Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.mft
File: kLOjoNZi0U2oQEvSHcSJ5jlFYk4.mft (raw, json)
Hash identifier: K/Cy067HhBr8c/98AGRU0oacrUvq1y2Iwd4Kls5tyUY=
Subject key identifier: 26:32:E8:23:86:F8:C7:DB:2F:C6:6D:0D:0F:A5:02:DF:78:CA:B5:D9
Authority key identifier: 90:B3:A3:A0:D6:62:D1:4D:A8:40:4B:D2:1D:C4:89:E6:39:45:62:4E
Certificate issuer: /CN=90b3a3a0d662d14da8404bd21dc489e63945624e
Certificate serial: 01A17A04A170CB1B490B269B6B1A780F9D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.mft
Manifest number: 1AC3
Signing time: Mon 26 Oct 2026 21:01:26 +0000
Manifest this update: Mon 26 Oct 2026 21:01:26 +0000
Manifest next update: Tue 27 Oct 2026 21:01:26 +0000
Files and hashes: 1: kLOjoNZi0U2oQEvSHcSJ5jlFYk4.crl (hash: QKAAngKVFNPOVDbjC2zWaE8wD8fGfK5sdkWRMluSxtc=)
2: qKzL_ME8UuHWQc0CLPTCLEEBp0E.roa (hash: Nj/emuAe0XidzndkLYnMG2PIERjSJH89bACx94cpGMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:a1:70:cb:1b:49:0b:26:9b:6b:1a:78:0f:9d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b3a3a0d662d14da8404bd21dc489e63945624e
Validity
Not Before: Oct 26 21:01:26 2026 GMT
Not After : Oct 27 21:01:26 2026 GMT
Subject: CN=2632e82386f8c7db2fc66d0d0fa502df78cab5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:1b:75:92:0a:bb:fe:e1:83:e3:60:d6:04:
bd:23:91:e1:a3:bf:c6:93:44:24:b9:ac:6e:12:20:
ae:3f:a1:09:05:f9:2b:c2:dd:cc:c1:f1:fe:02:ef:
74:50:b5:e3:af:8e:21:07:b8:64:cb:74:1f:69:39:
0c:4a:0a:b6:2c:00:0b:9a:da:05:f4:83:f1:90:2c:
de:64:e8:49:fd:20:eb:cc:63:be:d2:3c:fe:34:2e:
0d:9f:a3:26:97:49:4a:c5:5a:26:9e:dd:9b:26:30:
df:32:b1:d3:2b:b2:7a:05:61:30:aa:8d:63:1e:9c:
85:7c:14:b4:b9:86:f9:74:41:65:62:26:bc:bf:59:
89:cd:48:02:94:e7:d5:92:ea:eb:a0:da:65:7b:8e:
71:00:0f:50:7f:a0:ae:74:d8:2a:cc:6d:04:b6:44:
2b:c9:89:96:93:e1:3e:55:e6:1d:fb:23:b5:fd:b3:
e9:e0:23:f7:4c:ad:5e:c2:5d:17:d2:bf:b1:99:3f:
1e:9c:88:78:d3:67:7d:56:2a:a1:3c:2b:09:ef:93:
a6:bd:c4:ae:04:dc:b1:41:cc:d8:a8:ce:14:07:5e:
f4:66:60:9e:f5:27:7a:40:f8:c8:cf:77:bf:10:7c:
be:01:8f:b3:1c:47:d8:b0:c3:d3:c1:de:27:c0:70:
1c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:32:E8:23:86:F8:C7:DB:2F:C6:6D:0D:0F:A5:02:DF:78:CA:B5:D9
X509v3 Authority Key Identifier:
keyid:90:B3:A3:A0:D6:62:D1:4D:A8:40:4B:D2:1D:C4:89:E6:39:45:62:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/7fb4ea-5bbc-4c8c-8b5d-288cfd1c2a3d/1/kLOjoNZi0U2oQEvSHcSJ5jlFYk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:30:68:be:f2:44:17:a5:08:91:26:4b:64:64:94:b3:49:d3:
08:bb:32:b2:2d:c1:99:11:12:a8:9d:a3:4d:dd:ae:c1:90:05:
f6:1a:aa:4f:45:0a:52:2a:6d:51:8e:67:17:55:17:6a:d1:2b:
ce:70:e5:72:7d:79:6a:1c:91:5e:9a:5c:cf:73:c4:2d:68:ed:
f1:90:17:0e:ed:0f:7c:a9:4a:59:3c:99:2b:4d:b6:55:ad:1a:
ba:9b:c0:52:1a:04:b1:08:6d:ea:f2:80:21:1a:28:30:89:76:
34:71:68:af:4b:a7:ec:17:5b:18:8b:df:a5:70:f5:db:38:45:
62:8e:c4:bc:b8:84:9d:24:50:86:ea:67:95:bf:3d:5b:2a:3c:
51:ff:25:2b:da:c3:2d:84:a6:95:9b:11:9a:b9:9e:13:bd:36:
05:40:83:fa:a1:b0:98:1d:d5:de:1f:78:d3:61:e7:a4:9c:f4:
15:c1:c1:9f:85:b1:9d:2e:82:90:da:bf:20:ba:c5:0f:09:fe:
3d:2e:80:cd:55:8b:e0:68:77:dc:8f:4a:dc:e2:52:ce:d1:05:
fa:94:23:bc:6c:71:76:1c:be:ce:1f:9d:99:1b:b5:d7:ba:fa:
b5:47:9f:b5:57:e0:85:40:bf:73:63:87:ff:ef:e2:3f:c3:3a:
20:80:f6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:55:55 2026 by rpki-client