Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
File: kLihVGbD_x6RXXgKELC6qa1pSGA.mft (raw, json)
Hash identifier: 1120l/IsRPls1uKtbzDuOHPbLeBTNFVijeAfAJuVd2Q=
Subject key identifier: 5E:8C:16:EE:66:AF:A7:43:AB:97:C5:1A:87:59:7E:49:39:9B:11:16
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial: 01A1890918BC720FBA4DC0B6850360B17C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
Manifest number: 1A35
Signing time: Thu 29 Oct 2026 19:00:36 +0000
Manifest this update: Thu 29 Oct 2026 19:00:36 +0000
Manifest next update: Fri 30 Oct 2026 19:00:36 +0000
Files and hashes: 1: ICviYrqnuR5iE5mrtmyNCWi-jQQ.roa (hash: pYmIQYvBOAoLzP63yxZwD5AKPB0JekK4kO0OzrdUlpE=)
2: kLihVGbD_x6RXXgKELC6qa1pSGA.crl (hash: o26J4kQ6V67kt0G/eo9a6C5SrYwMsrsHkrKSyFv0EHE=)
3: lX8ec-kHtYQc2eYxJReNoElbToQ.roa (hash: 6QTzsEZgHNywYoD3IZ6Z740+HwWFg/g5EfVeUxTu8gQ=)
4: nkpvLNtZfesu2uM6_Bmgg8CgmdM.roa (hash: eebZVUFclHYl/xNS3jIW8oNgi3gVg03bFj8wnZMugsg=)
5: y6FPGhs0Ss6vJphqQXiX0e2wQdg.roa (hash: nRUF1yLs0gzZVnAltxQkhe0KlScioNi5NL99DbX38f8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 19:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:09:18:bc:72:0f:ba:4d:c0:b6:85:03:60:b1:7c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Validity
Not Before: Oct 29 19:00:36 2026 GMT
Not After : Oct 30 19:00:36 2026 GMT
Subject: CN=5e8c16ee66afa743ab97c51a87597e49399b1116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:0f:76:91:5e:a6:f1:ad:46:3d:76:0c:d1:
66:7c:89:3f:6d:38:25:19:9d:d1:1c:61:c8:13:da:
eb:66:ab:2b:32:ed:30:6d:c2:e7:3b:6a:1f:d0:16:
e8:3c:a4:d5:0d:6a:d7:dc:d0:11:4b:ce:e9:72:27:
fa:5b:6e:08:64:cd:43:b7:78:8b:9a:29:01:3b:ab:
f9:a0:71:88:f4:d4:d4:6b:db:c7:eb:c5:42:53:e8:
53:48:96:e0:a8:02:ab:d7:3f:d6:79:9e:61:cc:17:
69:69:da:c4:6e:ac:4f:0e:f3:2d:04:2a:8d:fd:53:
37:42:3d:a4:27:aa:08:c7:d0:b8:99:b6:a3:20:e3:
8f:78:54:5c:eb:12:ee:28:ad:65:b4:e1:5e:29:9d:
51:c3:bd:ca:4c:c6:d4:d2:cc:5b:94:e5:d2:be:06:
00:61:2a:bf:50:8e:6a:07:51:d5:cb:a3:0a:d2:54:
d3:ad:1d:9c:c8:77:4d:36:77:b4:6a:d5:ab:01:37:
37:dc:99:e5:6c:21:f3:e7:5c:2f:21:d7:e5:35:f4:
3a:ba:1b:3c:3d:36:75:df:1b:97:d2:71:3b:70:e0:
6d:5d:9f:47:3b:b5:ba:01:c4:35:b9:42:4f:07:37:
3e:29:f2:1a:3e:fa:5b:a8:c4:a7:3b:07:e5:60:d8:
8d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8C:16:EE:66:AF:A7:43:AB:97:C5:1A:87:59:7E:49:39:9B:11:16
