Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
File: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json)
Hash identifier: TO0BSBDZPMNp5jLfZj1SbF7FbO3ddGkkLg/fL+DSK6I=
Subject key identifier: DE:BB:70:DF:E3:71:17:55:9B:56:A2:C9:2A:12:BD:91:47:6B:4C:0A
Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Certificate serial: 01A08D1FEC88487724924A08D216C326EF72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 21:01:14 +0000
Manifest this update: Thu 10 Sep 2026 21:01:14 +0000
Manifest next update: Fri 11 Sep 2026 21:01:14 +0000
Files and hashes: 1: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: KZlzCq8BPIU3QKJ2JuvyThFWlezIbwCNQ0XG5V+oTnM=)
2: xa8hNYnY5YtZ3lvhBoGXHaoWdZs.roa (hash: cfTBRZqteMXbej9rAKnDcge1IuDIIPwXFt2wZ9TtEP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:ec:88:48:77:24:92:4a:08:d2:16:c3:26:ef:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Validity
Not Before: Sep 10 21:01:14 2026 GMT
Not After : Sep 11 21:01:14 2026 GMT
Subject: CN=debb70dfe37117559b56a2c92a12bd91476b4c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:66:37:9e:27:a8:32:33:ec:05:8d:0e:bf:
fd:b2:2b:cc:4d:db:81:b9:7a:91:ea:9b:ae:60:d0:
c2:7b:d3:e1:08:1a:0b:fc:e5:b4:62:17:82:f3:d4:
8d:28:64:ed:c7:e1:16:d5:3f:c9:d2:24:7b:92:d0:
26:0e:02:6f:18:81:76:81:73:e5:74:76:c4:7b:ab:
b5:41:bb:24:8d:db:d6:d2:00:08:e1:6e:1b:c6:1c:
7b:0b:c0:5a:48:6f:32:19:21:68:eb:33:54:fa:76:
b8:04:6b:42:fa:7c:fe:6a:9c:0c:04:3d:dd:bf:ec:
01:f5:a2:d0:0e:0b:fa:8f:cc:6c:23:da:82:ed:94:
66:4c:9d:13:7e:61:0b:3c:8e:2e:fb:fe:b8:03:f3:
44:7c:5d:b6:0e:86:ca:ce:72:49:9b:0d:65:2d:6a:
4f:23:6d:a4:72:1c:5e:af:f2:36:c7:19:f8:b5:ac:
21:b2:41:d0:3d:95:a4:1f:f2:c8:67:26:c2:e1:ac:
51:bf:c2:6d:16:c5:08:f5:15:c8:d6:53:92:83:4c:
a8:96:0c:d1:47:a5:d7:3a:d4:06:f7:f7:21:1e:46:
26:70:31:47:5f:78:bc:f0:4b:5a:dd:09:4d:b6:5b:
f0:5e:76:02:1a:d1:c1:45:37:7c:00:1c:2b:49:ec:
62:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:BB:70:DF:E3:71:17:55:9B:56:A2:C9:2A:12:BD:91:47:6B:4C:0A
X509v3 Authority Key Identifier:
keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:30:0a:7a:69:fb:d8:5b:98:45:b2:82:72:a3:08:e4:21:75:
13:23:a6:42:2e:77:49:07:0d:b4:f3:54:9a:02:63:4a:70:3a:
fb:f4:29:47:99:e8:12:7c:ce:d6:3d:ae:0b:2b:25:de:94:ae:
2f:34:0d:0f:81:39:84:9b:07:d6:cc:e7:d8:d1:52:5b:c4:4e:
d5:9b:aa:cc:0d:c7:d6:2b:70:bb:f7:f2:35:9f:99:a0:51:64:
9f:dd:0a:5a:db:b6:ac:d0:6b:3d:04:09:9b:4b:37:ee:2e:5b:
0e:ae:6e:e5:11:67:08:00:cf:82:d7:91:99:2b:03:39:44:38:
13:e3:22:e9:73:b2:e6:cf:fb:62:59:5b:d5:45:10:49:65:0b:
47:32:3f:17:26:9f:b6:b2:14:a3:c7:b2:5e:8b:c2:6e:f8:f6:
56:55:d7:2a:3c:b7:fe:c0:a4:9d:1c:b9:06:ad:04:6a:0a:14:
3a:f4:2e:88:03:e1:10:75:2f:ed:2f:a2:01:ac:06:02:c0:93:
36:91:ce:df:a7:49:c5:95:81:13:05:47:54:38:2d:12:ee:eb:
58:eb:ee:c7:fe:1e:80:68:d0:b2:6e:26:83:30:f8:31:15:54:
fe:94:69:6f:81:1d:d4:23:f7:74:09:a1:06:cf:0b:3c:40:c5:
9e:6a:f7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:50:03 2026 by rpki-client