Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
File: KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft (raw, json)
Hash identifier: 1ik3HMXzaEK7ut8CaCHjNTLhsGyDirV4mvKb1RtnZJ8=
Subject key identifier: 6F:E5:B7:E6:F0:1B:30:FB:A3:2D:80:ED:F0:38:21:DE:81:69:46:67
Authority key identifier: 29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
Certificate issuer: /CN=29275327a5e85f3c8c14c984036f493feb59b016
Certificate serial: 01A1781631E03E86E7E83756867BA743B4D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
Manifest number: 1AC7
Signing time: Mon 26 Oct 2026 12:01:22 +0000
Manifest this update: Mon 26 Oct 2026 12:01:22 +0000
Manifest next update: Tue 27 Oct 2026 12:01:22 +0000
Files and hashes: 1: 3bzICwbkowLXVE3DQanjIH5PzRo.roa (hash: vdv2BX34cA9zfOUvck+cu7XQJJEi8LmDfNVC1P2M+0U=)
2: KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl (hash: JIslcAGX3LSQpHoO5rOhQFuDmSerfREaj5yotjIc0iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:16:31:e0:3e:86:e7:e8:37:56:86:7b:a7:43:b4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29275327a5e85f3c8c14c984036f493feb59b016
Validity
Not Before: Oct 26 12:01:22 2026 GMT
Not After : Oct 27 12:01:22 2026 GMT
Subject: CN=6fe5b7e6f01b30fba32d80edf03821de81694667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:30:50:4b:6c:b8:0b:42:3c:08:59:40:ce:94:
5d:ed:d8:52:82:7b:e9:2d:f8:70:4e:a8:eb:83:be:
01:14:83:95:04:5e:82:84:77:58:65:34:a3:82:87:
34:fe:f2:38:12:94:4d:7c:44:52:93:1b:bb:09:77:
ac:d3:a6:c1:a6:24:32:b4:ce:14:80:6e:f4:2d:f3:
e2:60:63:a0:dc:58:63:89:82:21:11:e2:45:7c:60:
3e:1b:6d:4a:a2:e6:e4:10:58:eb:4c:69:d3:8b:f0:
ea:f4:73:78:10:33:d9:67:0a:9b:b9:79:ff:75:be:
15:e3:1e:70:cd:d6:d0:28:f4:73:51:24:a0:01:23:
08:59:d6:84:53:71:fc:92:11:21:2f:cd:3c:cc:3b:
98:93:7e:30:f8:03:a1:15:57:d0:30:05:ce:f9:86:
c1:2d:c2:8b:13:43:b0:99:e5:1a:1f:86:d4:75:bc:
af:17:89:ec:b0:c3:8d:ff:9c:26:2f:5f:60:c6:f5:
d8:91:1e:8e:e7:e6:c5:09:c7:85:1f:c0:33:a6:57:
7b:10:4d:41:04:0c:f8:e6:78:2e:63:1c:c8:1f:f2:
7d:37:bb:cb:7a:3c:7f:ee:84:ea:12:d7:4b:38:64:
45:c9:99:ca:7a:11:49:49:74:a4:37:98:0c:7a:93:
4a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E5:B7:E6:F0:1B:30:FB:A3:2D:80:ED:F0:38:21:DE:81:69:46:67
X509v3 Authority Key Identifier:
keyid:29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:49:f2:41:65:79:b2:1a:84:8c:26:33:c1:f7:40:34:d7:04:
4c:43:69:46:fb:b6:42:4d:9d:46:90:b0:73:d6:16:f4:5c:b8:
7d:89:5a:ac:19:19:f0:ad:ae:30:c2:42:3a:34:95:80:16:7a:
97:19:a4:d0:c3:8d:ff:84:f4:14:af:c8:2b:15:49:46:5f:56:
e7:a7:43:a0:32:17:3f:dc:d6:f5:d5:e5:58:ba:a3:13:a3:b6:
7a:bf:ad:ef:a9:ba:bc:ff:f2:94:0a:b8:37:86:b2:c9:20:d8:
76:95:a1:9e:b7:30:19:29:00:c7:30:c0:98:e7:b5:9d:61:c4:
b8:87:f9:be:51:e3:85:5c:4e:8d:73:03:46:9c:dd:1e:1f:44:
d2:56:36:8d:b1:8b:a9:35:d4:06:ac:fb:be:86:13:f8:30:ec:
af:5c:dc:cd:6d:50:cb:43:d0:6d:06:b0:14:aa:70:f3:8f:c9:
89:f3:96:14:ce:69:7a:8f:c2:af:9c:23:91:d9:5b:ba:5a:2a:
20:1c:d5:27:99:bc:d1:4b:54:e9:a2:3b:21:3b:a2:da:60:7a:
f0:54:f0:54:a9:22:27:76:f1:b2:10:fd:15:11:85:b4:8b:2f:
b2:dc:fc:19:32:a2:ae:7e:74:99:0c:93:51:dc:03:70:fa:7d:
35:cc:74:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:53:03 2026 by rpki-client