Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
File: kNzOkQAEUUlMQ8FdFy2i651beVY.mft (raw, json)
Hash identifier: 9B8Kn5Z3xy3wnY5g1qLEyklV/r67caX+LGybpr9URD8=
Subject key identifier: 28:DE:18:0B:5A:61:C1:6A:2C:5A:72:9A:D5:05:6E:D4:CC:F8:4F:A5
Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
Certificate issuer: /CN=90dcce91000451494c43c15d172da2eb9d5b7956
Certificate serial: 01A14C86A187978977E2C71D8FEDCDAF4D53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
Manifest number: 1AAE
Signing time: Sun 18 Oct 2026 01:00:53 +0000
Manifest this update: Sun 18 Oct 2026 01:00:53 +0000
Manifest next update: Mon 19 Oct 2026 01:00:53 +0000
Files and hashes: 1: kNzOkQAEUUlMQ8FdFy2i651beVY.crl (hash: 5oC+nD3jaGChNHhe7vs+4VN9DHu6Tx0aI4esgBtEizY=)
2: v6hZlCLBBmxSHliCj0VjnvLOn9M.roa (hash: fL2kZZLRxFW7FCE2FWvmH/Er7BzpFmXug5hP8LnWm4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:86:a1:87:97:89:77:e2:c7:1d:8f:ed:cd:af:4d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956
Validity
Not Before: Oct 18 01:00:53 2026 GMT
Not After : Oct 19 01:00:53 2026 GMT
Subject: CN=28de180b5a61c16a2c5a729ad5056ed4ccf84fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6f:32:03:cc:06:31:fe:8f:31:85:14:5d:6f:
7e:21:f2:b8:87:e3:96:33:79:56:f7:a0:d6:ff:45:
da:a7:e8:e3:ab:f7:72:2c:aa:b6:14:fd:9d:8a:ef:
4e:ba:23:a7:02:0a:e8:c9:3f:ea:0c:4a:4c:06:df:
26:f1:16:a5:9e:e8:bd:0f:40:4b:b0:bc:6f:3b:44:
59:c0:25:d9:df:57:0c:79:aa:f5:bc:f3:02:88:ad:
8f:2e:84:3f:75:8c:16:21:08:57:cc:98:30:b1:45:
3f:c0:f2:58:2f:32:cd:aa:ce:fd:07:45:86:f3:9e:
68:17:43:f5:3f:0a:31:1d:ed:73:2c:21:b1:e5:fb:
05:52:d3:c0:e2:73:ca:01:5a:79:a5:90:48:9f:a5:
24:45:1e:36:da:7c:71:c9:3f:51:8e:4e:e6:29:84:
b2:cb:09:d9:b8:a5:a8:a8:6a:7d:c8:fc:f6:a1:b3:
07:d4:63:70:69:3a:e8:5c:e1:d9:66:c1:fd:97:9c:
6a:d2:fa:d2:bf:d8:41:43:d3:a9:b4:fc:58:02:96:
ba:92:5b:75:31:9a:cd:92:b1:49:90:79:6e:c8:27:
66:71:55:26:28:f8:b9:05:56:15:a5:85:7b:0e:0a:
17:75:dc:ad:56:a5:81:d4:55:f1:d8:f8:89:c3:59:
8d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:DE:18:0B:5A:61:C1:6A:2C:5A:72:9A:D5:05:6E:D4:CC:F8:4F:A5
X509v3 Authority Key Identifier:
keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:de:37:86:76:7c:38:b5:64:47:f8:b6:44:a2:cb:db:40:78:
6a:7d:f7:62:52:98:d6:37:27:46:4d:b9:25:d9:fb:5b:c5:2b:
d4:ed:9d:19:16:dc:2d:9b:95:c5:b3:8f:f5:58:20:50:f1:67:
e8:67:db:82:ef:d4:6c:d7:08:7d:0e:9e:c3:6a:17:9d:cc:63:
a0:0e:c4:24:0b:96:30:0d:f5:34:2c:25:6a:f5:a1:92:e1:57:
f4:93:d5:bd:a6:d4:f3:39:e6:71:23:af:8e:2c:0c:3f:79:ca:
15:4f:6b:51:84:29:b1:ac:25:7f:f0:1b:63:cb:51:47:e0:e4:
e5:3f:ec:2a:71:e4:96:e9:71:b5:ee:83:c6:8d:6e:10:7b:dd:
dc:2e:dc:73:a4:c3:7d:48:3c:f2:cf:a1:b3:0b:70:b5:21:05:
6e:94:68:58:4c:1e:d4:9a:c7:be:fa:97:81:2e:03:2c:a4:66:
60:db:47:5a:d0:07:8b:f2:fb:2f:2d:54:b1:67:af:d4:e7:3a:
ad:91:a1:df:3d:df:ff:0b:63:19:55:68:a1:ab:96:49:b4:cf:
b7:d7:99:80:b4:d0:85:8e:7d:89:7c:1b:48:f4:6d:a8:7c:cb:
65:39:43:48:56:48:89:98:7c:94:75:aa:b6:d7:84:4c:69:28:
ac:11:63:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:51 2026 by rpki-client