Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
File: kBZCwNRvjU5MI0wzr771pIOcaiI.mft (raw, json)
Hash identifier: ZLo2vGFBgyyFK2m9I0codV4VGb4h5NvfmEFBelTsDjY=
Subject key identifier: 6F:44:85:F2:E7:47:6E:FB:9C:85:6C:57:1D:98:EC:72:A8:57:70:61
Authority key identifier: 90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22
Certificate issuer: /CN=901642c0d46f8d4e4c234c33afbef5a4839c6a22
Certificate serial: 01A148AA513FCD26499EC3B34050301C3194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
Manifest number: 02E7
Signing time: Sat 17 Oct 2026 07:01:23 +0000
Manifest this update: Sat 17 Oct 2026 07:01:23 +0000
Manifest next update: Sun 18 Oct 2026 07:01:23 +0000
Files and hashes: 1: A9-wOdp_rVCM0ESzhr89kQtrxAk.roa (hash: EEXrwqrXm4OhbrVH1e+ftGoZf1df8IiOvwtrHVI9K44=)
2: kBZCwNRvjU5MI0wzr771pIOcaiI.crl (hash: H8DtTOoasNNk6d6AD3TySigv1967c1+uPnRaSd1olYw=)
3: oUxyNiL8a-AOoVb7hvCWizwaEaI.roa (hash: s30Arx9jmVniBQHeZV05te3a62N7rkcg5xppFWIofXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:48:aa:51:3f:cd:26:49:9e:c3:b3:40:50:30:1c:31:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901642c0d46f8d4e4c234c33afbef5a4839c6a22
Validity
Not Before: Oct 17 07:01:23 2026 GMT
Not After : Oct 18 07:01:23 2026 GMT
Subject: CN=6f4485f2e7476efb9c856c571d98ec72a8577061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ad:7b:0e:2e:0b:3f:23:a3:4b:d8:b5:40:81:
18:ed:86:22:a1:0a:c4:60:3c:86:67:2e:bb:5a:a7:
34:ae:bc:58:37:aa:43:74:0d:29:3c:ab:74:7c:13:
61:a1:14:d2:5f:ce:29:1c:b5:e7:be:2c:fd:b7:2f:
ec:31:a1:9c:9e:c0:26:e2:1c:56:63:4b:24:5d:e4:
cb:05:a0:6d:99:b9:46:79:a4:d9:35:2f:5a:1a:83:
02:58:0f:17:32:ee:9a:62:50:34:f6:27:af:e5:51:
0f:c3:1e:f8:23:1d:e5:4c:ee:55:ea:d7:4c:b7:c9:
b1:0d:ee:97:6d:fd:8a:16:86:04:4b:a4:87:a5:15:
a4:a6:61:f0:b4:bb:ca:ed:9c:49:6b:e3:c2:d4:9d:
7b:2c:a9:c1:a3:94:bb:ba:89:15:79:37:38:7a:52:
a0:fa:78:48:bf:6c:1a:4d:e8:4a:6c:2c:b3:f8:71:
e6:42:a9:86:2f:fc:ea:77:9f:19:61:0b:f9:88:64:
36:71:02:d1:83:3c:db:38:36:2a:10:17:64:d9:cb:
8a:af:bb:a0:b2:43:cd:f6:a9:a9:d6:63:e6:9d:6b:
c4:b7:c7:1b:f2:8b:b2:59:fe:e1:21:bb:29:7d:5a:
0c:df:a3:2d:b0:92:f3:29:82:c0:41:eb:56:f6:d7:
d2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:44:85:F2:E7:47:6E:FB:9C:85:6C:57:1D:98:EC:72:A8:57:70:61
X509v3 Authority Key Identifier:
keyid:90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0e:5e:4a:d3:ce:c9:30:70:64:f9:af:d2:49:84:ac:84:33:
e6:8e:38:6d:c2:dc:ff:1f:8d:5c:76:c5:00:b4:c4:3c:8a:62:
90:2e:ec:7e:40:9c:20:56:af:bd:be:b4:49:10:96:fd:78:b5:
1d:97:89:b5:d1:00:7b:b4:2c:79:22:8f:51:bf:b2:cd:23:a6:
2e:16:93:fe:d2:d3:0c:07:88:87:87:30:ef:fb:ab:98:50:e6:
8a:0c:9b:2e:85:dd:56:5f:8a:51:80:83:8e:b5:78:da:ca:6a:
74:7b:8a:a5:da:31:ea:72:34:c5:f7:4b:a7:70:b8:bb:bf:c2:
22:c1:2c:db:24:fc:34:d0:f0:2d:33:44:d7:12:47:c2:48:68:
31:78:0f:75:10:87:d1:2c:e9:9a:90:3f:8d:b7:a0:28:bb:4f:
05:98:d6:82:ae:f6:2a:6c:89:8a:eb:0d:29:02:06:5a:38:21:
ce:9e:55:4e:68:6b:88:67:09:a2:8f:14:e6:51:16:bd:f2:fb:
3d:53:9f:f2:0f:75:87:e4:3a:be:47:d2:59:b4:6c:82:d1:40:
9a:3b:6d:3e:45:d7:b6:2a:29:52:8a:cc:68:ae:03:c9:be:06:
42:19:9f:a5:54:82:e4:9e:15:3d:00:c5:ba:d2:60:d5:fe:b6:
97:f1:3f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 14:59:15 2026 by rpki-client