Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
File: KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft (raw, json)
Hash identifier: teYGmnmwqvQKRi87r1zmAk4AT3OyU9TQiUwbrydO/1o=
Subject key identifier: 86:39:2A:22:27:0D:EA:34:62:6E:E8:4C:6A:E0:21:4C:13:07:45:25
Authority key identifier: 29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
Certificate issuer: /CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Certificate serial: 01A08A8D5BDE2493151DCD82BFD571D950D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
Manifest number: 177D
Signing time: Thu 10 Sep 2026 09:01:54 +0000
Manifest this update: Thu 10 Sep 2026 09:01:54 +0000
Manifest next update: Fri 11 Sep 2026 09:01:54 +0000
Files and hashes: 1: 6j4pjVTfZrRz69qrVZWu1MIksWs.roa (hash: UON4IFOWgycbfu1WYDT00HPnLWokn2gs4FgK26w0xNM=)
2: KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl (hash: MRzzy+mTky1zoYCX5PKd/RnWyyVQSA1N2H9H5HYkE3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:5b:de:24:93:15:1d:cd:82:bf:d5:71:d9:50:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Validity
Not Before: Sep 10 09:01:54 2026 GMT
Not After : Sep 11 09:01:54 2026 GMT
Subject: CN=86392a22270dea34626ee84c6ae0214c13074525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b4:e1:ef:de:17:d2:1d:01:7a:dc:ac:64:b6:
15:aa:df:5c:f3:f4:3d:fa:29:c2:1a:9d:9c:4b:80:
79:7c:01:a0:24:54:c6:b1:14:4a:34:87:45:c3:3c:
62:6f:9d:b8:e0:7b:b2:36:74:3b:2e:5e:a1:ae:ea:
37:5e:06:ab:18:8d:ae:20:20:35:cd:02:c0:7f:bc:
8e:da:5c:36:c9:ed:0f:fc:c7:df:2b:72:cd:52:d5:
29:2c:11:21:8c:74:44:ac:ec:cf:af:8b:88:8b:e7:
2a:4f:c3:e2:3a:d4:a6:f6:21:23:73:92:64:7d:ee:
01:c4:44:82:64:1b:2c:d6:20:ae:f6:ca:25:06:62:
6d:0b:e4:75:29:7c:40:e1:c6:7d:82:7b:50:b7:7c:
2c:a1:9f:11:5d:c8:99:86:4e:0d:5e:54:cf:fd:e3:
40:f2:7a:b2:9c:24:ff:05:0b:29:cd:b4:17:35:27:
87:61:45:c9:95:4a:bd:a2:e8:26:c4:f9:ef:cd:5b:
5c:8e:54:07:c4:ea:6b:03:11:20:26:52:93:19:b1:
8a:aa:b4:fc:a6:ca:bf:61:0a:82:54:0d:62:d0:45:
c1:9e:03:3c:25:d6:20:41:64:37:db:8c:23:c1:d0:
c8:eb:0e:e7:a8:bb:2c:93:5a:be:15:74:d3:2b:44:
47:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:39:2A:22:27:0D:EA:34:62:6E:E8:4C:6A:E0:21:4C:13:07:45:25
X509v3 Authority Key Identifier:
keyid:29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:4f:b3:12:41:0a:82:6b:81:cc:ac:78:25:aa:5e:07:2d:4d:
31:50:81:f5:b2:0d:3c:8c:d1:c8:f5:4f:29:a7:52:cd:1d:0f:
e3:8a:f6:ba:d7:a9:a2:ba:0f:c1:59:f1:2e:bb:d0:b9:b2:37:
31:6a:1c:f0:30:12:f4:04:4d:6a:4c:21:a2:d9:10:67:e6:80:
78:2c:39:39:b0:6c:a9:03:2b:cb:bc:60:73:39:2d:31:09:d6:
ea:4c:80:42:71:9f:77:3b:24:1a:aa:39:c1:b1:d0:db:28:23:
2d:92:f3:c0:d3:db:e3:76:ad:e8:da:56:e2:d2:c4:bf:9e:40:
a4:df:4c:2f:94:69:f9:72:df:c2:e9:c1:7f:1e:2f:9b:49:20:
5b:9c:0a:a3:19:fd:22:7c:d3:38:1e:b3:df:16:37:87:c3:b6:
f7:3a:f4:fc:ec:49:93:38:25:39:2e:eb:9d:e0:06:0c:c4:f5:
90:1d:62:91:f5:6b:5b:e5:03:62:08:7d:ab:d7:72:28:e8:af:
27:83:fc:48:23:9e:91:d3:4a:40:80:1c:d4:36:64:28:28:93:
62:63:0d:2f:b8:1c:35:d5:40:1b:4f:16:bf:77:e3:6d:0b:e1:
d5:c6:10:88:f9:2b:68:0c:18:c0:2a:e5:41:e0:4f:ac:4f:24:
ea:83:d8:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjVveJJMVHc2Cv9Vx2VDWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5M2YyZWM3NGI0MDY2YWM2N2E4NzY4ZDhlMzg2MDZlZmNk
NjQwMTMwHhcNMjYwOTEwMDkwMTU0WhcNMjYwOTExMDkwMTU0WjAzMTEwLwYDVQQD
Eyg4NjM5MmEyMjI3MGRlYTM0NjI2ZWU4NGM2YWUwMjE0YzEzMDc0NTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7Th794X0h0BetysZLYVqt9c8/Q9
+inCGp2cS4B5fAGgJFTGsRRKNIdFwzxib5244HuyNnQ7Ll6hruo3XgarGI2uICA1
zQLAf7yO2lw2ye0P/MffK3LNUtUpLBEhjHRErOzPr4uIi+cqT8PiOtSm9iEjc5Jk
fe4BxESCZBss1iCu9solBmJtC+R1KXxA4cZ9gntQt3wsoZ8RXciZhk4NXlTP/eNA
8nqynCT/BQspzbQXNSeHYUXJlUq9ougmxPnvzVtcjlQHxOprAxEgJlKTGbGKqrT8
psq/YQqCVA1i0EXBngM8JdYgQWQ324wjwdDI6w7nqLssk1q+FXTTK0RH0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIY5KiInDeo0Ym7oTGrgIUwTB0UlMB8GA1UdIwQY
MBaAFCk/LsdLQGasZ6h2jY44YG781kATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OTA0NWEtYTViMS00ZTU5LTk3MTct
MjNmMjI2M2I5YmQyLzEvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82OTA0NWEtYTViMS00ZTU5LTk3MTctMjNmMjI2M2I5YmQy
LzEvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAME+zEkEK
gmuBzKx4JapeBy1NMVCB9bINPIzRyPVPKadSzR0P44r2uteporoPwVnxLrvQubI3
MWoc8DAS9ARNakwhotkQZ+aAeCw5ObBsqQMry7xgczktMQnW6kyAQnGfdzskGqo5
wbHQ2ygjLZLzwNPb43at6NpW4tLEv55ApN9ML5Rp+XLfwunBfx4vm0kgW5wKoxn9
InzTOB6z3xY3h8O29zr0/OxJkzglOS7rneAGDMT1kB1ikfVrW+UDYgh9q9dyKOiv
J4P8SCOekdNKQIAc1DZkKCiTYmMNL7gcNdVAG08Wv3fjbQvh1cYQiPkraAwYwCrl
QeBPrE8k6oPYrw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 15:21:04 2026 by rpki-client