Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
File: kcvU3ulACZF4SiL7T0Kypy5eMPI.mft (raw, json)
Hash identifier: g1fECMZnMIYxnsp/lJhrSsXirC9Xkn9ykxYamEvgsHI=
Subject key identifier: AF:0C:5D:62:A9:E2:7A:6A:3F:F9:D6:56:FA:D2:DC:B0:AD:6F:36:B3
Authority key identifier: 91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2
Certificate issuer: /CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
Certificate serial: 01A06D95CE30B4F47ADE1F8BF3C449297E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
Manifest number: B2
Signing time: Fri 04 Sep 2026 18:02:09 +0000
Manifest this update: Fri 04 Sep 2026 18:02:09 +0000
Manifest next update: Sat 05 Sep 2026 18:02:09 +0000
Files and hashes: 1: dfMJsRYPaWYegojrV6JhI297OJk.roa (hash: 5QAF9n/yTZCGuoA1daWoYwy/+VIV/qk8ffu8M1zMiLA=)
2: iZuGA93ZZWN3X-cXyCHQkoS_Vw0.roa (hash: itZnpyh445SA20ini6TO3E905fGC+GYbjetTSbWhEoI=)
3: kcvU3ulACZF4SiL7T0Kypy5eMPI.crl (hash: xbJs+AN3nA6e5hQwqextabhwaWt9ANkM8uXelJErxxQ=)
4: m84qFoVIKuq1QfVrwA-bqARbzVc.roa (hash: z7G8j3uWWxP/wYgcFiobvZJyK5kPjzvpMVaWwIxiT4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:ce:30:b4:f4:7a:de:1f:8b:f3:c4:49:29:7e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cbd4dee9400991784a22fb4f42b2a72e5e30f2
Validity
Not Before: Sep 4 18:02:09 2026 GMT
Not After : Sep 5 18:02:09 2026 GMT
Subject: CN=af0c5d62a9e27a6a3ff9d656fad2dcb0ad6f36b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:4f:12:23:44:37:87:5a:3a:e6:d0:81:79:
1f:29:10:22:66:6f:3f:2a:ee:cc:7a:70:4c:2e:a6:
d9:e2:bf:ec:ce:0a:33:3b:3f:3b:af:d0:52:c8:80:
d9:ae:7e:06:4b:61:22:85:d5:6e:bc:f0:34:3a:27:
b0:0f:34:26:c1:37:49:26:fa:22:ec:65:24:02:8c:
9b:7e:23:96:8f:5d:33:36:07:d3:75:89:c6:7e:0c:
93:ea:5c:6b:92:6d:08:67:11:6d:2e:82:8b:ca:ea:
12:41:4b:ed:25:0a:28:5c:40:7b:fb:e8:1f:eb:62:
ac:9f:e6:d6:f4:11:c8:6a:7e:ea:fe:48:f7:3b:4e:
24:70:bf:46:ec:72:2b:0c:ce:a5:14:41:fa:de:80:
8f:5a:63:20:f5:f7:cf:d8:36:47:a7:d8:aa:ef:8e:
41:24:31:72:5b:ab:b7:52:1e:3e:8a:34:dd:78:68:
ff:5d:8e:7b:42:5d:c5:96:7d:ae:f2:3b:eb:38:28:
ef:24:1a:96:39:99:bf:71:ef:89:ae:4e:14:1d:5b:
6a:c1:23:02:9f:80:7f:70:55:f7:58:61:c0:8e:b0:
49:0a:c5:5f:5b:6d:fe:2f:14:68:03:ab:d3:5e:3c:
19:9d:a0:3f:4b:a6:2b:ea:c3:42:b3:42:7d:ae:c8:
06:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0C:5D:62:A9:E2:7A:6A:3F:F9:D6:56:FA:D2:DC:B0:AD:6F:36:B3
X509v3 Authority Key Identifier:
keyid:91:CB:D4:DE:E9:40:09:91:78:4A:22:FB:4F:42:B2:A7:2E:5E:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcvU3ulACZF4SiL7T0Kypy5eMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/kcvU3ulACZF4SiL7T0Kypy5eMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:02:76:11:88:da:b3:e4:b6:e9:2f:26:dd:e5:91:c4:27:e8:
b6:54:31:42:de:21:df:d1:49:ea:35:18:9a:57:73:68:b7:79:
0e:96:0f:e6:d0:f0:0a:f8:6d:4f:4b:2b:f5:a1:80:b0:f3:55:
4b:f6:33:a6:05:ee:62:ae:61:bd:db:e9:e8:b3:dd:93:75:42:
ce:a0:16:87:32:9a:7e:a6:d9:aa:ec:43:3f:58:36:a6:cf:a8:
b5:12:97:25:64:a6:57:20:3a:02:35:79:00:e3:2a:e3:fd:53:
20:31:0e:51:00:e8:63:63:8b:1d:ad:45:36:60:29:77:45:07:
e0:f8:2f:2d:a6:a9:f6:46:fc:74:ba:3f:ba:af:3b:b1:c8:c3:
a5:1d:65:0c:b9:84:30:a2:b7:75:9c:00:2c:f7:46:b0:36:98:
da:d6:39:d5:56:08:cc:a3:82:9e:23:9d:f9:9f:99:ac:2a:42:
bb:36:9d:bd:de:c4:6d:22:86:e2:9c:f5:19:60:5b:90:c5:a1:
ee:59:39:e5:1f:3c:5d:ba:80:68:07:d1:cb:4b:31:1c:d5:3a:
5f:f8:ac:a4:41:90:63:f6:7a:bb:55:c0:b8:bc:61:07:29:b8:
ba:56:6f:4d:01:5e:90:d9:d2:ca:2f:19:5c:91:f4:03:c7:fa:
94:02:65:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:01:56 2026 by rpki-client