
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
File: KT4M2LPgRO24I672iKr7C3XehnU.mft (raw, json)
Hash identifier: BakTt9tH6TutaJdExU7sXYis0BSrmfQbNevPEvthUY0=
Subject key identifier: 0A:F3:11:3A:1F:C3:1C:FD:47:AE:A6:36:DD:27:42:38:BB:C6:68:B9
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial: 01A0890C4DA95AE41BCD6E04FFBB4A37B41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
Manifest number: 17A8
Signing time: Thu 10 Sep 2026 02:01:19 +0000
Manifest this update: Thu 10 Sep 2026 02:01:19 +0000
Manifest next update: Fri 11 Sep 2026 02:01:19 +0000
Files and hashes: 1: 8OFbkkZ6KALpSp0mWSybPWGsd-Q.roa (hash: Hw9+SZD9UoFrhny7ksS/HOCqMMmBRPOx+MzOwmt/YbM=)
2: CtshxvSjpVHllD9_Sbf7r-8_oP8.roa (hash: 6lSRTxGAefiesacXHB6JDdsI+DGCso7r3hSxwGlHZoo=)
3: DSzDYKP0Eliter60MSyPBC3uoBo.roa (hash: VTzEolbK7gpli6RLBjkEbGLC+e38wfEzm+yoXW+fNwY=)
4: K7pjnPK8S24idyOMea3NYin5SO8.roa (hash: YckTf9iIpdd+XsvzzovN9f+k8o5y12iUYrJM+OVIcPk=)
5: KT4M2LPgRO24I672iKr7C3XehnU.crl (hash: evxS+fJswqQt1yqtfZsKJi/w3IyBXfrWKuRuYKF6lpk=)
6: o-d6O05K7BPSIDagH_dA7QNFluU.roa (hash: e5fVX0i32Jc4R//E3nrr2ejI2Z6IYOksflnKoAUyHns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:0c:4d:a9:5a:e4:1b:cd:6e:04:ff:bb:4a:37:b4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Validity
Not Before: Sep 10 02:01:19 2026 GMT
Not After : Sep 11 02:01:19 2026 GMT
Subject: CN=0af3113a1fc31cfd47aea636dd274238bbc668b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:30:e7:84:f2:88:a5:74:d1:9d:4e:9a:bb:ac:
41:af:b2:8f:73:47:66:dd:59:19:f8:1c:10:5f:cd:
bc:18:85:4b:c9:9b:9b:49:ab:03:c7:2b:c1:f0:5b:
9d:e4:1c:ef:06:6a:e0:99:dd:8a:81:0c:b8:b1:4f:
48:48:bd:7c:6f:24:f2:13:39:28:97:cf:45:1a:b7:
4f:93:f6:2b:0b:cb:6f:77:19:69:8c:bb:f3:aa:cf:
92:5f:b5:0c:54:86:ee:ae:fe:1e:c4:6f:b4:75:28:
d4:23:ab:ea:01:89:6a:56:de:02:c6:d5:1b:06:7b:
f1:e7:b1:5d:d4:64:f8:31:16:62:32:32:aa:95:ec:
7a:4a:7e:61:ae:c4:27:2d:cb:66:e2:78:f6:06:46:
7e:f5:13:b3:50:04:f3:e6:13:78:2b:f3:1f:28:54:
58:48:d9:7e:3c:8d:6e:f5:0b:65:65:a8:e7:3a:1e:
b7:f9:0c:26:58:1b:8e:9d:74:b7:6e:f3:a2:de:14:
09:ec:3d:c1:91:59:61:4f:c6:40:64:c0:b4:cd:04:
b5:19:c8:33:6a:b6:93:9a:31:21:44:e1:91:e8:dd:
14:6e:a9:03:df:26:a0:89:39:bd:91:34:ed:e1:4f:
b1:ca:c3:a4:ae:43:6a:7b:45:7d:fd:4a:71:fd:34:
1d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F3:11:3A:1F:C3:1C:FD:47:AE:A6:36:DD:27:42:38:BB:C6:68:B9
X509v3 Authority Key Identifier:
keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:a7:37:09:9f:04:3e:2a:eb:b5:a3:38:62:94:c6:90:30:db:
2e:a4:6e:89:00:b3:82:e2:f6:fb:06:50:98:72:3f:ed:f1:8e:
d1:26:bd:14:34:04:f0:ac:08:c2:27:0f:7e:28:b2:f8:76:7e:
57:bd:a8:31:9f:96:a6:55:33:fd:bb:af:76:5a:64:f2:5d:ad:
e9:26:75:09:3d:7b:f5:e0:d3:ba:4b:ec:80:92:23:e6:87:3d:
98:a0:dc:d4:93:8d:c2:cf:71:8c:1f:2b:b5:39:d3:c5:96:aa:
b7:a1:c1:95:5a:2b:cb:eb:f9:26:40:eb:bf:16:7c:3f:93:b0:
93:cf:76:cd:78:5a:d6:9b:49:31:b0:b9:f1:91:fd:28:7a:b0:
2e:c8:8d:80:eb:51:a1:19:99:f0:a5:98:ed:99:a7:f3:4b:c1:
1a:b3:1e:8c:6e:43:b1:84:83:aa:d2:15:f2:a2:a8:fd:24:ed:
97:0b:1f:db:6e:7c:04:28:e5:bf:f4:51:8e:44:66:c9:27:4b:
cf:4b:53:ae:9f:67:5b:ad:66:70:ff:b1:15:73:c1:b2:ab:ca:
a2:fa:ef:12:71:57:81:f6:13:97:1f:7d:c0:9e:00:36:a2:d2:
04:da:c7:6a:4b:fc:af:31:59:ee:44:ed:a7:1c:4e:a6:5d:72:
3e:84:16:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:57:57 2026 by rpki-client