Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft
File: kpbYTmTVXsgSR2-4BvD-daCL-ys.mft (raw, json)
Hash identifier: l3s1M9RdrdqmAJNzVX/ap+BwjE5WNZ/WZ5W87JJXeP8=
Subject key identifier: 3F:C6:D0:9B:3E:4E:3F:5B:FD:1A:00:43:2F:7D:B5:A1:2D:F6:09:DF
Authority key identifier: 92:96:D8:4E:64:D5:5E:C8:12:47:6F:B8:06:F0:FE:75:A0:8B:FB:2B
Certificate issuer: /CN=9296d84e64d55ec812476fb806f0fe75a08bfb2b
Certificate serial: 01A06E02A453AC15DC9803F367EA6A19DD71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpbYTmTVXsgSR2-4BvD-daCL-ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft
Manifest number: 1A3A
Signing time: Fri 04 Sep 2026 20:01:01 +0000
Manifest this update: Fri 04 Sep 2026 20:01:01 +0000
Manifest next update: Sat 05 Sep 2026 20:01:01 +0000
Files and hashes: 1: WMTxNqy5dxe24um7JtSXmDnNRnM.roa (hash: TxZKxHcS8Fj+JFe1cwBosTBaRiZeeZ2HacumzoOW+L8=)
2: kpbYTmTVXsgSR2-4BvD-daCL-ys.crl (hash: veuojZHvAagnQRiuO3cvpcAv29g24RvEm97a6mXdREE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpbYTmTVXsgSR2-4BvD-daCL-ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:02:a4:53:ac:15:dc:98:03:f3:67:ea:6a:19:dd:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9296d84e64d55ec812476fb806f0fe75a08bfb2b
Validity
Not Before: Sep 4 20:01:01 2026 GMT
Not After : Sep 5 20:01:01 2026 GMT
Subject: CN=3fc6d09b3e4e3f5bfd1a00432f7db5a12df609df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a3:d7:42:16:40:2d:67:60:bc:d2:10:6a:ed:
5f:b8:53:ce:5d:15:1c:bd:c0:4b:59:e7:38:9e:bb:
06:c9:a7:90:6b:f3:54:13:f4:1e:f8:e6:45:86:17:
0c:5a:86:ad:66:95:82:77:f3:6c:af:11:fe:f2:0e:
78:e0:9a:c9:79:71:9f:d0:24:1e:1f:91:3e:0e:cf:
6d:42:b0:d2:0f:f9:83:2e:fe:2d:02:71:04:31:86:
36:54:2a:30:43:fd:6e:1a:3f:de:94:1f:76:d3:5b:
c0:4d:f5:25:b9:94:66:a0:35:fa:df:b8:8e:e2:b9:
59:74:98:4f:a2:28:ea:73:35:49:f1:57:3a:dd:77:
28:b9:cd:05:5e:ba:03:1a:7e:5f:34:e9:c6:e9:d6:
9b:45:19:52:48:1a:f0:de:21:7d:b2:a4:c1:bc:a7:
75:45:87:b9:fc:01:35:2d:34:06:35:03:54:16:b8:
ff:80:99:94:a5:15:b7:d1:80:61:3d:94:cb:d1:8a:
5b:09:f8:72:0a:68:a3:6a:01:5a:59:7d:7e:b0:90:
7b:a4:4a:22:ad:18:f4:b7:4d:8c:a6:15:f0:80:1c:
36:f3:e7:7c:22:52:ee:8f:29:1a:6a:7a:86:a4:08:
4d:7b:80:6b:5f:b8:e7:80:3f:70:b6:c7:ac:d6:24:
d3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C6:D0:9B:3E:4E:3F:5B:FD:1A:00:43:2F:7D:B5:A1:2D:F6:09:DF
X509v3 Authority Key Identifier:
keyid:92:96:D8:4E:64:D5:5E:C8:12:47:6F:B8:06:F0:FE:75:A0:8B:FB:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpbYTmTVXsgSR2-4BvD-daCL-ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:2e:d0:7d:41:91:54:61:d1:52:c3:81:f8:a6:15:9b:a9:52:
4f:ec:af:4e:58:4e:71:e4:8e:7d:60:82:b8:10:4f:20:83:09:
d9:71:0d:48:b1:0c:fa:05:80:bf:e6:16:66:fa:f7:88:b8:85:
bf:ae:2d:ff:42:13:86:92:9d:7e:30:65:2b:13:2b:d0:cd:ab:
68:ad:b3:ca:48:e3:79:38:31:c1:12:61:17:0d:ef:67:a7:3a:
b9:74:13:62:10:04:36:0b:0b:eb:5c:9a:fa:da:30:25:21:a9:
55:1e:a3:fb:b8:e4:e7:03:c5:8a:d2:d1:d8:1e:d8:91:ad:58:
2a:7c:aa:39:6a:c6:94:66:cf:c3:f3:0d:c5:98:7b:cc:74:26:
09:e9:ef:65:63:09:b0:b1:fc:9a:5b:b2:b1:c0:30:23:63:7d:
b5:75:92:b7:73:3e:93:5b:3f:3e:77:e0:5a:91:7e:a9:e1:d2:
0b:7c:76:68:a0:db:6f:84:70:9e:e8:94:96:8f:2f:24:f6:d0:
44:71:66:59:59:38:80:43:46:e6:a9:ce:c8:d3:60:68:ba:c3:
02:6c:d7:8b:30:11:b2:6f:57:9e:c8:c4:79:8e:a3:86:c3:c1:
ff:4b:b0:02:ea:66:56:e4:af:05:73:8f:8b:a8:be:ba:90:b1:
45:94:c3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:24:55 2026 by rpki-client