Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
File: kuDCRw6wpptO-lhbnLLAZ2ErN54.mft (raw, json)
Hash identifier: P94+xGATHpW9Nt330GJ/Gt+VlKGqR8YlnFlDOpBTya0=
Subject key identifier: F5:6C:1B:E2:A6:B3:61:E3:5A:13:EA:4F:F6:97:13:E5:7E:D4:FD:77
Authority key identifier: 92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
Certificate issuer: /CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Certificate serial: 01A0E69A26773E6A2F8B17A44477767AC096
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
Manifest number: 1A7B
Signing time: Mon 28 Sep 2026 06:00:56 +0000
Manifest this update: Mon 28 Sep 2026 06:00:56 +0000
Manifest next update: Tue 29 Sep 2026 06:00:56 +0000
Files and hashes: 1: C2qg2Q6lbBzdlBnvS6yqtgeY3uk.roa (hash: ijJYNodWqQV5uQq7Q5J14Dvs1Q1uxMUsTbwAGiSXPAc=)
2: Ptq95uhMbMRV3wAcH1JO0MsySQU.asa (hash: X5wo7l/IsXDPTJJiO2prPaJNo3fg+PfsZU7kiiBt/b8=)
3: kuDCRw6wpptO-lhbnLLAZ2ErN54.crl (hash: 1FA0Szx32G4eQMKqOM6AO6l09swE4yD/LeIfvereLNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:9a:26:77:3e:6a:2f:8b:17:a4:44:77:76:7a:c0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Validity
Not Before: Sep 28 06:00:56 2026 GMT
Not After : Sep 29 06:00:56 2026 GMT
Subject: CN=f56c1be2a6b361e35a13ea4ff69713e57ed4fd77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c4:3a:68:ef:2e:62:53:5f:46:83:72:d2:ee:
a3:5b:34:d2:e8:b1:9e:e2:69:8d:f8:55:92:a5:35:
34:15:aa:49:7e:90:91:d4:fc:13:c4:44:a0:8a:e0:
d7:38:6f:8e:ea:87:f1:65:5a:8c:00:60:db:82:d6:
2f:e3:bf:1d:77:9b:c2:b5:ce:1e:be:2a:af:8c:b4:
3b:33:f2:8b:4b:b9:60:be:41:ba:04:93:f4:5f:62:
f7:ab:4b:f1:eb:43:f5:af:19:2f:e0:63:d0:ec:2b:
12:df:78:bb:25:2e:e7:ae:ea:ce:87:ed:ac:e8:43:
aa:6c:e5:89:6f:bc:b7:22:d5:2f:0d:b9:5d:2e:8d:
a0:71:11:18:fc:0d:10:e8:47:7e:cb:62:28:aa:97:
f2:71:c7:ab:3c:1d:e6:7a:14:3c:14:a0:ab:76:71:
16:14:a8:a8:7f:65:8f:3a:c9:b2:56:5c:87:be:9b:
99:ee:3d:bf:1b:c9:e2:36:71:67:b3:58:15:ab:76:
f6:12:e0:72:7e:fc:c7:0b:65:b9:4c:58:a2:ba:fe:
ae:22:7d:ee:14:71:e4:76:1a:8b:09:87:4f:80:d0:
a0:e0:45:5d:40:03:34:ff:ea:53:5c:f1:7b:c1:38:
ac:ab:fe:3c:84:ba:fb:03:17:bc:4f:62:c3:aa:69:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6C:1B:E2:A6:B3:61:E3:5A:13:EA:4F:F6:97:13:E5:7E:D4:FD:77
X509v3 Authority Key Identifier:
keyid:92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:60:75:bd:0c:8d:e1:a8:f6:2b:3b:d0:bb:5f:3a:06:b2:99:
c0:fa:d7:af:f4:7b:e1:25:54:a7:17:49:f9:0e:79:23:39:fa:
c0:ee:f9:cf:1d:cf:29:38:97:8c:94:c9:e1:12:c1:19:ea:57:
a4:01:a6:f4:38:fb:e7:10:d1:44:ec:ff:79:8b:79:6d:64:f6:
65:8a:e1:a4:f0:2c:14:aa:f3:b9:66:3e:05:17:6a:6f:d5:74:
46:31:be:e6:d3:9d:1e:c1:ed:d4:4c:7a:f1:0d:eb:d2:ae:99:
01:e6:87:42:94:02:40:f8:f1:dc:e9:e4:b2:1d:fb:d1:41:c5:
b2:6b:d2:36:b2:65:cc:02:ce:a6:c1:e1:9b:4d:b5:b3:f5:d3:
e0:81:e1:1d:09:de:0e:6f:ef:d7:7f:bb:a3:77:af:82:a2:ec:
b1:cc:c7:2b:b9:18:e3:cf:bb:89:33:e9:5e:19:a8:b5:6f:37:
e0:33:ee:1e:3d:f5:ad:32:91:57:51:23:2e:6b:5c:e6:08:c6:
37:2f:22:82:09:68:ae:8a:df:e4:61:a7:60:38:5e:9e:3f:a8:
66:3f:1f:ef:05:fc:82:5f:da:25:12:e2:8f:cc:61:22:7a:a1:
25:55:0e:b0:dc:ab:cb:63:6f:9f:32:5d:86:9a:bd:68:b5:77:
c2:cd:be:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 15:49:03 2026 by rpki-client