:9a:33:
b6:a0:28:7a:9e:45:6a:84:3f:0b:4b:68:ad:72:5e:8a:07:9b:
7f:37:bf:4a:84:67:ab:3a:5f:69:c9:02:33:f4:fa:ad:55:39:
fd:b1:2e:67:3e:52:51:b7:8c:4f:14:62:f2:14:fb:98:e8:8b:
71:24:1a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 20:02:08 2026 by rpki-client