Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
File: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft (raw, json)
Hash identifier: /ocufCJRCMOaPZQn5tUK6EQCeYggJainF/tFgWE6uXY=
Subject key identifier: 39:D9:44:75:89:C9:59:C4:3E:3C:7F:89:5F:B0:83:55:1D:91:4A:CE
Authority key identifier: 90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
Certificate issuer: /CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Certificate serial: 01A180741C30101E32D4CCB97A7C6C8095DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 03:00:55 +0000
Manifest this update: Wed 28 Oct 2026 03:00:55 +0000
Manifest next update: Thu 29 Oct 2026 03:00:55 +0000
Files and hashes: 1: Rh1jP8TT0D5DQyewHt3WNVRetYg.roa (hash: +Z1++BSabnl+/JfrPmXmRibZf7uuXCCwxkF76/QL4Zw=)
2: gkvcqRam_P5KtSFKYrt_Tqdq1Po.roa (hash: JnttzcUryU3xosibqHjelq7W7OqvhTZhKK40TmRyAXo=)
3: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl (hash: 0KOKyI3SX4e7ZCHUKMFquQMmqDibBQPHuREY9mHMUJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:1c:30:10:1e:32:d4:cc:b9:7a:7c:6c:80:95:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Validity
Not Before: Oct 28 03:00:55 2026 GMT
Not After : Oct 29 03:00:55 2026 GMT
Subject: CN=39d9447589c959c43e3c7f895fb083551d914ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:da:8e:d2:81:df:bb:c6:61:a2:d3:37:dc:
56:c4:b4:8d:f1:49:fc:36:2c:c4:84:c2:37:d5:90:
bc:a2:e1:0d:ec:0c:e1:8a:70:78:b8:0f:e3:c8:27:
93:e4:88:ff:70:4f:22:e0:29:28:6d:25:43:dd:aa:
d4:ae:d3:a1:cd:01:90:cc:fc:d8:01:e8:6b:23:13:
c7:87:91:15:af:1b:9f:e1:e7:be:51:a6:2e:f7:f8:
21:e0:df:e6:e0:56:d4:df:64:3c:e6:0a:5a:34:53:
ff:ea:57:cd:47:22:0a:7b:cb:15:0a:81:db:b5:42:
23:ba:32:29:55:da:28:22:d0:48:78:c2:6e:bc:60:
eb:21:6c:79:85:94:fd:d5:42:91:8f:9d:87:e9:e6:
0f:9a:3a:54:81:d4:81:77:75:64:ad:4f:0d:8f:90:
57:a5:3b:02:33:fd:a1:cf:88:e3:78:8f:c8:24:8b:
1c:d3:cc:6d:c8:95:6c:87:b0:60:39:62:9f:74:07:
12:16:f4:36:cc:c2:25:29:e2:e3:1d:72:52:f6:55:
22:12:3f:99:50:25:40:69:6a:70:14:56:fb:a3:b1:
57:14:8e:7f:28:24:f1:f2:fb:02:b4:60:4c:93:28:
fe:9d:b0:ed:bc:8a:38:48:93:a7:bd:92:26:8d:1a:
9f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D9:44:75:89:C9:59:C4:3E:3C:7F:89:5F:B0:83:55:1D:91:4A:CE
X509v3 Authority Key Identifier:
keyid:90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:89:15:23:d3:1b:8c:93:70:01:62:f9:fd:57:06:a8:05:84:
92:dd:f1:a4:91:9d:89:bc:b2:39:78:c2:5f:0e:fc:f8:43:dd:
9b:83:46:d9:3e:f9:9e:e4:35:d4:a0:ee:54:17:e7:b2:29:02:
79:eb:c5:1c:f7:34:54:bb:ae:ef:50:bc:fe:c9:34:2c:27:f0:
11:01:11:f8:2f:a4:29:f7:92:01:83:5b:e6:9c:11:31:50:b9:
df:b3:87:ce:cd:39:21:58:42:5d:f0:a9:73:d8:78:a2:28:fa:
90:6f:9e:7d:f7:1a:d5:54:bf:04:d4:c0:47:a1:9f:83:ca:94:
d5:e5:d0:7b:da:c8:88:13:7f:b8:2f:dd:cb:36:63:02:a3:ec:
bb:52:14:22:4a:d5:92:eb:af:1c:c0:ac:c9:19:32:7f:2c:95:
f7:f8:e1:64:fb:68:30:13:8d:bb:6d:c8:ae:ae:b8:13:8c:e7:
39:32:ff:c1:2a:8f:04:d1:ec:49:fa:9e:87:53:95:5b:d1:09:
cf:4c:db:ef:ad:f3:90:b8:a1:81:85:1d:0a:f7:0a:35:16:58:
a2:6c:43:28:cf:0d:1e:7d:a2:f2:50:e3:e8:74:69:5f:71:c7:
ff:70:d1:2f:88:41:c6:1f:4c:5f:54:6d:29:10:c3:1b:3a:db:
be:6a:95:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:16:00 2026 by rpki-client