Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
File: KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft (raw, json)
Hash identifier: w7GJbiH8rYsGE/ZZpYa2mkQVJgigZBiu7Q4Pp3lkIvU=
Subject key identifier: 7D:84:56:B1:96:8C:8C:58:B4:0D:DF:8C:DB:CC:19:05:30:FD:6F:BA
Authority key identifier: 29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
Certificate issuer: /CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Certificate serial: 01A178156A6878D73040B78DEA92EE5D5607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
Manifest number: 17F8
Signing time: Mon 26 Oct 2026 12:00:31 +0000
Manifest this update: Mon 26 Oct 2026 12:00:31 +0000
Manifest next update: Tue 27 Oct 2026 12:00:31 +0000
Files and hashes: 1: 6j4pjVTfZrRz69qrVZWu1MIksWs.roa (hash: UON4IFOWgycbfu1WYDT00HPnLWokn2gs4FgK26w0xNM=)
2: KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl (hash: KAp+oUkJtKHszhB9OsmJXasfnIg7IzKzkjxeczBheP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:15:6a:68:78:d7:30:40:b7:8d:ea:92:ee:5d:56:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Validity
Not Before: Oct 26 12:00:31 2026 GMT
Not After : Oct 27 12:00:31 2026 GMT
Subject: CN=7d8456b1968c8c58b40ddf8cdbcc190530fd6fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:1d:21:5c:2c:19:cd:1f:68:39:da:44:e3:
e0:16:bf:57:fe:f0:91:43:80:3a:d7:86:1f:94:eb:
e9:e0:26:65:4b:76:06:4d:95:5b:92:65:d3:bb:40:
22:e6:86:84:51:41:5c:5c:66:e0:a2:03:38:fe:b7:
58:b6:c5:f0:92:9c:a9:b3:07:31:50:b4:4e:0a:06:
d3:e4:b3:c2:65:9d:31:ca:d0:39:c5:e6:a2:95:48:
43:3f:b7:ce:be:c6:5a:3b:f0:fb:c0:ed:dd:a9:6e:
f2:55:ab:79:06:fd:0f:ba:b2:84:71:81:fd:34:f6:
04:12:b9:ae:48:ca:62:27:82:25:80:9c:ec:6c:24:
31:ad:a5:dd:f9:f5:06:93:56:c5:5a:d3:22:a4:99:
b1:80:c5:ed:da:60:a8:c8:15:59:0a:56:9d:2b:d1:
c0:fa:1d:f8:6c:eb:ec:28:c7:04:bd:d2:3e:11:e6:
41:fe:97:ec:fc:4c:bc:5a:b1:0a:3b:d9:91:e4:62:
6a:c9:0e:c7:d2:e4:87:ac:65:13:00:b4:6b:a8:25:
54:17:4f:d3:e8:bd:bb:f9:f6:c2:6c:ed:98:26:c0:
f8:19:3a:52:98:fa:f2:bb:77:7d:8c:f2:0e:a8:8a:
2f:a6:ec:93:b0:e1:68:d2:24:fd:26:21:0e:9c:cf:
87:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:84:56:B1:96:8C:8C:58:B4:0D:DF:8C:DB:CC:19:05:30:FD:6F:BA
X509v3 Authority Key Identifier:
keyid:29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:08:ca:f4:a6:4d:f9:5b:32:01:1c:71:36:0f:7a:f0:ac:31:
78:12:90:1e:fb:4b:2f:58:fc:25:d9:f1:da:81:90:99:73:f5:
99:60:2c:9a:6f:84:ba:fb:5e:e0:70:41:fa:ac:3b:c3:58:c1:
d0:e2:89:df:79:34:b4:73:24:f3:51:29:6a:7c:8e:19:ae:2d:
ea:9f:94:6b:f4:cf:7e:92:b8:76:27:ac:b4:c0:d8:39:10:d7:
bb:fa:c1:27:bd:e1:59:3f:14:f1:d6:8c:89:ec:43:92:ba:3b:
a8:d4:0d:84:aa:d9:8c:dc:4c:60:4e:1a:a3:e7:e1:63:bd:bc:
bf:26:5c:18:63:3d:68:b9:53:f9:35:9b:b6:1a:7f:eb:9b:7d:
70:bc:f5:48:ed:67:31:85:fe:99:b2:fc:83:63:c6:f7:de:82:
96:1f:fe:c0:e8:36:61:4c:ca:62:c3:54:07:ab:b5:47:b8:6c:
0e:fe:6a:04:ce:48:26:b9:1d:31:5f:e2:9b:28:ff:43:46:aa:
be:b6:24:b8:29:b7:ed:46:6e:cf:2d:a9:3f:b9:8b:46:e0:2b:
92:f2:c9:99:ae:d3:04:2c:a5:d7:ec:85:cd:8d:40:b1:2e:58:
2e:a2:54:69:a8:1f:01:20:79:13:c0:1e:87:d3:4f:c2:1c:4c:
b6:27:e9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:17:55 2026 by rpki-client