Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
File: kPZLEhCNmzZnea-6z0gvefjA4xo.mft (raw, json)
Hash identifier: vUkCnkDVK1OmKGVQ0eletXNlpb3I1JbLgy9MFGf0WQY=
Subject key identifier: A7:94:37:75:96:7A:66:8A:62:9C:E5:00:9A:F2:3B:6B:C0:69:E3:4C
Authority key identifier: 90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
Certificate issuer: /CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Certificate serial: 01A17C97CD9379559917AA57C992F904A84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
Manifest number: 06D3
Signing time: Tue 27 Oct 2026 09:01:25 +0000
Manifest this update: Tue 27 Oct 2026 09:01:25 +0000
Manifest next update: Wed 28 Oct 2026 09:01:25 +0000
Files and hashes: 1: gujpeuXdKQltuUKd7nb7ecCwHu0.roa (hash: 2n9HbUvjLRQ1ByGXuU3L0Iu4zHU5gGJaPtEBGt//aPI=)
2: kPZLEhCNmzZnea-6z0gvefjA4xo.crl (hash: MxoLyVGx3HI/wZ3vmBSo0/L9CXjYjJ5ZX2HO8UXhEvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:cd:93:79:55:99:17:aa:57:c9:92:f9:04:a8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Validity
Not Before: Oct 27 09:01:25 2026 GMT
Not After : Oct 28 09:01:25 2026 GMT
Subject: CN=a7943775967a668a629ce5009af23b6bc069e34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:74:36:aa:76:e3:79:28:ae:75:ec:d2:d4:
c1:a6:7a:b8:31:7f:c8:3a:3b:7c:9d:09:cd:b4:4b:
90:4c:c0:f7:dc:f5:6d:0d:91:6e:52:3e:8f:be:22:
ca:25:f8:7c:62:80:59:d7:44:6a:10:7b:fc:71:66:
4a:a3:4a:dd:14:64:13:c6:25:3e:89:52:a2:82:a5:
c4:29:54:31:d2:16:94:31:f5:bb:b8:28:b9:58:eb:
ae:c4:ee:2d:4d:09:20:53:77:72:3e:96:32:35:8d:
57:41:75:c6:3e:58:31:3a:81:1d:25:d0:27:16:2f:
31:00:ff:91:99:81:b8:0f:53:fc:16:69:7e:f1:a6:
75:6b:e1:fe:d8:85:60:39:4f:8c:2e:f7:ae:1b:85:
27:d6:4d:51:5a:29:8b:f9:04:04:f0:21:77:68:eb:
75:30:e9:1a:48:92:13:e4:9e:8b:aa:0e:fb:28:23:
d6:ea:21:a0:fd:33:01:19:48:a4:f8:2e:bb:fd:c3:
8f:36:57:dc:41:f9:69:73:18:5d:1e:9b:f4:24:ca:
72:52:bd:6d:fe:e3:84:57:d6:11:8d:24:c8:1f:31:
b2:76:da:56:1e:59:62:b0:fa:d9:88:21:4a:c7:96:
aa:b7:25:1f:a4:dc:19:ec:3b:6e:07:61:21:8a:1d:
1e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:94:37:75:96:7A:66:8A:62:9C:E5:00:9A:F2:3B:6B:C0:69:E3:4C
X509v3 Authority Key Identifier:
keyid:90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:26:2a:19:b9:1d:9e:7a:3f:27:95:e9:64:ef:99:6e:24:9e:
29:dd:5e:d0:06:cd:06:c5:66:7c:0c:aa:1d:fa:47:eb:78:a2:
