Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
File: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft (raw, json)
Hash identifier: EYdcCYjW5Z54DPBQdqp05hHDNirKE1GwWRUzZU3VNhI=
Subject key identifier: EE:F6:0F:8B:4D:15:D7:1A:0A:7A:72:5A:18:B0:72:6D:DF:DE:CC:2F
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial: 01A17C60178818FD036E4709807F71F9DA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
Manifest number: 1AC7
Signing time: Tue 27 Oct 2026 08:00:34 +0000
Manifest this update: Tue 27 Oct 2026 08:00:34 +0000
Manifest next update: Wed 28 Oct 2026 08:00:34 +0000
Files and hashes: 1: 4v5BgTcmzQ0y7khumrI19c8q-sM.roa (hash: pU1RWRtn8YAUvSz8vemI3GYYeqO0HhKmjSzy+TkEMSw=)
2: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl (hash: 2YupLjU4Z8DglnjVzouJZlIrK3S3LiR5obeodoiy8kk=)
3: uJ_NCn-Lq8NE4MvREAlX3QhyYCI.roa (hash: oO/Qq5pXhp2RVnxIT3B+rFWzEWSNId4e/659/WEeXK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:17:88:18:fd:03:6e:47:09:80:7f:71:f9:da:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
Validity
Not Before: Oct 27 08:00:34 2026 GMT
Not After : Oct 28 08:00:34 2026 GMT
Subject: CN=eef60f8b4d15d71a0a7a725a18b0726ddfdecc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6a:62:da:2c:48:a8:cb:09:90:4b:f8:ba:99:
4d:4d:59:95:34:7e:e6:7e:cd:89:f0:cc:87:37:6e:
c4:eb:b7:82:ac:ae:c6:35:10:56:8d:75:51:60:97:
92:ee:f8:d8:8b:b6:d8:a6:c2:c8:c2:aa:b9:6a:83:
70:18:b2:62:f8:30:58:b9:00:e1:db:66:47:0f:ad:
b8:a3:2b:22:98:81:be:88:34:fa:48:fb:7b:12:b8:
4f:b8:65:47:35:87:11:1f:c7:3f:25:56:84:1b:9f:
bf:32:a6:64:9f:8b:04:e5:f3:c3:54:6c:39:4c:ac:
82:f9:7f:33:a3:0a:8a:25:5e:c4:c4:fc:7a:9f:3f:
0b:f9:f4:8c:66:d4:4a:24:46:a3:6d:ef:66:f7:4d:
8c:b3:86:ec:dd:1e:c1:2b:cb:c8:2d:70:93:7b:28:
69:f0:01:c4:74:09:42:39:78:fb:91:5d:1b:01:19:
c0:08:88:8f:b5:01:35:42:05:cc:1a:32:5c:5e:43:
2b:c4:6d:77:b5:7c:5a:9d:98:2f:95:d2:b4:86:8a:
82:88:20:e9:10:df:2f:20:03:c7:a9:f0:2c:86:33:
96:84:4e:06:3b:e9:f0:5d:52:94:a5:27:94:08:46:
74:7b:c5:53:9a:02:64:66:98:8a:17:2d:5d:a3:83:
f6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F6:0F:8B:4D:15:D7:1A:0A:7A:72:5A:18:B0:72:6D:DF:DE:CC:2F
X509v3 Authority Key Identifier:
keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:55:96:d4:67:18:05:05:2a:af:71:e0:d0:70:9c:c4:40:e1:
6c:1a:c7:d8:6a:42:d4:21:57:07:29:f0:41:92:4a:3d:db:ba:
