Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.mft
File: kcmMNQ8lxNaLMN4igMqqEDUdTAg.mft (raw, json)
Hash identifier: D203YxU7x9McZi8nOQWJyT0t8EbjN9jjEdapwZVeQTs=
Subject key identifier: 4C:21:9D:76:F6:29:96:FB:16:67:CD:63:19:B7:EE:98:DE:AC:C9:B3
Authority key identifier: 91:C9:8C:35:0F:25:C4:D6:8B:30:DE:22:80:CA:AA:10:35:1D:4C:08
Certificate issuer: /CN=91c98c350f25c4d68b30de2280caaa10351d4c08
Certificate serial: 01A06F838C30180BA0541C24F53026523D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcmMNQ8lxNaLMN4igMqqEDUdTAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.mft
Manifest number: B3
Signing time: Sat 05 Sep 2026 03:01:27 +0000
Manifest this update: Sat 05 Sep 2026 03:01:27 +0000
Manifest next update: Sun 06 Sep 2026 03:01:27 +0000
Files and hashes: 1: dGbLcxcr7X-VuqdNwkxJEVAdoZw.roa (hash: Df8yIA2woKIcIr/lHUrWEZ4NVPdZqkSz50++AQwCXPk=)
2: kcmMNQ8lxNaLMN4igMqqEDUdTAg.crl (hash: rQcI+CTszsQ9/FbWn1AC+3tSenSUNouuKmJKtVFhLN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcmMNQ8lxNaLMN4igMqqEDUdTAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:83:8c:30:18:0b:a0:54:1c:24:f5:30:26:52:3d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c98c350f25c4d68b30de2280caaa10351d4c08
Validity
Not Before: Sep 5 03:01:27 2026 GMT
Not After : Sep 6 03:01:27 2026 GMT
Subject: CN=4c219d76f62996fb1667cd6319b7ee98deacc9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:14:3d:28:b9:d3:2d:34:8a:91:58:a8:0d:c4:
6c:8a:8a:7c:66:60:8d:49:37:7e:8e:77:78:ac:f4:
a6:f6:d7:0e:a2:37:12:87:2b:84:aa:01:5d:47:36:
db:aa:7c:cd:37:7e:c9:2f:ca:28:6d:fa:ed:aa:60:
a4:27:0f:a5:db:9e:29:f0:d8:27:1a:61:a8:99:74:
39:46:22:64:ca:a4:fc:18:1f:26:e5:cd:7f:ac:f8:
e9:ac:ca:5d:12:ec:19:e9:01:7e:dc:57:f4:b2:68:
ff:db:a5:08:d4:ac:73:33:00:13:79:1d:14:d6:5d:
a9:b6:0b:f5:0c:88:4e:0e:77:a6:81:09:9b:2d:93:
74:fd:7f:77:40:c3:45:fb:4d:0f:40:ef:a1:84:66:
bd:0a:33:1f:e9:f8:5b:b7:65:bc:23:d1:71:47:14:
6d:cb:e3:5a:a2:40:a1:de:c4:93:a4:94:a2:28:f9:
d8:35:d1:03:b2:49:63:8b:7f:f7:59:6a:06:38:b3:
af:dd:eb:56:2e:c1:2b:c9:4a:2d:57:07:e7:ab:75:
4b:5d:f2:b9:de:89:6d:00:a6:ab:64:f2:cf:66:f9:
b4:3b:21:d2:9f:83:e8:0b:44:dc:d9:41:0b:85:3f:
67:70:92:b1:c8:40:72:07:19:77:a3:a4:d7:6a:f0:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:21:9D:76:F6:29:96:FB:16:67:CD:63:19:B7:EE:98:DE:AC:C9:B3
X509v3 Authority Key Identifier:
keyid:91:C9:8C:35:0F:25:C4:D6:8B:30:DE:22:80:CA:AA:10:35:1D:4C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcmMNQ8lxNaLMN4igMqqEDUdTAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9c:3c:21:1c:84:99:a2:e9:8a:2d:35:b7:e1:d8:1f:5e:37:
