Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
File: kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft (raw, json)
Hash identifier: S45s2Uu+51qcli6ePk5CJsGRQl4bbcTQW1edKtc570o=
Subject key identifier: FF:64:85:D2:4E:10:35:98:86:48:34:65:D8:FF:69:75:04:9E:26:A6
Authority key identifier: 92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
Certificate issuer: /CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Certificate serial: 01A15F31A619EE90FAB871871CB397157F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
Manifest number: 05A8
Signing time: Wed 21 Oct 2026 16:00:51 +0000
Manifest this update: Wed 21 Oct 2026 16:00:51 +0000
Manifest next update: Thu 22 Oct 2026 16:00:51 +0000
Files and hashes: 1: AWhN6VQ2_halEL7L2KMQe9rdgso.roa (hash: tVoPHVeJ+IKy961bJMJgWhi1Hj5IBVKGGMEWtGFabWw=)
2: kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl (hash: TANSrFVKpSsixNVNkmlhYzuNFDMkW0dEyCePNyu2vHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:31:a6:19:ee:90:fa:b8:71:87:1c:b3:97:15:7f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9248f131b1e1207fb49082b0e0642fd1a63e1aa6
Validity
Not Before: Oct 21 16:00:51 2026 GMT
Not After : Oct 22 16:00:51 2026 GMT
Subject: CN=ff6485d24e10359886483465d8ff6975049e26a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:3e:a0:e2:8d:15:cc:7e:e0:c9:1c:c1:d6:
9c:14:99:d9:16:07:29:22:46:77:2e:2e:22:31:7e:
20:8c:b1:45:c3:bc:44:d0:82:5b:07:03:91:e1:d5:
fa:5e:09:3c:55:bc:6d:46:72:d7:44:0e:12:c2:cb:
b1:ab:7c:c2:9b:fc:c0:c7:76:4e:2c:16:a4:20:9e:
e4:81:dd:a1:56:b0:c6:ff:e4:42:cb:e6:65:35:26:
a0:55:18:20:d0:6a:4f:81:8c:df:47:26:5d:c7:c9:
34:2b:5d:6d:e2:76:ad:25:74:df:68:b3:8e:18:c7:
e5:a3:a5:a2:53:52:78:12:3e:b4:2c:fe:49:00:02:
0d:63:d3:b7:53:b0:28:22:3b:a8:d3:07:93:d9:54:
c4:ea:a8:96:65:9d:1a:79:18:a1:79:1d:8f:4f:a7:
81:9a:3d:b0:78:1f:4d:58:0b:48:33:f2:14:60:33:
b1:5b:87:72:15:54:9e:1d:f4:91:4a:00:ba:74:cb:
d4:e2:79:0c:ec:26:46:ca:3a:01:c0:6b:7b:d9:bb:
75:db:8f:43:5d:a2:42:b1:e7:8f:09:de:84:d9:bc:
67:3c:4b:62:96:74:f8:7c:0b:4d:a2:f6:44:5c:23:
a2:d3:fc:79:f9:da:8c:96:0f:9c:95:b2:ee:a5:12:
b4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:64:85:D2:4E:10:35:98:86:48:34:65:D8:FF:69:75:04:9E:26:A6
X509v3 Authority Key Identifier:
keyid:92:48:F1:31:B1:E1:20:7F:B4:90:82:B0:E0:64:2F:D1:A6:3E:1A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkjxMbHhIH-0kIKw4GQv0aY-GqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/77535f-473b-43d3-af43-e481751d684f/1/kkjxMbHhIH-0kIKw4GQv0aY-GqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:38:b8:41:a7:28:8c:e9:93:0a:88:8a:31:cd:47:7f:c3:30:
