Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: 23tUyjvZ2QhtN0piEmQkoOEw/3oQxhvr4ajC+RK0L3I=
Subject key identifier: C0:E6:8D:25:B5:3A:78:25:F7:EC:BF:67:FA:47:79:5A:F5:BE:91:90
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 01A180E2085847B86A73195D04B446415AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 0922
Signing time: Wed 28 Oct 2026 05:00:59 +0000
Manifest this update: Wed 28 Oct 2026 05:00:59 +0000
Manifest next update: Thu 29 Oct 2026 05:00:59 +0000
Files and hashes: 1: CiBYmXE-RogiK1Rw18kHHSv6Lc0.roa (hash: tKtvxHVgjyX0+ghMhYs0J9woVAdgsT0NzRRsOsmIW4c=)
2: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: DUGnZSvvDhlCORdW2gR1T474nmOaHj3TQPI/GXtgoe4=)
3: qFCsaANcR70aOKdL9jcGSnp3Nd0.roa (hash: ru6fgoLPFWNbB/rS7n0ntPU242iXsQuLTOqT36UGbKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:08:58:47:b8:6a:73:19:5d:04:b4:46:41:5a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Oct 28 05:00:59 2026 GMT
Not After : Oct 29 05:00:59 2026 GMT
Subject: CN=c0e68d25b53a7825f7ecbf67fa47795af5be9190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fc:cb:cf:bf:39:23:b6:98:f7:9c:47:a5:3e:
0e:ff:df:a9:77:29:8e:99:98:14:fd:54:0b:e8:63:
64:dd:f0:d5:e4:39:16:a2:1b:4f:bb:3e:3b:08:a4:
ae:9e:0a:8c:0e:4a:77:a4:0f:10:86:62:12:6f:4a:
a5:b8:cc:b5:ed:0f:c1:52:07:0e:82:5e:b1:2a:b2:
df:9f:7a:92:95:18:6c:0f:97:a7:8c:d1:ba:32:b5:
03:0a:35:d1:34:b7:14:fb:1d:d0:44:ce:6f:42:36:
0c:51:7e:ec:38:65:e5:d7:73:88:3e:a1:57:46:f0:
67:91:c6:76:ba:8b:f5:5b:8d:bb:cf:c1:33:ee:f4:
43:af:b3:4b:35:fe:cc:a6:d6:1c:3d:04:49:c5:a9:
a9:83:77:92:a2:b6:e6:a4:4d:ea:35:b5:85:78:ad:
f2:b1:2f:5a:73:4a:3e:26:c8:1a:ec:11:05:42:3b:
07:8f:31:76:9f:7f:28:0d:fc:70:66:3f:38:51:15:
48:f8:f9:84:e9:5c:9e:58:18:38:57:d9:41:b9:77:
0e:cd:4b:a9:c8:b2:b5:e7:41:23:f0:03:d4:dd:cf:
0d:5f:4c:ae:b3:e9:12:21:ca:9d:26:a4:e6:77:c1:
80:4e:f2:4d:c0:99:4c:47:25:8b:49:07:45:4a:2b:
b7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E6:8D:25:B5:3A:78:25:F7:EC:BF:67:FA:47:79:5A:F5:BE:91:90
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:bb:f4:af:6c:d7:42:13:ec:01:13:70:2c:9a:38:c4:f3:b3:
03:dc:49:ed:32:81:b2:e2:d3:0d:04:e6:dd:f0:10:5d:34:75:
cc:e8:65:2a:06:be:be:36:2b:51:90:8a:ef:5b:5e:e8:ac:8d:
93:8e:ec:4c:62:d2:6c:f5:ec:cf:8b:53:2f:4c:7e:12:39:bc:
27:90:a2:de:a4:ec:d5:91:b7:c7:4c:78:f6:16:d9:ac:1b:63:
ca:d7:fd:ce:bd:a7:fc:a6:19:6e:2e:c5:24:b3:0c:de:2f:cd:
d3:b9:e4:75:a3:da:f7:c6:81:86:2d:ef:ae:6b:30:4f:f7:9d:
1e:e3:d8:43:c5:9d:06:f5:a0:0b:30:59:fc:4d:4e:1d:04:fa:
39:b6:b0:50:4e:37:eb:5e:9f:0c:b6:93:32:6a:8a:f1:ff:5a:
2f:f9:8f:bf:80:ad:d6:98:e2:88:cb:34:90:c4:8c:e4:12:59:
3a:a7:f5:39:f8:1d:3e:1c:4a:a2:f9:2a:a9:b8:16:d8:d3:ea:
28:91:68:57:cd:4a:20:13:3c:2b:a4:d1:2d:5e:29:52:d2:86:
7c:85:94:4b:a2:e4:fb:07:b0:a2:82:77:4f:a0:2a:65:49:b2:
22:c5:49:33:56:2c:b6:a4:4a:05:74:79:e7:aa:2e:a1:b3:fd:
2c:c5:0f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:20:37 2026 by rpki-client