10:92:fb:5d:74:cb:31:d0:df:27:a9:63:b2:b7:a3:c8:5e:78:
e7:95:ec:ff:5f:ab:a1:a7:4f:72:d4:31:c5:50:25:13:40:33:
7e:7a:96:41:10:3b:be:df:2c:49:66:07:91:69:87:9e:89:d7:
df:3d:d9:2b:31:05:32:35:6c:b1:f2:dc:e6:26:82:b7:7c:ae:
c2:d0:6f:c5:5c:cd:aa:b1:74:1f:ec:3c:53:a5:6c:6a:5e:b1:
32:fd:92:cd:ba:68:34:e2:43:17:8e:83:80:f9:0c:53:8f:14:
14:2d:ef:7e:f1:ca:dd:e7:5a:92:9b:1b:77:25:09:f4:12:a7:
46:7a:ef:86:54:15:92:44:97:6f:f2:5e:9a:89:70:76:fb:66:
ed:c4:68:bf:e4:38:49:7c:8c:6f:f2:12:89:5c:5a:79:c7:ba:
89:d9:7a:58:ba:5e:f6:ce:35:cd:a8:b5:49:4e:3b:b6:37:fc:
89:51:82:64:42:21:16:53:d8:0e:b4:c5:ce:2b:08:19:02:48:
34:3a:41:d2:2e:47:a8:41:84:7f:c1:b3:e4:c8:c4:78:a0:b3:
d4:c4:ee:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8YBeIGP0DbkcJgH9x+do9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDY3ODVmNDY5YmU4YWE3MTUxZTMzMzNlNDc0NjVkNDc4
ZmQwZTcwHhcNMjYxMDI3MDgwMDM0WhcNMjYxMDI4MDgwMDM0WjAzMTEwLwYDVQQD
EyhlZWY2MGY4YjRkMTVkNzFhMGE3YTcyNWExOGIwNzI2ZGRmZGVjYzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2pi2ixIqMsJkEv4uplNTVmVNH7m
fs2J8MyHN27E67eCrK7GNRBWjXVRYJeS7vjYi7bYpsLIwqq5aoNwGLJi+DBYuQDh
22ZHD624oysimIG+iDT6SPt7ErhPuGVHNYcRH8c/JVaEG5+/MqZkn4sE5fPDVGw5
TKyC+X8zowqKJV7ExPx6nz8L+fSMZtRKJEajbe9m902Ms4bs3R7BK8vILXCTeyhp
8AHEdAlCOXj7kV0bARnACIiPtQE1QgXMGjJcXkMrxG13tXxanZgvldK0hoqCiCDp
EN8vIAPHqfAshjOWhE4GO+nwXVKUpSeUCEZ0e8VTmgJkZpiKFy1do4P2NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO72D4tNFdcaCnpyWhiwcm3f3swvMB8GA1UdIwQY
MBaAFJJGeF9Gm+iqcVHjMz5HRl1Hj9DnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2taNFgwYWI2S3B4VWVNelBrZEdYVWVQME9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ZTA1ODAtOGIyZi00OWE3LWFiZDgt
NWMzOGM3NDc1YWE5LzEva2taNFgwYWI2S3B4VWVNelBrZEdYVWVQME9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80ZTA1ODAtOGIyZi00OWE3LWFiZDgtNWMzOGM3NDc1YWE5
LzEva2taNFgwYWI2S3B4VWVNelBrZEdYVWVQME9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtFWW1GcY
BQUqr3Hg0HCcxEDhbBrH2GpC1CFXBynwQZJKPdu6EJL7XXTLMdDfJ6ljsrejyF54
55Xs/1+roadPctQxxVAlE0AzfnqWQRA7vt8sSWYHkWmHnonX3z3ZKzEFMjVssfLc
5iaCt3yuwtBvxVzNqrF0H+w8U6Vsal6xMv2SzbpoNOJDF46DgPkMU48UFC3vfvHK
3edakpsbdyUJ9BKnRnrvhlQVkkSXb/Jemolwdvtm7cRov+Q4SXyMb/ISiVxaece6
idl6WLpe9s41zai1SU47tjf8iVGCZEIhFlPYDrTFzisIGQJINDpB0i5HqEGEf8Gz
5MjEeKCz1MTu0g==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:56 2026 by rpki-client