Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
File: kRbcv3jGLVHakHag0Gra027jt1U.mft (raw, json)
Hash identifier: 5AP8XPA6nMns8zgjsRdGywzUPxFXVk7nI3ihxh/rmMI=
Subject key identifier: 16:18:16:3C:6D:53:E4:37:B1:83:45:03:3F:9A:0B:4A:4F:08:54:1A
Authority key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
Certificate issuer: /CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Certificate serial: 01A088D4AC2403E5F57D826C069446EDE2D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 01:00:34 +0000
Manifest this update: Thu 10 Sep 2026 01:00:34 +0000
Manifest next update: Fri 11 Sep 2026 01:00:34 +0000
Files and hashes: 1: 3_teHZlqiyJL6OCe3l3tQgUazuw.roa (hash: LTM6e0OE0QUFBKrZfsSmWI5JalOFaXi6PGkxoB/+ybc=)
2: kRbcv3jGLVHakHag0Gra027jt1U.crl (hash: E305EJYNbO8RZ8bCnIBZLv4XqDBs1a8m3Yp9K3Z1IJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d4:ac:24:03:e5:f5:7d:82:6c:06:94:46:ed:e2:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Validity
Not Before: Sep 10 01:00:34 2026 GMT
Not After : Sep 11 01:00:34 2026 GMT
Subject: CN=1618163c6d53e437b18345033f9a0b4a4f08541a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:c2:41:99:cf:ed:2f:8d:2b:f7:df:0f:bd:
8b:be:5d:30:bb:ef:dd:c6:4d:10:bd:7e:a5:51:10:
94:e0:41:e6:3f:d0:80:f8:1f:ba:11:88:e6:fa:ab:
5f:39:97:22:4b:9d:e8:8f:a9:29:ec:20:46:7e:02:
f2:d6:57:76:29:11:4c:08:d5:6e:33:12:c8:40:9b:
12:d9:9a:c4:1e:2d:66:9c:19:55:48:a9:65:73:5e:
6f:16:97:33:d8:d9:44:df:ab:7d:70:5c:0a:60:bd:
19:a8:ac:a8:1f:16:dd:46:7a:0b:dc:f6:a4:34:c2:
37:e5:fd:06:d1:51:78:1f:83:32:a9:d2:b3:cf:92:
07:98:be:55:50:1f:95:0f:b5:6e:ce:b2:c1:98:fb:
ec:bf:da:a3:50:5d:a5:e9:18:b7:10:e1:c0:fa:43:
e4:1f:9a:aa:6c:6c:e0:54:c6:8f:55:04:fb:04:b6:
02:2c:d5:32:71:f9:ff:43:4e:4b:d9:98:90:d9:eb:
f3:5a:83:df:fb:de:8d:22:ff:27:3f:3a:52:75:ae:
c4:c4:3f:39:6d:a3:35:11:dd:12:b4:58:b2:f2:90:
7b:a8:96:f8:53:ac:f3:f2:e1:ed:51:d0:da:fb:91:
f9:a9:da:bd:d9:8b:45:c9:87:1d:cd:ba:25:af:e1:
8a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:18:16:3C:6D:53:E4:37:B1:83:45:03:3F:9A:0B:4A:4F:08:54:1A
X509v3 Authority Key Identifier:
keyid:91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:62:69:3e:ec:13:e7:3b:87:1c:01:c9:ef:a1:33:83:22:14:
bf:f2:b7:d3:f9:45:09:4f:aa:6c:44:e5:0d:be:f0:db:e0:e3:
f0:51:fa:e6:4e:14:2c:a6:99:5a:4c:eb:48:4e:ce:bd:f2:c2:
