Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
File: kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft (raw, json)
Hash identifier: Pnn0yxZbWcXQ9ggthHLckvciat84D0XJorSpumqPZLI=
Subject key identifier: F4:44:45:E5:E9:54:86:60:9B:E0:C3:D0:97:AF:EA:37:A5:A2:38:4E
Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
Certificate issuer: /CN=90a02705006532ef33a0064f875a100923509fd5
Certificate serial: 01A11B2C3E6374A469C4054000F50962CBC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
Manifest number: 146A
Signing time: Thu 08 Oct 2026 11:00:46 +0000
Manifest this update: Thu 08 Oct 2026 11:00:46 +0000
Manifest next update: Fri 09 Oct 2026 11:00:46 +0000
Files and hashes: 1: apPx3gWWIpPWwELtpKMOfedJ4k8.roa (hash: L2yyhrzd5mRGd2rzEg04lr+rJwZPevmKVoJK5XcNojM=)
2: kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl (hash: zp3CeVpEk2WT20OPQhkxy5iLW0RcD1FGisqaghMXLYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:2c:3e:63:74:a4:69:c4:05:40:00:f5:09:62:cb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a02705006532ef33a0064f875a100923509fd5
Validity
Not Before: Oct 8 11:00:46 2026 GMT
Not After : Oct 9 11:00:46 2026 GMT
Subject: CN=f44445e5e95486609be0c3d097afea37a5a2384e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:18:a4:f5:a0:c6:4b:72:66:0f:b6:e0:7a:74:
03:ae:98:37:83:5e:40:42:8b:b9:03:e7:42:10:86:
4c:82:6b:78:22:97:e6:e8:e1:e0:f3:bc:59:60:83:
ab:9f:3b:19:54:6c:c2:2b:15:ed:31:47:57:a7:fc:
22:51:3f:63:a6:1c:5f:b5:34:66:4a:0f:3c:46:50:
7a:e2:19:39:d6:17:a6:1f:c2:27:fb:bf:c7:81:6f:
a1:b9:77:83:e3:5d:4a:07:48:4b:d6:42:bd:a2:13:
6a:5b:d9:c6:62:db:59:38:08:35:55:d1:34:35:31:
ea:ed:f9:ef:c9:74:f8:c5:f7:0a:bb:49:cd:25:7d:
d6:f8:cf:ea:17:19:d6:d8:69:21:50:b0:bd:6c:69:
66:38:79:a2:1c:c6:98:6f:27:ec:47:ec:ba:73:c0:
aa:91:53:77:0e:c3:e0:92:e5:b1:b7:5e:c4:98:2e:
ff:49:e2:db:00:3b:94:df:ea:85:86:b9:5a:13:5c:
73:5e:83:db:78:04:88:45:df:2d:ef:6d:c8:d8:60:
8a:80:51:42:09:52:11:c2:12:b2:8b:0f:bc:15:a5:
31:dd:79:f4:31:f5:6f:59:91:5f:7d:cd:2c:c6:7b:
b5:8c:cf:49:04:ac:33:a7:be:b9:42:60:b4:75:a8:
ca:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:44:45:E5:E9:54:86:60:9B:E0:C3:D0:97:AF:EA:37:A5:A2:38:4E
X509v3 Authority Key Identifier:
keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:31:a8:03:0b:75:c9:71:b2:e7:6d:65:3d:13:d9:56:ff:d7:
28:00:fa:0c:e3:51:ad:ad:4d:f5:a8:df:c3:95:ae:44:41:4f:
92:6f:37:b4:9a:b2:52:27:55:59:a7:a8:ec:10:9a:74:58:8c:
b6:0f:37:59:7f:f2:fb:b9:05:b0:79:f5:85:ff:1a:5b:f0:3e:
de:14:d4:28:7d:ce:46:53:ea:62:3d:40:69:06:54:78:f5:8a:
69:82:6f:e8:ce:1f:b7:de:b0:2b:00:16:ac:92:48:eb:5f:c7:
dc:4c:8e:5a:53:a5:92:24:21:9b:37:df:be:76:2f:00:6a:4a:
2a:ec:4e:e4:ac:6b:ec:a6:5c:64:f1:96:27:9c:cf:c1:e7:bd:
3a:d2:26:22:2c:ed:c2:12:ee:92:6e:be:f8:7f:67:54:55:0e:
6e:31:d4:8f:f4:a4:1b:61:ad:60:30:3c:11:e9:5c:73:68:8d:
36:64:bc:d9:3f:f1:39:f2:11:17:1c:68:17:7c:b5:11:69:58:
90:a5:18:d0:da:19:2b:96:fe:69:88:ef:32:16:78:49:d5:06:
92:89:99:bf:58:50:5e:b4:ca:1f:08:21:86:83:26:52:bc:2c:
c9:01:b1:a2:04:b0:c7:b9:a9:87:fe:5b:af:1b:89:c8:1e:9d:
4a:85:a2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:22:53 2026 by rpki-client