Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: ACrgQRi+8U4Y6QQ/VyrtHO2bZjStWKqFtYyuVuCeA8M=
Subject key identifier: 42:E4:17:CD:88:C6:F9:71:1A:56:A6:EB:64:37:69:EB:49:78:0F:14
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 01A08B9F0A6CAB0F60C99FB77138ADE93E0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 08A3
Signing time: Thu 10 Sep 2026 14:00:50 +0000
Manifest this update: Thu 10 Sep 2026 14:00:50 +0000
Manifest next update: Fri 11 Sep 2026 14:00:50 +0000
Files and hashes: 1: CiBYmXE-RogiK1Rw18kHHSv6Lc0.roa (hash: tKtvxHVgjyX0+ghMhYs0J9woVAdgsT0NzRRsOsmIW4c=)
2: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: XNG4DBrcvTLGIL67f9evS/GQjvTmaovW/Juym+R3i6I=)
3: qFCsaANcR70aOKdL9jcGSnp3Nd0.roa (hash: ru6fgoLPFWNbB/rS7n0ntPU242iXsQuLTOqT36UGbKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:0a:6c:ab:0f:60:c9:9f:b7:71:38:ad:e9:3e:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Sep 10 14:00:50 2026 GMT
Not After : Sep 11 14:00:50 2026 GMT
Subject: CN=42e417cd88c6f9711a56a6eb643769eb49780f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8f:80:e3:ca:03:8d:19:fb:50:8c:a1:c6:5a:
0c:43:28:7b:a2:c4:ef:69:d3:71:07:98:d6:2c:97:
72:b7:83:92:9f:a6:28:cf:31:2d:2e:05:ee:c6:f5:
99:b9:30:a9:6b:80:cb:4d:29:0f:b2:34:9d:2e:61:
cf:3c:73:18:75:f6:96:e9:2b:60:83:9b:05:55:3f:
b9:c5:20:37:0f:21:0a:84:d0:18:39:67:64:91:b9:
00:52:70:8c:e4:76:af:69:68:92:98:f9:06:4f:1a:
9c:48:25:23:93:4a:fa:9a:47:80:08:cc:45:b9:bb:
0d:b5:59:d9:de:f2:e5:ad:da:90:45:9a:ea:1a:95:
e1:af:fc:92:9a:91:36:d7:ed:70:8c:6b:5f:6c:31:
95:52:e4:30:7b:0b:9d:dd:c6:de:01:79:54:09:05:
8e:1c:69:cb:3c:ac:1f:fe:3f:5d:c0:18:db:02:5d:
29:e1:b9:df:55:76:ed:9b:76:a7:25:80:74:59:31:
c0:d8:f4:6b:f8:46:6a:87:23:f2:7b:a4:8c:32:36:
2a:47:19:24:61:3f:fa:ea:be:8a:97:69:a6:7d:5b:
e5:7f:d5:12:ac:74:82:0c:50:4b:c9:df:0d:d9:08:
9d:d5:3d:7c:85:52:1a:61:78:1f:60:58:4d:67:3f:
06:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E4:17:CD:88:C6:F9:71:1A:56:A6:EB:64:37:69:EB:49:78:0F:14
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b0:35:96:f9:2b:2c:2d:1d:9e:b0:01:c5:32:eb:03:ab:a0:
32:0c:54:ba:f4:04:01:38:7f:53:02:9d:9e:71:1a:ab:6e:d1:
38:ae:1f:16:17:f1:f9:59:f9:7f:35:ee:a9:bf:ed:2a:7a:43:
eb:92:09:a8:b6:d7:7c:06:f3:d8:b3:ca:b0:07:0a:73:7d:f4:
e8:e3:14:87:ad:63:9c:77:38:70:2d:29:50:d7:c0:49:c8:2a:
a6:23:a0:ba:42:f5:2b:c2:be:63:ba:0a:c7:62:7f:c4:1f:a6:
1d:c5:2e:5f:15:b0:59:e1:8e:00:0a:a9:fe:b9:81:aa:61:47:
e1:85:94:74:49:fd:60:3c:8e:b7:13:da:9a:59:1f:05:74:59:
fe:6e:e4:75:69:21:9b:03:b8:98:28:fd:0f:2e:1e:df:5e:83:
bf:a2:c4:01:98:9c:74:ec:68:91:94:56:2a:4b:46:e2:4e:b9:
5c:4e:7f:3a:19:0d:fc:52:11:83:5f:99:14:6f:71:df:f6:1d:
e6:25:33:9c:1f:31:57:c9:10:8d:b1:ea:1c:8e:22:c6:d4:f4:
56:07:dc:68:d1:8f:97:ef:34:87:1b:29:d1:63:e4:1e:d9:8b:
1c:37:2d:9c:e4:0d:24:cc:65:85:82:10:93:89:9f:4a:26:d1:
23:5f:17:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLnwpsqw9gyZ+3cTit6T4OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwNjk0YTYyMjg2NmFlMTU4ZWQyODdkMjUzM2Q0MGJhYWJl
YTZkN2QwHhcNMjYwOTEwMTQwMDUwWhcNMjYwOTExMTQwMDUwWjAzMTEwLwYDVQQD
Eyg0MmU0MTdjZDg4YzZmOTcxMWE1NmE2ZWI2NDM3NjllYjQ5NzgwZjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI+A48oDjRn7UIyhxloMQyh7osTv
adNxB5jWLJdyt4OSn6YozzEtLgXuxvWZuTCpa4DLTSkPsjSdLmHPPHMYdfaW6Stg
g5sFVT+5xSA3DyEKhNAYOWdkkbkAUnCM5HavaWiSmPkGTxqcSCUjk0r6mkeACMxF
ubsNtVnZ3vLlrdqQRZrqGpXhr/ySmpE21+1wjGtfbDGVUuQwewud3cbeAXlUCQWO
HGnLPKwf/j9dwBjbAl0p4bnfVXbtm3anJYB0WTHA2PRr+EZqhyPye6SMMjYqRxkk
YT/66r6Kl2mmfVvlf9USrHSCDFBLyd8N2Qid1T18hVIaYXgfYFhNZz8GrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELkF82IxvlxGlam62Q3aetJeA8UMB8GA1UdIwQY
MBaAFJBpSmIoZq4VjtKH0lM9QLqr6m19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iOWUyZjctMjFkYy00MmMwLTk0YjAt
MTNjMGE2MzNlOWY0LzEva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iOWUyZjctMjFkYy00MmMwLTk0YjAtMTNjMGE2MzNlOWY0
LzEva0dsS1lpaG1yaFdPMG9mU1V6MUF1cXZxYlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7A1lvkr
LC0dnrABxTLrA6ugMgxUuvQEATh/UwKdnnEaq27ROK4fFhfx+Vn5fzXuqb/tKnpD
65IJqLbXfAbz2LPKsAcKc3306OMUh61jnHc4cC0pUNfAScgqpiOgukL1K8K+Y7oK
x2J/xB+mHcUuXxWwWeGOAAqp/rmBqmFH4YWUdEn9YDyOtxPamlkfBXRZ/m7kdWkh
mwO4mCj9Dy4e316Dv6LEAZicdOxokZRWKktG4k65XE5/OhkN/FIRg1+ZFG9x3/Yd
5iUznB8xV8kQjbHqHI4ixtT0VgfcaNGPl+80hxsp0WPkHtmLHDctnOQNJMxlhYIQ
k4mfSibRI18XrQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:46:50 2026 by rpki-client