Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
File: KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft (raw, json)
Hash identifier: mv4fmzVeu+SauRXu5XbpGJ6Qs21KSRI6+wQopGkmh9U=
Subject key identifier: C3:2F:9B:0E:D0:06:0B:FB:80:2C:D8:35:3C:B0:1F:95:14:51:45:7D
Authority key identifier: 29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
Certificate issuer: /CN=29275327a5e85f3c8c14c984036f493feb59b016
Certificate serial: 01A17A04C82318CF2DCD364E7A30D11A99BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
Manifest number: 1AC8
Signing time: Mon 26 Oct 2026 21:01:35 +0000
Manifest this update: Mon 26 Oct 2026 21:01:35 +0000
Manifest next update: Tue 27 Oct 2026 21:01:35 +0000
Files and hashes: 1: 3bzICwbkowLXVE3DQanjIH5PzRo.roa (hash: vdv2BX34cA9zfOUvck+cu7XQJJEi8LmDfNVC1P2M+0U=)
2: KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl (hash: LsZo/Ct65kjSOVgorBLVqkRS/ywI3HzPv4K5g4PMki4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:04:c8:23:18:cf:2d:cd:36:4e:7a:30:d1:1a:99:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29275327a5e85f3c8c14c984036f493feb59b016
Validity
Not Before: Oct 26 21:01:35 2026 GMT
Not After : Oct 27 21:01:35 2026 GMT
Subject: CN=c32f9b0ed0060bfb802cd8353cb01f951451457d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d2:b8:f2:e7:90:7d:f6:42:9c:4e:a7:60:1c:
50:2d:9a:41:36:a9:cd:75:d4:80:69:32:64:7f:06:
19:c6:51:a2:ad:cf:fe:d5:b2:f0:3a:a7:82:61:f5:
08:24:9a:96:b0:a9:a8:80:ff:c3:36:40:00:87:5d:
3c:99:cc:9f:21:38:6d:06:07:08:b2:fd:5b:b6:39:
ed:23:9f:26:dc:05:3f:78:e0:1b:48:a0:f2:6c:fe:
3f:43:c3:0d:34:83:29:d3:a2:e1:ad:a4:e3:65:67:
e7:c4:78:77:ba:6c:d2:e0:f2:d4:b4:5f:bc:24:b8:
0f:11:fa:45:26:79:97:d4:87:3d:41:ce:50:f3:56:
0e:e4:1d:43:32:64:98:7b:93:f4:92:f1:bc:08:13:
22:99:79:e1:a4:45:5e:c2:dc:d8:45:b2:31:da:64:
f2:7b:48:74:63:e4:07:dd:cb:d4:4a:6e:c8:02:e7:
40:50:91:8e:f8:f7:73:1a:54:17:66:77:f5:16:27:
48:1e:f6:e6:79:11:ae:5c:8b:a5:f7:1b:fe:7d:e5:
15:f4:bd:9d:d8:88:d8:52:db:33:25:f0:eb:2d:e2:
c3:e4:d2:05:c4:21:61:2f:1a:8f:37:0a:12:de:3e:
46:e6:87:3b:9c:fe:5c:72:16:03:85:7e:c1:04:f1:
c2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2F:9B:0E:D0:06:0B:FB:80:2C:D8:35:3C:B0:1F:95:14:51:45:7D
X509v3 Authority Key Identifier:
keyid:29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f0:85:93:1d:7f:37:7e:f8:04:e0:59:8e:0b:8e:eb:c2:f3:
13:62:5d:d0:2e:d6:43:14:a1:88:c0:ee:1b:f9:4e:23:0c:b3:
09:de:c5:e1:4c:8b:58:69:c4:7a:f3:3b:84:c8:ad:de:47:ca:
5d:bf:59:13:7f:18:d2:92:0b:94:36:33:4b:c4:3f:7f:82:70:
ff:80:45:77:5d:dd:67:15:99:ae:cf:1c:58:c9:fb:ef:70:9c:
55:95:1b:b1:68:c2:dd:90:07:3c:96:71:2d:f9:69:04:51:c1:
3d:fe:ca:55:bc:af:d1:f5:c1:66:ca:bb:61:43:4e:0d:59:6b:
49:40:91:40:4d:e6:95:ee:70:db:53:73:5d:b2:58:f8:60:48:
40:18:c3:f3:29:3b:ef:aa:05:95:26:fb:79:4b:40:33:89:2e:
f1:c4:14:40:17:74:34:0d:ac:6b:0a:82:b7:cd:eb:a7:bf:7b:
f6:fa:1e:2b:3d:fd:e2:ee:f4:ad:88:ba:99:da:d3:81:3a:f5:
d0:d1:60:57:d9:28:29:12:d5:3b:50:73:e7:02:1e:69:7a:3c:
91:0d:17:77:0d:ad:bf:a8:db:eb:55:2c:2f:71:28:9e:fc:f7:
29:14:cb:ec:5b:00:a8:64:0f:fb:74:6c:ce:fb:60:62:39:2e:
8a:bc:df:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 06:08:46 2026 by rpki-client