Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier: j5EQgeGGYr+cDyZbePo8eyPiRDUIbd8Wm5jtSgqiRGY=
Subject key identifier: 66:B5:38:36:53:F1:14:D3:F9:11:82:FC:7C:4F:AE:F2:32:8F:42:77
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 01A17DAA5CB8073F75ADA1532BD1973FF427
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number: 0E73
Signing time: Tue 27 Oct 2026 14:01:19 +0000
Manifest this update: Tue 27 Oct 2026 14:01:19 +0000
Manifest next update: Wed 28 Oct 2026 14:01:19 +0000
Files and hashes: 1: 61jEoPY3BUG6j9cu_lF8RKNi7JI.roa (hash: 4WzEHJ+ROSfn7ovwc2eGPGUGeBlvLhI0622lMwFDYa0=)
2: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: 3ZsXgWEgadskSE9ErueTFDnC60opQxhkrsitAtjQZ7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:5c:b8:07:3f:75:ad:a1:53:2b:d1:97:3f:f4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: Oct 27 14:01:19 2026 GMT
Not After : Oct 28 14:01:19 2026 GMT
Subject: CN=66b5383653f114d3f91182fc7c4faef2328f4277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:30:75:1c:98:11:bf:13:6b:08:47:6a:ff:24:
b8:0f:c7:c7:14:d6:73:66:68:42:f6:02:ef:c0:b2:
7f:6b:2f:81:9f:3b:01:01:be:da:1d:9d:2a:f9:05:
ab:16:70:cd:69:3f:e0:19:81:f0:c9:6f:a2:94:44:
cd:dc:6a:21:01:c7:c3:a0:24:9d:b4:a2:aa:f5:a2:
60:e9:6a:14:e1:b2:38:ca:42:eb:68:9f:4f:ae:ed:
d4:f6:34:9d:27:e8:d5:30:b2:38:d9:59:92:5c:86:
54:b4:d3:67:ac:15:1f:de:6e:fe:33:fb:4b:d6:b3:
bf:c1:72:75:89:a4:50:9a:21:18:74:2d:65:6b:58:
8e:7f:40:21:8a:6c:14:9c:14:32:67:b0:e8:b8:61:
a8:7e:30:79:b4:91:61:0e:fa:c0:bc:d8:97:84:66:
37:39:34:80:ab:26:80:31:2c:69:14:0b:d2:96:15:
79:41:d4:ec:d9:a9:0f:fb:30:d1:30:c8:ee:c2:d2:
1f:6f:5a:2b:0b:14:44:9d:58:99:22:50:73:7d:61:
7d:44:7d:25:b2:32:e8:de:c9:0f:d0:78:ba:bc:84:
ca:cd:04:ac:52:89:59:21:80:83:15:4d:c2:fc:f3:
01:8e:ec:8e:3b:e4:64:ab:46:56:a5:a8:c2:22:74:
74:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:B5:38:36:53:F1:14:D3:F9:11:82:FC:7C:4F:AE:F2:32:8F:42:77
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:4b:f4:86:24:c4:5f:19:e3:de:3e:9b:f9:99:20:a6:88:74:
b2:e6:e6:86:db:7b:73:de:72:3e:ce:62:dd:7a:fd:cd:39:87:
04:80:2b:72:66:a1:c5:69:6d:a5:27:d1:ac:c7:58:4f:b9:fe:
75:7a:b5:7d:b8:9b:67:1b:44:bd:4c:5a:14:6b:ca:87:5a:2b:
11:63:19:fc:36:09:30:52:85:52:23:84:d5:0f:82:39:bd:5f:
83:60:4a:7d:80:6e:40:26:bd:31:f5:28:9c:89:dd:f1:d8:60:
d8:6d:d6:5f:91:29:e0:96:8a:f0:74:73:21:76:8e:bf:bb:9d:
b2:5c:72:2d:4d:57:0b:da:d0:40:07:1b:73:69:a4:e7:e2:94:
29:4f:f5:a3:75:7d:55:e0:fb:68:c1:a3:2d:a7:da:1f:8b:30:
e6:4d:1d:24:30:fc:14:cb:3f:24:66:30:aa:a1:1c:32:d6:ba:
6b:8c:35:21:92:79:f8:bf:0d:73:d4:00:5f:ea:b3:ed:2f:98:
16:6b:e3:7b:c5:34:85:1d:5d:83:de:aa:25:7b:77:53:e0:c2:
61:38:90:42:b4:9f:5e:7c:91:48:03:b5:a1:9d:98:05:37:56:
91:fb:f9:ae:e0:a6:f4:52:fa:a3:20:e7:d1:4d:10:b9:3a:65:
6e:29:77:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 20:52:43 2026 by rpki-client