Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
File: kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft (raw, json)
Hash identifier: FQvXj9UXZQ1sLHkVnYEyPRDgs5UdPSELogLKDR4LnWw=
Subject key identifier: 86:3F:9B:5B:F8:8E:C0:9F:07:42:BB:5E:FC:77:9B:82:61:C8:9C:D6
Authority key identifier: 91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
Certificate issuer: /CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Certificate serial: 01A176CC520FEEB0C6959BDB05C4D02F85A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
Manifest number: 1ABF
Signing time: Mon 26 Oct 2026 06:01:04 +0000
Manifest this update: Mon 26 Oct 2026 06:01:04 +0000
Manifest next update: Tue 27 Oct 2026 06:01:04 +0000
Files and hashes: 1: kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl (hash: teUs5zK/wOPOZBJXotUi5nDTJAWQ/mH+I9X5j9829CY=)
2: tkclVERCXkY2GXQMN0O1KswMjIk.roa (hash: UFtbEmcPRmzUr4HkpsgJMfjtRHHdZhSje6jPNyYykIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:cc:52:0f:ee:b0:c6:95:9b:db:05:c4:d0:2f:85:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Validity
Not Before: Oct 26 06:01:04 2026 GMT
Not After : Oct 27 06:01:04 2026 GMT
Subject: CN=863f9b5bf88ec09f0742bb5efc779b8261c89cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:4b:38:43:67:cf:ea:71:09:ca:b3:c3:f3:
cc:da:a4:67:3e:a8:c6:af:b9:29:b1:6e:8d:49:3b:
82:f7:a7:db:31:79:4b:67:cb:6b:c8:1f:2d:9a:90:
07:db:f4:b9:b9:c1:d2:20:ec:f5:44:5d:72:a7:6f:
3d:f1:67:6b:43:c4:77:33:98:6f:a0:95:9e:a5:c3:
01:9c:2b:97:55:7b:54:5a:cc:3e:c2:e8:c3:29:67:
59:74:c9:2f:34:bc:68:4b:09:f9:38:6f:d9:91:fa:
c6:c3:3c:43:4f:60:95:e4:31:04:c5:74:89:c5:c8:
53:2e:fe:5e:b1:32:e4:f3:d7:70:71:1d:d1:c0:68:
ba:08:af:9a:b6:27:c2:25:77:36:2f:fa:80:f9:a6:
1e:82:23:4e:d8:82:cc:a8:8d:53:e4:e2:c7:9a:34:
07:76:34:08:7e:54:96:70:35:ae:0a:75:20:6a:72:
2d:cc:0f:13:b6:f2:a4:79:13:29:28:c3:7b:8c:e1:
ed:cb:8d:8e:9b:90:a5:61:90:ea:cd:23:0f:6b:2c:
ea:42:f0:a8:b6:71:23:a0:10:41:e0:5d:99:bd:e4:
c4:5f:99:3d:7a:9e:cf:3b:17:26:69:de:1f:42:91:
51:79:40:c9:d6:e0:71:67:3a:a4:f9:cc:e8:3d:06:
28:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3F:9B:5B:F8:8E:C0:9F:07:42:BB:5E:FC:77:9B:82:61:C8:9C:D6
X509v3 Authority Key Identifier:
keyid:91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:da:2b:18:ff:3d:ef:4a:11:36:e2:da:7c:e3:aa:32:7b:bf:
aa:c4:2e:6a:00:1f:05:15:c7:5e:70:99:b2:f3:ae:6e:76:db:
fb:71:89:9b:5a:9e:76:f6:41:85:76:e2:9d:42:12:71:49:4d:
db:fc:05:48:9e:0d:12:90:30:2b:c6:b4:d8:0c:44:29:f7:46:
e9:f7:48:c9:0e:24:b8:71:ae:d7:d4:4f:14:52:72:cb:1d:09:
5a:f3:b7:99:a5:f7:1d:e3:18:c3:98:fa:65:19:50:f9:10:0f:
d2:e3:f5:a7:a5:49:bd:b5:d7:c1:4e:cc:a6:2b:62:3e:e8:c6:
36:fa:3b:a4:a5:d7:f2:0b:2c:0c:4a:1c:d0:8b:5d:7f:09:37:
c3:20:29:65:00:8e:27:94:46:64:e2:6b:08:99:d8:82:da:e3:
e8:a1:fb:e9:8d:75:37:22:c7:04:1e:cb:ce:f6:8c:5d:16:21:
53:5e:73:ba:d8:bb:88:1c:b3:e4:98:6e:26:65:60:e9:7d:ed:
46:f9:f6:3d:7f:e1:49:6a:2e:f2:72:01:dd:33:40:dc:6b:97:
e0:7e:31:68:68:b5:40:d0:d8:f3:e3:f3:0d:e5:a9:2a:87:df:
0f:f0:31:7c:aa:ed:e3:ab:88:9e:32:48:f7:7f:f1:72:1b:29:
64:74:f1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:22:33 2026 by rpki-client