Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
File: kioaZ-LacRLUVZzY29gUH48yd-g.mft (raw, json)
Hash identifier: b6Ih0WMlfRCUHGZbnjaGwE2bgLzIa3CDzlNUdWfBYbk=
Subject key identifier: B4:FD:FE:5C:1B:38:34:F1:FA:35:90:02:AC:36:7F:A6:A7:7C:08:F3
Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Certificate serial: 01A08BD5D71B769B0C0BF1936828833A01C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
Manifest number: 1A4E
Signing time: Thu 10 Sep 2026 15:00:42 +0000
Manifest this update: Thu 10 Sep 2026 15:00:42 +0000
Manifest next update: Fri 11 Sep 2026 15:00:42 +0000
Files and hashes: 1: M0wDu78r7xywtOeR44tzruZSaEQ.roa (hash: cLW1VEF1mpLQc7A3cpxalSV9oIYlVU2vXmo5FUgnCVs=)
2: kioaZ-LacRLUVZzY29gUH48yd-g.crl (hash: To9/2ZuMQuscUlmRxkt6alrFRjtJgeWoQAylJhRyUKY=)
3: mUHJF4mGLNcVm-1iZRq7sRrciKA.roa (hash: v1v9ELWgCV5IQ8NqhHOZPn5bOHfjyDlgKXQdmPVfuM8=)
4: vG7UQUChYLey5nR_Sv-0wx1TNeg.roa (hash: S15AVBuDsdwRGeDBytez+VIQASsm2pW1hwEeubDp1fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:d7:1b:76:9b:0c:0b:f1:93:68:28:83:3a:01:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Validity
Not Before: Sep 10 15:00:42 2026 GMT
Not After : Sep 11 15:00:42 2026 GMT
Subject: CN=b4fdfe5c1b3834f1fa359002ac367fa6a77c08f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:92:72:13:de:68:3c:01:1e:2b:dd:cc:92:
8d:fb:3e:20:97:b0:09:b2:1c:aa:16:7a:70:77:f0:
6c:97:78:cf:62:9c:a3:fd:05:b7:b9:5c:8a:32:0e:
00:10:f7:1a:b3:37:ca:f1:ed:50:33:0e:c8:42:4a:
1b:6c:57:b7:fb:79:4e:e8:18:89:22:4c:90:54:39:
32:90:53:32:fd:d7:b2:4b:01:e3:47:a3:ca:89:73:
02:1e:28:98:5c:9f:3d:ec:4f:c2:3a:fb:53:ad:89:
de:f3:a2:70:11:f0:c9:17:57:96:bf:b8:33:a4:71:
ae:13:2b:7f:ed:57:d6:01:14:f2:99:87:7a:06:99:
30:8b:4f:db:d1:bb:53:c2:9c:ed:c9:50:7c:40:e7:
b2:49:1f:e5:77:8d:78:8d:ad:de:26:ab:9b:02:af:
ef:14:b4:df:4a:b6:98:cb:25:9a:21:2c:b9:14:59:
e5:49:6a:46:a7:21:b6:5d:72:34:42:eb:27:5e:74:
f6:66:db:5e:cc:63:17:1a:3a:8b:64:81:7d:10:4d:
cf:b9:58:07:b0:2b:ff:47:92:68:9f:fe:70:75:a9:
5a:aa:e1:66:6d:59:fb:65:8d:39:49:07:0c:a3:be:
a9:51:1f:0a:09:27:d5:4a:2d:a4:40:f7:2d:ac:e2:
f3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:FD:FE:5C:1B:38:34:F1:FA:35:90:02:AC:36:7F:A6:A7:7C:08:F3
X509v3 Authority Key Identifier:
keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:12:e1:e4:92:a7:e6:01:da:7a:19:f4:a7:5f:8f:08:f0:e2:
b7:37:0d:bc:e1:a4:20:69:79:d0:18:2c:8c:b8:eb:d7:06:a1:
35:a2:1c:4d:03:8d:c1:e8:00:7b:4e:f2:8f:6e:f2:03:3e:cd:
42:c7:4a:20:5e:f3:43:f9:50:86:22:ba:88:47:ce:93:dd:bc:
82:33:5b:fd:44:49:81:25:2f:e9:f3:4e:91:54:76:5b:e0:81:
b2:95:ef:61:2c:c5:1e:86:79:6a:f1:75:8f:3c:ed:85:26:16:
68:30:f1:c9:fc:b8:7d:ad:17:18:d1:0a:78:55:c0:3e:7d:16:
81:18:c0:ce:f5:71:ff:43:8e:df:d4:c4:8b:bd:95:f3:84:41:
0c:6a:6c:9b:47:ce:3a:2f:cb:4c:dd:47:1f:0e:61:ab:2f:e9:
37:1d:cf:83:b9:e7:b2:44:15:e0:24:3d:b5:d8:99:82:25:ad:
46:3d:9c:2d:e9:1b:f7:6e:53:d4:09:92:ff:a2:f6:ba:aa:0a:
1f:8a:13:ab:0a:b2:21:0f:44:4f:6b:cb:f5:e5:e6:8c:f6:04:
84:c6:f0:d7:4c:30:ed:6f:57:12:ef:64:1c:c7:65:49:1e:25:
47:cc:b9:fa:ea:64:0f:68:63:1a:7e:e5:72:df:aa:f2:29:ff:
70:92:1e:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:12:38 2026 by rpki-client