Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
File: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft (raw, json)
Hash identifier: YDi05kf+Hx+HNMifuJSTuKkcG9QpDEUC5a68Rphf4sE=
Subject key identifier: 82:04:3F:FD:6F:64:0D:73:AA:51:9F:88:92:29:83:D6:9F:17:55:2D
Authority key identifier: 28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
Certificate issuer: /CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Certificate serial: 01A088D4A23FBF53991F832B2F807408D702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
Manifest number: 1A47
Signing time: Thu 10 Sep 2026 01:00:31 +0000
Manifest this update: Thu 10 Sep 2026 01:00:31 +0000
Manifest next update: Fri 11 Sep 2026 01:00:31 +0000
Files and hashes: 1: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl (hash: mrnz7N1jSlxXVFKrRlfFfOwteMbZkpejHX/EAqW6Ais=)
2: wQjiul8nEUm7rTrpmnxVu05vfYw.roa (hash: OwpCUGAA3H+6uhau4CnuhtRzlm3HYsRifbd/fGUsCD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d4:a2:3f:bf:53:99:1f:83:2b:2f:80:74:08:d7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Validity
Not Before: Sep 10 01:00:31 2026 GMT
Not After : Sep 11 01:00:31 2026 GMT
Subject: CN=82043ffd6f640d73aa519f88922983d69f17552d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f7:f8:9b:9b:6d:bc:bf:3b:f8:39:9e:d7:35:
e8:f0:7a:b6:88:d5:61:47:1f:55:8a:97:ac:e2:c1:
05:4a:40:9a:37:3a:52:66:d7:1d:bc:19:5b:89:2a:
09:25:98:01:c5:92:b9:4f:d7:ac:05:98:05:77:52:
0f:cc:e9:f7:d0:ea:ef:e8:6f:94:71:22:ff:29:17:
7e:c6:e5:50:b3:b0:8a:32:93:aa:31:c5:bb:bd:9d:
c4:39:4e:2d:73:ab:c0:64:72:84:b1:b4:f4:b5:15:
80:8a:e4:71:44:ca:90:58:ae:91:7e:86:18:99:c9:
be:26:c5:85:b8:2d:29:24:d2:fa:18:17:66:d8:20:
f9:a6:98:9b:ca:42:f3:78:55:67:2d:a7:91:12:e1:
47:e5:2b:19:d7:c3:af:43:00:ea:a0:61:c2:b7:33:
91:37:38:cf:f4:c6:29:f3:64:5b:00:2c:f4:b3:09:
d0:e9:f6:e2:a3:1a:52:fc:f7:31:88:7b:f5:5f:d8:
f8:a6:d1:40:0b:03:c4:a3:44:7d:6c:3d:d7:e7:d0:
62:f6:a6:1c:22:3d:63:72:87:64:c4:44:dc:c9:8b:
48:65:69:64:35:ff:12:10:83:d0:63:47:7c:5d:2e:
a1:1e:86:3d:e1:74:a3:c7:9d:cc:c6:45:f4:62:3e:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:04:3F:FD:6F:64:0D:73:AA:51:9F:88:92:29:83:D6:9F:17:55:2D
X509v3 Authority Key Identifier:
keyid:28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:45:97:f2:83:4d:28:0a:94:37:72:2b:58:d2:17:2f:16:71:
5a:04:c4:57:b1:ff:cc:54:f8:93:26:ff:a1:fc:c4:2c:83:c1:
91:d7:45:b9:d2:a7:58:17:96:04:31:85:29:e8:43:f1:df:29:
36:60:9c:ad:c0:ab:c3:24:41:50:88:9b:9d:d8:35:b8:2e:06:
66:13:bb:9b:df:d7:57:72:63:e1:7f:25:26:55:05:a0:97:84:
4a:61:94:3e:6f:f7:2d:1a:26:65:4b:61:36:68:8b:c0:2e:e6:
10:ec:c1:d6:2f:2d:ea:8d:de:11:30:3c:d5:6c:5b:f9:df:9b:
95:63:01:6a:57:b7:14:6f:80:cb:cf:e8:f4:7c:4b:b1:ca:cd:
16:12:43:cf:75:5d:83:a0:f1:f6:0b:bf:52:ef:c2:5c:bb:2a:
39:83:5d:cc:43:a9:da:10:2b:7a:0e:99:ec:31:02:29:58:47:
7c:9c:7f:84:ec:8a:2e:63:26:1d:5e:dc:c7:8b:3e:43:78:dd:
a7:2a:86:2b:af:57:ab:f3:2f:81:4c:43:27:21:b0:b2:63:fb:
c7:2f:c9:4c:91:e5:a1:68:f8:70:10:b4:10:d1:8f:71:e2:38:
8e:27:b0:89:74:38:ce:70:f7:10:15:bc:d1:dc:95:43:e0:8d:
bd:8a:3f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:27:33 2026 by rpki-client