Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
File: kkUytPdDz5XL7BhoG6Z6xduFTzM.mft (raw, json)
Hash identifier: 3OOs0ihiEY4NJSoVQy84NqQeOG6llHUv4+W0cP9mirw=
Subject key identifier: 84:96:B1:4F:02:B2:DB:4E:00:02:06:CF:5F:3C:43:C6:3E:82:77:EC
Authority key identifier: 92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
Certificate issuer: /CN=924532b4f743cf95cbec18681ba67ac5db854f33
Certificate serial: 01A08867451AEE26AA6053B1BFEF3A932F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
Manifest number: 0DE4
Signing time: Wed 09 Sep 2026 23:01:04 +0000
Manifest this update: Wed 09 Sep 2026 23:01:04 +0000
Manifest next update: Thu 10 Sep 2026 23:01:04 +0000
Files and hashes: 1: 96d6ctMX_g4ONOX-V119IuFLbcQ.roa (hash: p56ITbnJXhBydcF7z+SEtTfhLoTMh1wjVprKGq7AA5g=)
2: IQ8FAOOJByrHSMChSBlZ88iHvt0.roa (hash: lJpaXIYxGHP0owQ3ZjIzWZPx1+jN3QXVVl27UeQeST0=)
3: kELVwZs5SaLQrab9sap9Xcmgflk.roa (hash: gOv2sEEdNVSjrYd0iMOFCkOEFxapFPoF2zX1OSgF1Vc=)
4: kkUytPdDz5XL7BhoG6Z6xduFTzM.crl (hash: SzM6O6WsMV6MFAab6w8Xx+mUj1/dEbIueQB+6IfQ5SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:67:45:1a:ee:26:aa:60:53:b1:bf:ef:3a:93:2f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924532b4f743cf95cbec18681ba67ac5db854f33
Validity
Not Before: Sep 9 23:01:04 2026 GMT
Not After : Sep 10 23:01:04 2026 GMT
Subject: CN=8496b14f02b2db4e000206cf5f3c43c63e8277ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ed:83:9f:59:77:18:b3:bb:1c:d6:f5:14:02:
8f:e4:74:4e:6e:bf:31:8c:77:c3:aa:22:9a:a4:cc:
99:e5:c2:84:fd:99:43:b7:2c:8c:35:fd:45:bd:b2:
8d:0c:95:5b:20:02:77:85:25:fc:8b:07:37:0a:44:
bb:26:e2:4a:15:17:ba:7e:10:c9:12:b3:d3:b7:11:
9d:52:cb:eb:18:25:18:74:1d:97:72:6c:35:05:43:
c1:60:1c:21:3e:a3:ee:f1:f7:2a:e6:ab:17:94:3e:
f6:3b:e7:98:f3:7c:81:df:1b:ab:19:f3:e7:f9:75:
d8:f4:a7:23:86:b4:9d:7d:02:04:3b:77:31:75:3a:
40:61:9f:dd:4a:4b:66:bd:3d:31:44:d1:51:de:ac:
5c:8e:38:c6:eb:bc:40:da:89:bf:a6:7f:6f:39:24:
b6:41:96:22:53:9e:59:19:18:d8:d8:d3:b8:f7:28:
17:5b:0a:7e:da:07:c1:d8:88:36:f1:cd:c5:c0:f2:
81:4f:df:06:8e:6d:b4:f0:16:ea:c3:e2:ca:c9:4a:
d2:ab:f3:e4:34:c8:2d:77:f6:5d:74:48:c9:b1:df:
ef:50:fb:55:48:8e:fb:22:1f:96:da:54:7d:62:6c:
cc:3c:07:a7:92:4f:64:d0:61:4e:a2:91:dc:4c:5b:
66:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:96:B1:4F:02:B2:DB:4E:00:02:06:CF:5F:3C:43:C6:3E:82:77:EC
X509v3 Authority Key Identifier:
keyid:92:45:32:B4:F7:43:CF:95:CB:EC:18:68:1B:A6:7A:C5:DB:85:4F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkUytPdDz5XL7BhoG6Z6xduFTzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2b9f01-a56e-4be9-ad32-38ed7155995c/1/kkUytPdDz5XL7BhoG6Z6xduFTzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b3:6f:88:90:d2:aa:a2:41:84:ba:38:e7:b8:ef:4c:39:57:
8b:e6:70:9b:63:6f:78:15:06:14:93:8b:ac:c0:1e:9b:e7:73:
c6:25:0b:24:9d:aa:90:cb:07:2f:d8:73:ab:ee:fd:b4:76:69:
ba:73:a8:a7:08:fc:af:0f:91:fb:23:8c:3b:5c:c5:92:ab:7d:
36:42:96:f6:14:82:54:f6:3a:b1:02:3f:0c:18:bf:c0:00:3f:
73:5f:67:b7:aa:1f:93:4f:87:ec:7f:f6:70:3d:3b:73:e0:e8:
f8:fd:ee:0f:f4:5b:a9:6d:48:3b:1d:3d:52:aa:4a:39:18:d5:
6b:68:2c:7b:f1:b5:81:2a:c1:57:89:03:81:36:67:07:52:ea:
e2:d5:5f:00:de:93:90:14:b4:e4:f3:ec:76:00:d8:ea:73:ec:
3a:2a:59:c0:4c:32:8b:a1:04:85:82:f0:45:61:1b:e3:c4:b7:
58:f8:51:78:73:e6:b2:48:37:36:d5:de:e5:8a:88:30:49:95:
f5:0c:91:5c:ce:24:40:c7:aa:83:a0:28:c9:ac:38:6e:e3:e8:
67:95:f4:3b:a7:55:46:40:c6:14:58:5a:58:9e:14:cb:b5:da:
aa:7f:95:2e:9f:ab:c4:2c:f0:07:02:40:42:79:ef:88:8d:ae:
96:a9:59:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:13:28 2026 by rpki-client