Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
File: kR2gx6mUBcRrqthMudk-g0WZyOE.mft (raw, json)
Hash identifier: OS6xj2SyNhpzsTeCskgfT8ur9jO//oAoti6SPM5CBk8=
Subject key identifier: 0E:BF:A1:E3:4C:38:2A:8B:90:DC:BD:E4:3A:23:3A:D1:7A:52:2F:03
Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Certificate serial: 01A0B162F3172130D1E6BC65410A8BAA42E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
Manifest number: 1A5D
Signing time: Thu 17 Sep 2026 22:00:47 +0000
Manifest this update: Thu 17 Sep 2026 22:00:47 +0000
Manifest next update: Fri 18 Sep 2026 22:00:47 +0000
Files and hashes: 1: 0kE9whcbqDZPFxCT664hh63BKUs.roa (hash: 5C4ga/+QHi4o11rdDpXGfOfWtVfwE8VOC9vvm4vn/b4=)
2: kR2gx6mUBcRrqthMudk-g0WZyOE.crl (hash: omMDhkclN5+85eVFQrI312qDM9tVyaU5AkONj6rRZas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:62:f3:17:21:30:d1:e6:bc:65:41:0a:8b:aa:42:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Validity
Not Before: Sep 17 22:00:47 2026 GMT
Not After : Sep 18 22:00:47 2026 GMT
Subject: CN=0ebfa1e34c382a8b90dcbde43a233ad17a522f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4e:34:b5:b0:0d:73:c9:80:e0:66:3c:52:eb:
bf:26:80:34:3d:59:12:0c:33:cb:3e:30:28:63:1f:
87:6b:84:61:c5:09:b8:2a:bc:03:3b:57:bf:2c:5d:
9c:47:e1:c0:60:a8:50:b3:bc:9d:75:96:2a:ba:7e:
01:55:c0:4d:56:60:f1:e1:a2:1b:c4:8f:50:24:52:
3e:cb:34:45:9a:65:cf:99:b6:cf:ba:ad:2f:3a:e7:
dd:e1:1d:76:fd:ac:11:b9:c8:d8:6e:aa:bb:a7:5b:
76:01:0c:7a:ca:d3:8f:80:f8:41:d1:e1:08:4c:c2:
72:55:94:6d:f5:db:47:b8:19:ed:3f:d6:be:c3:14:
d6:2d:85:30:39:4a:7d:6c:26:11:34:ab:de:93:84:
57:55:05:12:ea:4b:3c:99:31:c6:ec:7a:f6:2d:d8:
3d:fd:8a:90:ee:aa:29:42:7c:b4:9d:9c:fe:72:78:
51:ae:d2:54:20:19:85:b9:69:32:e2:d6:be:0d:83:
fd:21:2f:c1:53:2b:53:2a:63:29:7c:d7:68:5d:45:
90:3f:e2:1d:7c:28:0b:9f:76:26:78:c7:40:7c:0c:
09:a0:38:c1:b2:bb:67:2a:b3:75:f4:4a:d1:20:9b:
a1:2c:91:7b:e5:ce:15:06:a2:33:27:a8:68:5b:88:
ec:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BF:A1:E3:4C:38:2A:8B:90:DC:BD:E4:3A:23:3A:D1:7A:52:2F:03
X509v3 Authority Key Identifier:
keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0b:14:c4:ae:86:07:7e:06:fe:f0:18:d3:bb:1c:f3:b9:20:
b6:13:89:64:28:59:e5:67:3c:15:35:73:e4:18:48:db:03:51:
cc:c2:4f:05:b3:e7:ec:9b:22:61:25:b3:b8:aa:c1:d2:0f:15:
e4:09:0d:70:87:ba:06:5c:87:64:78:dd:38:81:0b:25:60:ec:
de:78:4a:83:c3:5b:95:63:13:24:5b:ea:90:cc:2e:a3:1c:36:
57:50:ad:21:6c:65:10:dc:f5:c6:ff:39:3f:7c:94:13:94:5a:
2f:0b:1a:af:1b:61:31:80:b2:92:64:8f:c6:b7:5a:4a:df:15:
e9:c1:c2:39:19:e1:be:ac:a2:29:e9:c6:ec:c1:c8:30:45:a9:
ce:2b:a1:1d:14:a4:4c:38:a7:34:b7:89:f7:c7:eb:20:33:e3:
30:aa:a4:55:93:ee:e2:03:5c:66:01:c4:f4:c8:de:dd:7f:d7:
18:80:d8:ee:49:88:ab:26:c9:a8:a4:bd:fd:7a:f2:4c:f3:55:
39:9b:07:46:4e:71:27:5d:a0:a1:d1:54:92:88:20:27:99:bf:
1d:39:85:97:c7:8e:33:50:57:b4:26:0c:60:81:e1:92:04:24:
3f:80:09:0a:11:fd:99:e0:9f:75:3a:2f:77:d5:dd:2a:87:ec:
f2:89:2f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 02:29:36 2026 by rpki-client