80:17:94:89:4f:98:e5:75:ad:0a:8a:44:cd:21:c2:79:e7:4d:
08:94:1b:e8:e2:8a:2b:46:94:4d:f5:54:44:02:f2:7c:f8:61:
0a:00:05:b1:ab:3b:c9:72:0b:ce:e8:1c:c1:31:ea:d4:bf:e2:
34:82:66:34:74:40:92:b3:3a:17:c4:b9:0d:22:91:08:08:4a:
a8:4e:48:3e:1e:d9:2c:95:58:51:8d:54:66:65:bd:e0:95:4b:
09:78:28:d2:cb:85:98:e3:6c:b1:dc:03:cb:2d:04:29:3a:03:
12:c0:35:d1:d2:f9:22:f9:61:e8:63:4e:05:72:69:29:b9:7a:
11:0b:47:03:02:a0:60:2b:3c:81:fc:93:73:59:27:2e:21:89:
5b:c6:97:1a:e2:b8:2b:ec:16:63:a6:d7:f0:5e:6d:38:b7:52:
2d:08:8e:93:09:b5:2e:e5:af:0a:87:d5:97:39:5c:f0:c6:7a:
7f:29:e9:36:a7:63:b5:84:cd:c3:85:bf:b3:a7:c2:25:d7:92:
1c:7a:7d:d8:e5:8e:05:f6:6f:18:e1:95:52:21:8b:36:ef:59:
a1:c4:70:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF8l82TeVWZF6pXyZL5BKhLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjY0YjEyMTA4ZDliMzY2Nzc5YWZiYWNmNDgyZjc5Zjhj
MGUzMWEwHhcNMjYxMDI3MDkwMTI1WhcNMjYxMDI4MDkwMTI1WjAzMTEwLwYDVQQD
EyhhNzk0Mzc3NTk2N2E2NjhhNjI5Y2U1MDA5YWYyM2I2YmMwNjllMzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCt0Nqp243kornXs0tTBpnq4MX/I
Ojt8nQnNtEuQTMD33PVtDZFuUj6PviLKJfh8YoBZ10RqEHv8cWZKo0rdFGQTxiU+
iVKigqXEKVQx0haUMfW7uCi5WOuuxO4tTQkgU3dyPpYyNY1XQXXGPlgxOoEdJdAn
Fi8xAP+RmYG4D1P8Fml+8aZ1a+H+2IVgOU+MLveuG4Un1k1RWimL+QQE8CF3aOt1
MOkaSJIT5J6Lqg77KCPW6iGg/TMBGUik+C67/cOPNlfcQflpcxhdHpv0JMpyUr1t
/uOEV9YRjSTIHzGydtpWHllisPrZiCFKx5aqtyUfpNwZ7DtuB2Ehih0e2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKeUN3WWemaKYpzlAJryO2vAaeNMMB8GA1UdIwQY
MBaAFJD2SxIQjZs2Z3mvus9IL3n4wOMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BaTEVoQ05telpuZWEtNnowZ3ZlZmpBNHhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mMTlmNjItY2FkZS00MmM5LWE3NTct
MWRjYjBiYzdhOTZhLzEva1BaTEVoQ05telpuZWEtNnowZ3ZlZmpBNHhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mMTlmNjItY2FkZS00MmM5LWE3NTctMWRjYjBiYzdhOTZh
LzEva1BaTEVoQ05telpuZWEtNnowZ3ZlZmpBNHhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiYqGbkd
nno/J5XpZO+ZbiSeKd1e0AbNBsVmfAyqHfpH63iigBeUiU+Y5XWtCopEzSHCeedN
CJQb6OKKK0aUTfVURALyfPhhCgAFsas7yXILzugcwTHq1L/iNIJmNHRAkrM6F8S5
DSKRCAhKqE5IPh7ZLJVYUY1UZmW94JVLCXgo0suFmONssdwDyy0EKToDEsA10dL5
Ivlh6GNOBXJpKbl6EQtHAwKgYCs8gfyTc1knLiGJW8aXGuK4K+wWY6bX8F5tOLdS
LQiOkwm1LuWvCofVlzlc8MZ6fynpNqdjtYTNw4W/s6fCJdeSHHp92OWOBfZvGOGV
UiGLNu9ZocRwtw==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:49:40 2026 by rpki-client