33:72:79:19:95:eb:ea:41:fc:44:3d:23:07:1f:67:d2:08:e2:
e6:c4:5a:37:86:06:28:cf:78:7c:57:9a:0e:5f:9b:b7:1a:14:
9b:d3:28:1d:ca:77:c8:02:ee:ef:9b:c9:13:d4:a6:3e:c3:f5:
ee:64:40:a8:9e:77:f2:c3:cf:27:f2:e8:ae:5e:cc:dd:d8:0a:
b3:5a:ee:16:ec:ad:d8:cf:33:a3:0d:48:a9:ce:27:68:3c:21:
f4:68:42:6b:5f:1a:46:90:80:2b:a4:78:75:11:b9:8b:bf:70:
bf:6a:12:5e:66:d3:58:1f:57:92:a2:da:9c:3e:b2:da:70:47:
7e:47:81:57:57:8b:c4:b6:cb:e0:ae:18:87:b5:98:d4:e4:d3:
48:2d:85:fc:53:cc:b0:b1:32:e4:61:2f:cc:8a:d0:22:f7:22:
c1:9d:4e:99:f4:73:da:ec:fa:cc:71:6e:ca:47:c3:e0:8f:0a:
27:f1:10:21:75:dd:db:1f:ea:ca:18:90:aa:74:24:bf:c3:49:
a3:6c:6b:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCI1KwkA+X1fYJsBpRG7eLTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMTZkY2JmNzhjNjJkNTFkYTkwNzZhMGQwNmFkYWQzNmVl
M2I3NTUwHhcNMjYwOTEwMDEwMDM0WhcNMjYwOTExMDEwMDM0WjAzMTEwLwYDVQQD
EygxNjE4MTYzYzZkNTNlNDM3YjE4MzQ1MDMzZjlhMGI0YTRmMDg1NDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZTCQZnP7S+NK/ffD72Lvl0wu+/d
xk0QvX6lURCU4EHmP9CA+B+6EYjm+qtfOZciS53oj6kp7CBGfgLy1ld2KRFMCNVu
MxLIQJsS2ZrEHi1mnBlVSKllc15vFpcz2NlE36t9cFwKYL0ZqKyoHxbdRnoL3Pak
NMI35f0G0VF4H4MyqdKzz5IHmL5VUB+VD7VuzrLBmPvsv9qjUF2l6Ri3EOHA+kPk
H5qqbGzgVMaPVQT7BLYCLNUycfn/Q05L2ZiQ2evzWoPf+96NIv8nPzpSda7ExD85
baM1Ed0StFiy8pB7qJb4U6zz8uHtUdDa+5H5qdq92YtFyYcdzbolr+GKaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBYYFjxtU+Q3sYNFAz+aC0pPCFQaMB8GA1UdIwQY
MBaAFJEW3L94xi1R2pB2oNBq2tNu47dVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1JiY3YzakdMVkhha0hhZzBHcmEwMjdqdDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xMmY1ZDEtZTc2MC00MTAxLWFmMjUt
N2ZjNDlkYTUzZDEzLzEva1JiY3YzakdMVkhha0hhZzBHcmEwMjdqdDFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8xMmY1ZDEtZTc2MC00MTAxLWFmMjUtN2ZjNDlkYTUzZDEz
LzEva1JiY3YzakdMVkhha0hhZzBHcmEwMjdqdDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWJpPuwT
5zuHHAHJ76EzgyIUv/K30/lFCU+qbETlDb7w2+Dj8FH65k4ULKaZWkzrSE7OvfLC
M3J5GZXr6kH8RD0jBx9n0gji5sRaN4YGKM94fFeaDl+btxoUm9MoHcp3yALu75vJ
E9SmPsP17mRAqJ538sPPJ/Lorl7M3dgKs1ruFuyt2M8zow1Iqc4naDwh9GhCa18a
RpCAK6R4dRG5i79wv2oSXmbTWB9XkqLanD6y2nBHfkeBV1eLxLbL4K4Yh7WY1OTT
SC2F/FPMsLEy5GEvzIrQIvciwZ1OmfRz2uz6zHFuykfD4I8KJ/EQIXXd2x/qyhiQ
qnQkv8NJo2xrGA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:27:22 2026 by rpki-client