Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
File: Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft (raw, json)
Hash identifier: DP776fUr+jZOmJDJUgKO4+C1vR4qkO5fMZpoQr2w2b8=
Subject key identifier: FF:15:7B:C5:33:08:CF:69:58:0E:F8:95:D1:D3:9F:9C:91:D5:C1:8D
Authority key identifier: 2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83
Certificate issuer: /CN=2ac89af05d20711e0a94e84bf4b44766362c5083
Certificate serial: 01A17D73D2658EAA765DC7690B7E4CEF007E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
Manifest number: 13F3
Signing time: Tue 27 Oct 2026 13:01:44 +0000
Manifest this update: Tue 27 Oct 2026 13:01:44 +0000
Manifest next update: Wed 28 Oct 2026 13:01:44 +0000
Files and hashes: 1: Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl (hash: LyhAr82p6PG5RMPv4bZHO4lkTGDotgWnlwbADhQYZko=)
2: Wrhjb1hAMnvMEFNhZPfM1B86lVE.roa (hash: Gv1vEyePcq9xp58SSBlXaTFRs6qrhv7RxJOEp83e6n8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:d2:65:8e:aa:76:5d:c7:69:0b:7e:4c:ef:00:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac89af05d20711e0a94e84bf4b44766362c5083
Validity
Not Before: Oct 27 13:01:44 2026 GMT
Not After : Oct 28 13:01:44 2026 GMT
Subject: CN=ff157bc53308cf69580ef895d1d39f9c91d5c18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:d8:d7:f1:9a:8c:71:a0:93:3a:e8:53:46:
f8:fa:1a:d0:6c:ea:db:48:51:77:f4:c2:53:5d:6a:
3c:64:db:f7:19:da:17:09:05:6e:9d:11:c8:a1:49:
04:8c:12:b0:cf:e2:d7:2c:82:65:17:91:0a:a2:07:
c8:64:9f:03:d0:b5:29:7a:c4:7b:6f:3b:6d:82:e2:
e8:4e:e2:c5:9a:7a:13:26:02:ab:af:45:b5:d8:4b:
99:03:ae:b1:d9:95:7b:1d:df:21:53:e6:36:d4:11:
59:7d:8e:c3:72:c8:d5:bf:94:31:cb:30:95:5f:11:
25:1f:30:48:77:12:0d:04:03:23:fe:05:ed:1c:f9:
e3:5e:dc:61:10:7f:be:fb:eb:4e:0a:d5:37:2a:9b:
67:5d:00:fc:cf:b0:1d:1c:20:ab:4b:70:44:25:ee:
45:b1:09:85:01:fa:e3:87:53:1a:b4:56:c8:ca:c2:
23:f7:4d:16:93:72:eb:90:ed:86:9f:07:b5:b7:3d:
29:14:a1:5c:3a:6d:41:83:d4:c0:5e:3a:c4:ed:3a:
42:58:40:f3:a8:f5:3b:c2:d7:17:b6:09:ff:86:e1:
29:f5:15:b5:07:33:0e:bb:be:61:a2:09:1e:2d:09:
b8:a8:72:f5:1f:21:a9:d7:17:84:00:74:e8:ac:43:
6c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:15:7B:C5:33:08:CF:69:58:0E:F8:95:D1:D3:9F:9C:91:D5:C1:8D
X509v3 Authority Key Identifier:
keyid:2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:d3:13:1c:55:93:b3:b5:64:e3:01:bd:8c:77:18:8d:d3:00:
1e:6b:b6:81:f4:57:a8:2c:bd:c3:d8:6b:6b:a7:c1:96:17:d1:
d0:af:e9:72:de:fd:68:3f:a6:b2:27:31:e5:b2:29:a7:54:df:
e1:d9:94:44:85:7a:14:36:60:71:88:b1:8b:93:e3:07:9c:7c:
99:00:95:37:b4:cb:ed:75:0b:fc:de:d3:51:24:06:ef:a9:78:
27:fc:c9:1c:4b:bc:7a:67:f2:f7:69:60:32:8d:43:1b:3d:e6:
16:bf:7a:cb:d8:e4:31:3f:91:b5:2b:47:6d:98:3f:e8:86:df:
90:45:a8:2e:c0:72:69:c1:3c:d8:53:f1:d0:99:b6:e4:34:59:
50:4e:05:32:76:4e:55:df:7b:0c:05:3a:85:72:ac:7d:05:5d:
99:04:00:0a:b4:b0:33:c3:18:d7:54:72:40:3e:94:fb:8a:f1:
46:57:ac:1f:65:f4:5f:88:94:b6:c1:11:3c:ef:c5:ca:a4:19:
18:5c:24:ac:89:57:6f:83:c0:4e:25:0b:b2:bf:68:42:b4:13:
6c:32:93:e1:a6:7e:e4:fe:32:7b:48:de:14:cf:f4:81:d5:b1:
5f:c1:7f:c2:88:f3:71:2a:a6:f6:8a:8d:36:0d:ec:99:29:1f:
67:b2:05:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:42:00 2026 by rpki-client