Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
File: KFJhMsT89rTN_3QCVWAsz53LBC8.mft (raw, json)
Hash identifier: /RbIJ7HbXAR4sD4vCChb+Xh/mnCFhIw0gT9rOBNDK8s=
Subject key identifier: 36:93:5D:A0:FE:29:FC:F5:72:71:F7:E9:AC:93:8D:02:76:AF:AF:98
Authority key identifier: 28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F
Certificate issuer: /CN=28526132c4fcf6b4cdff740255602ccf9dcb042f
Certificate serial: 01A176282B6CF5A4EEDD15858EC4B3069CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
Manifest number: 1AC2
Signing time: Mon 26 Oct 2026 03:01:46 +0000
Manifest this update: Mon 26 Oct 2026 03:01:46 +0000
Manifest next update: Tue 27 Oct 2026 03:01:46 +0000
Files and hashes: 1: KFJhMsT89rTN_3QCVWAsz53LBC8.crl (hash: 0WFW/RVvSRCiDrkhgEwXV6cvfrjMesOyMZZs9Xav/8g=)
2: fkreEwL9i_WFct5R3Lmih3A6nXk.roa (hash: mAkb5z60hK6EVuMnyR6xB4SOK+FJ+cVNYl8vrOn5u5Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 03:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:28:2b:6c:f5:a4:ee:dd:15:85:8e:c4:b3:06:9c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28526132c4fcf6b4cdff740255602ccf9dcb042f
Validity
Not Before: Oct 26 03:01:46 2026 GMT
Not After : Oct 27 03:01:46 2026 GMT
Subject: CN=36935da0fe29fcf57271f7e9ac938d0276afaf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:d3:dc:85:71:e3:32:22:47:c7:d4:d8:d5:
88:ec:43:a2:cf:9e:f6:31:19:be:c6:f8:61:1d:bd:
04:00:44:75:96:6a:d9:b5:aa:ca:0c:78:30:58:ab:
82:ab:fc:e3:a5:aa:32:28:79:bb:d7:10:ad:55:cb:
6c:74:e0:a2:73:d5:ac:93:56:4e:37:8d:f3:2f:49:
78:55:29:89:b9:16:7f:db:82:70:63:b3:5d:af:ee:
24:7d:87:d6:a0:02:e1:c5:bb:96:70:97:60:7c:d4:
16:d9:db:06:b6:c2:75:a2:4c:f0:45:c0:b3:b9:ed:
ce:a8:26:aa:01:c6:f4:73:e2:1f:b3:40:c7:71:1b:
71:59:d2:e2:30:45:31:7e:37:43:90:23:47:ea:dd:
87:00:d7:72:75:8b:2f:8c:2a:ad:90:f8:a8:07:80:
9e:be:f4:9b:d7:8f:22:0f:f1:1a:a1:2b:07:fc:a8:
49:21:10:9d:b0:ba:a7:b1:68:15:3a:60:06:9a:1d:
12:cb:46:6b:69:7d:0a:bc:bf:bb:ef:bf:4b:a3:a5:
40:a0:b4:01:01:16:c0:61:84:71:b4:38:32:15:b0:
d0:94:7b:25:80:49:ad:c5:01:b8:69:27:5a:ef:9c:
3d:69:40:31:45:1a:49:76:39:5d:66:29:05:55:21:
74:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:93:5D:A0:FE:29:FC:F5:72:71:F7:E9:AC:93:8D:02:76:AF:AF:98
X509v3 Authority Key Identifier:
keyid:28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:59:dc:e4:b4:ed:b6:5a:ab:7a:90:1c:c4:b0:1e:4f:57:21:
73:f4:62:91:46:79:fd:04:35:e7:72:39:45:75:a5:8a:ca:03:
21:b3:4c:18:ce:a3:16:c9:9e:34:4c:c3:9d:fc:22:03:49:96:
1b:99:6b:86:15:15:d6:03:75:8e:c7:15:f5:0d:56:80:c3:e9:
bc:1c:01:9f:c4:05:cd:71:db:1f:23:18:d8:42:b4:a6:1c:4b:
7c:1a:97:8d:30:f6:02:88:dc:9a:c5:d6:64:b8:8f:fe:00:a9:
1a:6f:70:68:d6:74:eb:a1:59:a8:88:0d:05:07:c8:e5:e2:53:
ea:3b:f7:00:12:8d:2e:05:1e:f1:89:15:f5:9f:18:a1:f7:02:
51:4f:a2:eb:46:70:5a:3d:1d:51:08:60:18:c2:61:28:3a:73:
6b:27:4b:37:84:d8:52:f0:ac:c5:c6:7f:26:2b:d8:21:d7:33:
77:8b:ad:b2:77:92:b3:83:ab:d5:f3:14:1c:1e:94:f9:d5:74:
c0:05:de:c1:ee:44:5c:d5:9f:e2:c1:ae:66:a7:38:5d:28:b2:
9b:da:3a:40:dc:4c:ba:4c:58:fe:bb:9e:ce:0a:57:76:5e:fd:
31:1b:0e:82:db:77:a2:5e:37:20:ab:c9:ae:40:19:68:86:8e:
3f:32:4a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:03:26 2026 by rpki-client