38:a0:45:02:fb:10:13:ab:64:ad:74:a6:e6:95:1e:87:96:92:
a1:80:d5:0e:6f:d5:36:99:9b:1f:f1:66:f1:32:2e:5a:1e:cf:
9b:f8:89:5b:93:fe:31:94:80:1d:dc:a4:5a:a0:91:d4:8a:b6:
85:ef:85:68:50:79:9b:2e:f3:64:ea:12:45:bc:aa:3f:b0:39:
19:69:83:cd:d3:b5:f9:9b:ed:0c:a7:f1:33:0f:4e:71:4c:d5:
70:03:cd:4e:cd:e7:55:15:39:d8:7d:00:f0:8c:7d:61:e5:50:
52:de:86:23:bc:85:f5:c1:b1:92:54:64:8f:fb:12:95:10:c8:
42:2a:2e:b9:5f:3b:34:32:70:d2:87:d2:36:e4:0c:09:76:fa:
f6:c5:a7:ea:66:c6:24:07:40:71:f9:85:8a:7e:1c:b8:e7:26:
80:ae:fa:2f:d7:32:95:16:f5:b6:39:bb:fb:e9:d3:2c:74:7b:
22:c3:21:22:57:27:0c:40:b5:e4:a2:58:f8:b2:00:98:a1:6d:
8b:b8:82:50:88:8e:b0:3d:ef:89:f8:ac:6a:c7:10:60:5b:8f:
d6:f5:10:e0:38:92:e7:32:ad:29:cb:99:53:c2:ca:b4:0e:53:
e1:f7:0b:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvg4wwGAugVBwk9TAmUj2LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzk4YzM1MGYyNWM0ZDY4YjMwZGUyMjgwY2FhYTEwMzUx
ZDRjMDgwHhcNMjYwOTA1MDMwMTI3WhcNMjYwOTA2MDMwMTI3WjAzMTEwLwYDVQQD
Eyg0YzIxOWQ3NmY2Mjk5NmZiMTY2N2NkNjMxOWI3ZWU5OGRlYWNjOWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9RQ9KLnTLTSKkVioDcRsiop8ZmCN
STd+jnd4rPSm9tcOojcShyuEqgFdRzbbqnzNN37JL8oobfrtqmCkJw+l254p8Ngn
GmGomXQ5RiJkyqT8GB8m5c1/rPjprMpdEuwZ6QF+3Ff0smj/26UI1KxzMwATeR0U
1l2ptgv1DIhODnemgQmbLZN0/X93QMNF+00PQO+hhGa9CjMf6fhbt2W8I9FxRxRt
y+NaokCh3sSTpJSiKPnYNdEDsklji3/3WWoGOLOv3etWLsEryUotVwfnq3VLXfK5
3oltAKarZPLPZvm0OyHSn4PoC0Tc2UELhT9ncJKxyEByBxl3o6TXavAoJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwhnXb2KZb7FmfNYxm37pjerMmzMB8GA1UdIwQY
MBaAFJHJjDUPJcTWizDeIoDKqhA1HUwIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NtTU5ROGx4TmFMTU40aWdNcXFFRFVkVEFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS81ZmY4OWEtMmYxNS00MDkwLWJjYzIt
ODA3YjdjMmQ2Mzg5LzEva2NtTU5ROGx4TmFMTU40aWdNcXFFRFVkVEFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS81ZmY4OWEtMmYxNS00MDkwLWJjYzItODA3YjdjMmQ2Mzg5
LzEva2NtTU5ROGx4TmFMTU40aWdNcXFFRFVkVEFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZw8IRyE
maLpii01t+HYH143OKBFAvsQE6tkrXSm5pUeh5aSoYDVDm/VNpmbH/Fm8TIuWh7P
m/iJW5P+MZSAHdykWqCR1Iq2he+FaFB5my7zZOoSRbyqP7A5GWmDzdO1+ZvtDKfx
Mw9OcUzVcAPNTs3nVRU52H0A8Ix9YeVQUt6GI7yF9cGxklRkj/sSlRDIQiouuV87
NDJw0ofSNuQMCXb69sWn6mbGJAdAcfmFin4cuOcmgK76L9cylRb1tjm7++nTLHR7
IsMhIlcnDEC15KJY+LIAmKFti7iCUIiOsD3vifisascQYFuP1vUQ4DiS5zKtKcuZ
U8LKtA5T4fcL6Q==
-----END CERTIFICATE-----
Generated at Sat Sep 5 07:02:49 2026 by rpki-client