Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
File: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft (raw, json)
Hash identifier: ZGeS2mJjoZgKdxTxkQaRlhVfBLZy7F3kbbM3p0ZQKYE=
Subject key identifier: 8E:EB:D9:36:E6:05:3A:DA:0E:70:BD:97:1D:CA:FF:00:BF:BB:6F:BB
Authority key identifier: 91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
Certificate issuer: /CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Certificate serial: 01A086E6E49A32BA98FC114CDC5C9C7C8C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
Manifest number: 0A62
Signing time: Wed 09 Sep 2026 16:01:13 +0000
Manifest this update: Wed 09 Sep 2026 16:01:13 +0000
Manifest next update: Thu 10 Sep 2026 16:01:13 +0000
Files and hashes: 1: _E48T5Kk_YeYZLQhVAgd8hC7YsU.roa (hash: k0dJ8PeVcNyuxj67fWBRQ1gHRoWtlCyhQvB826alDbQ=)
2: kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl (hash: Ni5i+oenGaPDaQFbzsUfnTQMr7+LWvn7htq/+JMipaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:e6:e4:9a:32:ba:98:fc:11:4c:dc:5c:9c:7c:8c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917c33c75961318d8ee3cb13464a90d00ab8bd2d
Validity
Not Before: Sep 9 16:01:13 2026 GMT
Not After : Sep 10 16:01:13 2026 GMT
Subject: CN=8eebd936e6053ada0e70bd971dcaff00bfbb6fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:5c:02:0f:f7:2d:bf:68:45:30:64:4a:cd:
da:62:d2:c6:66:2a:71:58:58:ed:eb:4d:24:2f:1a:
0c:f2:73:08:00:06:22:e2:a2:7f:f9:e6:38:f1:e5:
45:bc:98:bc:fe:68:af:8d:fe:c5:f0:15:f1:1c:18:
75:85:17:c2:97:5c:a2:cd:37:5d:02:60:00:31:f0:
b4:c8:77:6a:b9:3e:df:7f:83:5b:1c:23:37:e3:a9:
f9:bf:8d:18:1b:cd:85:36:7c:4b:24:0e:46:ba:4d:
4d:02:5d:f7:c3:ef:03:e8:c1:89:23:9d:01:e8:7e:
18:4c:43:37:f4:ad:3d:ba:23:49:07:fc:46:d9:84:
7c:b3:b4:83:e8:49:78:45:21:9a:9e:84:c1:20:6c:
5a:ed:63:3c:13:96:d5:83:91:7f:88:27:7f:ce:5a:
eb:44:0f:87:d5:f7:0b:1b:33:17:e2:4f:75:e1:27:
b8:a2:66:50:d5:f5:b5:20:f2:2e:61:7f:ba:92:f5:
8d:6a:5f:49:dc:24:49:7f:d7:90:a5:d9:a1:42:c3:
1f:31:28:d0:ce:e3:eb:08:6b:6c:e3:84:26:be:94:
7e:0a:41:b4:e8:8b:84:4c:31:47:38:95:da:62:5f:
37:9a:ad:22:08:30:d1:3c:1c:ef:4d:48:5d:62:af:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EB:D9:36:E6:05:3A:DA:0E:70:BD:97:1D:CA:FF:00:BF:BB:6F:BB
X509v3 Authority Key Identifier:
keyid:91:7C:33:C7:59:61:31:8D:8E:E3:CB:13:46:4A:90:D0:0A:B8:BD:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/ac273a-9c8b-4ef7-a400-c3761a75d047/1/kXwzx1lhMY2O48sTRkqQ0Aq4vS0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:88:08:f8:93:2d:e9:52:96:73:2d:73:5b:d3:37:30:d7:5c:
19:cc:4b:51:56:f1:64:65:aa:76:13:ae:c2:a6:ab:b2:37:b7:
c2:00:50:22:5a:b0:98:4b:39:1e:3c:6f:d6:6a:6e:7b:c3:02:
d2:e1:28:3f:20:3a:5c:3d:b9:b8:c4:68:d7:24:e9:44:f2:dc:
4a:cc:e9:c3:3e:f9:1a:2d:1f:53:6c:5c:3c:07:ce:50:78:13:
b2:59:dc:5b:4b:a8:a8:12:ce:c4:2b:08:98:0d:22:f0:94:d2:
bc:ec:8c:7a:2e:96:43:ae:2c:33:03:6f:a4:83:24:4b:a9:05:
40:9d:66:d6:52:b4:df:04:c5:91:00:7b:f6:31:ed:b6:e3:7d:
84:08:96:88:05:f5:d0:50:34:8e:2e:29:90:98:70:43:6e:17:
18:3d:8e:73:55:1f:90:a5:ce:2c:15:6b:a3:ab:dd:d1:3d:24:
7f:f0:a1:0d:37:3a:90:b8:cf:76:b7:9b:e1:ee:32:74:b3:bf:
f6:d6:8c:6e:2d:65:ac:89:72:8e:60:fb:e3:3f:c6:b1:81:8b:
e7:17:d1:32:a6:07:1b:39:4c:05:82:2c:35:bc:ba:c1:ef:f4:
fb:b2:20:fd:78:26:80:3c:02:d0:89:62:96:8a:26:9c:fc:9a:
d4:3a:59:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 22:25:26 2026 by rpki-client