X509v3 Authority Key Identifier:
keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9b:5a:32:06:95:f6:aa:f6:10:b3:6f:ef:e5:cf:8e:d6:6b:
97:0c:20:2e:37:01:d4:97:63:7f:d2:41:6a:37:68:54:0a:d2:
62:2e:f7:86:70:73:e9:3f:0f:83:99:21:74:ea:c9:d9:3b:91:
b1:9b:9c:e4:f0:01:b7:5f:14:26:7f:41:93:68:78:12:2e:26:
61:9b:d7:f6:cb:2d:6a:5d:ad:88:de:1a:a9:88:0d:30:16:6e:
7c:68:cb:c5:ab:e3:42:f3:aa:41:17:cf:3f:ba:36:3f:8b:a6:
02:1d:66:5f:cc:de:b4:ee:fd:a7:d2:74:bd:e0:c6:9f:0a:df:
62:76:c5:ca:5f:b4:ed:f9:aa:35:e8:78:f0:9a:d5:c7:9f:01:
51:af:b4:11:24:57:f1:33:b8:95:c6:bb:9d:66:eb:f8:69:8f:
a5:96:c3:ee:82:6d:08:f5:c9:a9:7d:e6:28:5c:a3:09:7f:19:
5e:72:49:96:dd:16:c0:59:31:15:25:bb:4e:a0:ed:57:5e:1d:
db:b8:9a:0b:fb:cb:db:57:eb:25:62:71:4a:0c:5e:f1:79:58:
09:c8:58:d0:1d:54:da:55:8f:0d:24:cb:f6:ea:d2:2a:8e:f4:
87:0e:e2:d3:30:e3:a8:3e:71:f3:b3:09:81:28:bf:0a:52:ea:
d9:60:ae:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGJCRi8cg+6TcC2hQNgsXxhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYjhhMTU0NjZjM2ZmMWU5MTVkNzgwYTEwYjBiYWE5YWQ2
OTQ4NjAwHhcNMjYxMDI5MTkwMDM2WhcNMjYxMDMwMTkwMDM2WjAzMTEwLwYDVQQD
Eyg1ZThjMTZlZTY2YWZhNzQzYWI5N2M1MWE4NzU5N2U0OTM5OWIxMTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpUPdpFepvGtRj12DNFmfIk/bTgl
GZ3RHGHIE9rrZqsrMu0wbcLnO2of0BboPKTVDWrX3NARS87pcif6W24IZM1Dt3iL
mikBO6v5oHGI9NTUa9vH68VCU+hTSJbgqAKr1z/WeZ5hzBdpadrEbqxPDvMtBCqN
/VM3Qj2kJ6oIx9C4mbajIOOPeFRc6xLuKK1ltOFeKZ1Rw73KTMbU0sxblOXSvgYA
YSq/UI5qB1HVy6MK0lTTrR2cyHdNNne0atWrATc33JnlbCHz51wvIdflNfQ6uhs8
PTZ13xuX0nE7cOBtXZ9HO7W6AcQ1uUJPBzc+KfIaPvpbqMSnOwflYNiNOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6MFu5mr6dDq5fFGodZfkk5mxEWMB8GA1UdIwQY
MBaAFJC4oVRmw/8ekV14ChCwuqmtaUhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDct
NzhlOTk3ODY5OTUyLzEva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDctNzhlOTk3ODY5OTUy
LzEva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5taMgaV
9qr2ELNv7+XPjtZrlwwgLjcB1Jdjf9JBajdoVArSYi73hnBz6T8Pg5khdOrJ2TuR
sZuc5PABt18UJn9Bk2h4Ei4mYZvX9sstal2tiN4aqYgNMBZufGjLxavjQvOqQRfP
P7o2P4umAh1mX8zetO79p9J0veDGnwrfYnbFyl+07fmqNeh48JrVx58BUa+0ESRX
8TO4lca7nWbr+GmPpZbD7oJtCPXJqX3mKFyjCX8ZXnJJlt0WwFkxFSW7TqDtV14d
27iaC/vL21frJWJxSgxe8XlYCchY0B1U2lWPDSTL9urSKo70hw7i0zDjqD5x87MJ
gSi/ClLq2WCu0g==
-----END CERTIFICATE-----
Generated at Fri Oct 30 04:24:12 2026 by rpki-client