bc:61:1f:0c:8c:6e:bd:79:45:4b:5f:b2:28:0c:ce:55:73:38:
55:c9:cd:9d:e1:b5:f9:83:70:b9:97:70:13:8f:48:57:6c:c4:
87:87:b3:cf:26:a4:87:d0:4a:0f:2d:35:fb:9a:03:f3:c7:ae:
55:87:65:32:c8:f9:97:7c:49:7a:7a:ba:02:d8:9d:57:46:c2:
c1:93:91:88:2a:3f:7d:d5:c8:a7:3b:0f:7c:ec:80:99:5c:d5:
e9:36:00:2e:38:80:cb:06:e1:b7:e8:c6:10:ec:46:7d:f1:22:
a9:cd:af:a6:2d:61:a6:6e:b7:60:31:e1:45:30:b7:c9:ee:54:
52:4a:48:19:00:d3:70:30:e8:c7:f9:68:7d:29:e7:e0:db:17:
e1:fc:3c:d0:ca:25:a2:e6:ea:5e:d2:19:3e:87:e4:fa:52:10:
a6:ca:fe:8c:08:19:81:63:9a:5a:b5:f7:e2:d0:b3:ab:31:d6:
0b:24:47:17:7c:7f:3e:a8:f4:51:86:47:2f:79:cf:18:14:b2:
f6:24:d3:a1:a1:c8:e6:2a:cd:40:95:38:25:51:d3:38:62:3b:
6b:36:d7:51:9b:8d:97:91:8e:83:6b:f7:11:76:76:07:e8:a8:
1c:fd:65:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFfMaYZ7pD6uHGHHLOXFX+SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDhmMTMxYjFlMTIwN2ZiNDkwODJiMGUwNjQyZmQxYTYz
ZTFhYTYwHhcNMjYxMDIxMTYwMDUxWhcNMjYxMDIyMTYwMDUxWjAzMTEwLwYDVQQD
EyhmZjY0ODVkMjRlMTAzNTk4ODY0ODM0NjVkOGZmNjk3NTA0OWUyNmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+U+oOKNFcx+4MkcwdacFJnZFgcp
IkZ3Li4iMX4gjLFFw7xE0IJbBwOR4dX6Xgk8VbxtRnLXRA4Swsuxq3zCm/zAx3ZO
LBakIJ7kgd2hVrDG/+RCy+ZlNSagVRgg0GpPgYzfRyZdx8k0K11t4natJXTfaLOO
GMflo6WiU1J4Ej60LP5JAAINY9O3U7AoIjuo0weT2VTE6qiWZZ0aeRiheR2PT6eB
mj2weB9NWAtIM/IUYDOxW4dyFVSeHfSRSgC6dMvU4nkM7CZGyjoBwGt72bt1249D
XaJCseePCd6E2bxnPEtilnT4fAtNovZEXCOi0/x5+dqMlg+clbLupRK0sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9khdJOEDWYhkg0Zdj/aXUEniamMB8GA1UdIwQY
MBaAFJJI8TGx4SB/tJCCsOBkL9GmPhqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMt
ZTQ4MTc1MWQ2ODRmLzEva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC83NzUzNWYtNDczYi00M2QzLWFmNDMtZTQ4MTc1MWQ2ODRm
LzEva2tqeE1iSGhJSC0wa0lLdzRHUXYwYVktR3FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACji4Qaco
jOmTCoiKMc1Hf8MwvGEfDIxuvXlFS1+yKAzOVXM4VcnNneG1+YNwuZdwE49IV2zE
h4ezzyakh9BKDy01+5oD88euVYdlMsj5l3xJenq6AtidV0bCwZORiCo/fdXIpzsP
fOyAmVzV6TYALjiAywbht+jGEOxGffEiqc2vpi1hpm63YDHhRTC3ye5UUkpIGQDT
cDDox/lofSnn4NsX4fw80MoloubqXtIZPofk+lIQpsr+jAgZgWOaWrX34tCzqzHW
CyRHF3x/Pqj0UYZHL3nPGBSy9iTToaHI5irNQJU4JVHTOGI7azbXUZuNl5GOg2v3
EXZ2B+ioHP1lUg==
-----END CERTIFICATE-----
Generated at Thu Oct 22 02:08:58 2026 by rpki-client