Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
File: KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json)
Hash identifier: /iV+nJVUcZeSpyh/yAOe2F/m0SQDil1gTP/LQ6qBqZs=
Subject key identifier: 1E:20:7E:B5:9A:8D:E9:D9:E5:C9:37:28:3A:2D:BB:D6:D1:0C:96:CA
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 01A0E81CFF352AE456864F2F52BE250A6B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
Manifest number: 185C
Signing time: Mon 28 Sep 2026 13:03:29 +0000
Manifest this update: Mon 28 Sep 2026 13:03:29 +0000
Manifest next update: Tue 29 Sep 2026 13:03:29 +0000
Files and hashes: 1: 4G5CX3RoxpLNsz7xFs_RlT-B8yo.roa (hash: UzvEzTLQyvUlh8NzX1HUp0Znvv2LEVNFfUDFzEGVWfI=)
2: J53nLIScImiDmJQXAbAPzV_YmS0.roa (hash: adCU5A/KjEfl+/76XgaiqVc6Hsm8GAJUmNJGopCGbs0=)
3: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: 2chxYmDp9yPlPoCLfzqwISef1ONwRj90+qXhr15uBko=)
4: WM9U0hGxJGDphWFsCWq6RtezmLM.roa (hash: cyewkrvQm5BjotgRNgGfFmYEz1ELODgyWDHv/Kj0w6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:ff:35:2a:e4:56:86:4f:2f:52:be:25:0a:6b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: Sep 28 13:03:29 2026 GMT
Not After : Sep 29 13:03:29 2026 GMT
Subject: CN=1e207eb59a8de9d9e5c937283a2dbbd6d10c96ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:94:9c:8b:ba:a0:c2:f0:9c:fe:d7:b5:21:b8:
55:23:3f:0d:98:c8:c6:18:13:da:9f:8e:18:70:dd:
d6:96:ea:42:78:96:0f:4c:01:d2:6e:7d:df:b4:30:
e2:00:cd:67:50:34:d6:44:ea:6b:01:ed:d5:37:a3:
78:86:17:c3:c1:66:7b:8f:c9:68:95:2a:47:78:4f:
70:cd:c4:c7:6c:e6:8b:f1:ab:78:91:f2:45:81:2b:
c9:7d:33:93:85:97:ad:61:5c:2e:85:93:2e:97:67:
e1:f8:cf:10:b0:14:ac:73:55:63:be:47:9e:10:03:
03:16:82:26:57:9c:09:0c:e9:6f:7b:fe:d0:b8:38:
e0:e7:86:77:07:bf:9e:8b:7e:9d:67:9f:20:2d:ab:
a4:8e:ae:88:cf:d6:77:43:4c:0a:79:0a:13:c4:d0:
b1:68:a9:fa:20:ec:88:48:f2:4f:39:20:d0:38:08:
7b:22:0c:36:62:99:2e:f3:96:5a:49:69:94:d5:6d:
08:87:93:9d:a7:bb:dc:65:97:5a:c1:34:bf:4b:c1:
f7:9d:8d:f0:d4:7c:96:b7:2f:e3:08:17:62:39:e7:
81:0d:a1:c2:33:bb:7b:53:54:c8:81:76:a0:c8:c4:
16:65:35:64:1e:54:e6:a2:8e:9b:2e:a3:06:ef:62:
0b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:20:7E:B5:9A:8D:E9:D9:E5:C9:37:28:3A:2D:BB:D6:D1:0C:96:CA
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:8f:99:ef:28:37:00:9b:8d:8e:b9:6a:5a:0f:cc:cb:fe:a0:
a1:ce:c1:8b:51:e1:dd:71:4a:a4:82:07:9f:8c:ce:b1:eb:b0:
56:f0:bf:24:fe:9f:75:8c:f8:33:f6:41:64:f2:04:76:d3:85:
5b:5e:0c:50:84:80:d4:f4:2b:3b:aa:db:41:98:3a:5d:5d:bc:
05:9f:0b:59:be:b8:c8:af:70:d2:2f:91:eb:5e:4c:ab:96:b2:
92:d5:d8:b8:b6:da:62:6d:84:02:20:5a:81:c3:fa:f8:4b:86:
1a:c0:da:50:39:a4:43:a7:a9:eb:d6:10:b2:9f:a7:c7:ee:b9:
11:be:dd:00:f1:3f:77:8b:bc:3e:ce:84:de:99:a8:2c:77:a7:
bd:67:79:a6:b5:4e:b6:a5:01:fd:71:52:18:e5:68:05:79:76:
96:ed:b4:0d:32:0d:ca:e8:d1:d0:d9:d1:5a:6b:d4:56:0d:e3:
f1:e9:11:b0:46:e6:69:9c:1d:d8:f1:ae:a9:7a:0e:37:b8:c8:
cb:f9:65:2c:f6:9f:e1:7b:66:16:f4:59:47:dc:1c:ef:5e:47:
ac:be:7e:5b:27:43:3b:04:fe:48:63:6f:6e:05:28:ad:b3:c8:
72:80:40:e5:03:71:20:f8:d6:39:77:47:cd:5a:3e:ff:e3:57:
15:76:1f:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoHP81KuRWhk8vUr4lCmuUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ODUxYzZmYzZlYjM4MTZlMTE2YzhhNGE4NTFkMGQxNzhj
OTBmMzEwHhcNMjYwOTI4MTMwMzI5WhcNMjYwOTI5MTMwMzI5WjAzMTEwLwYDVQQD
EygxZTIwN2ViNTlhOGRlOWQ5ZTVjOTM3MjgzYTJkYmJkNmQxMGM5NmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZSci7qgwvCc/te1IbhVIz8NmMjG
GBPan44YcN3WlupCeJYPTAHSbn3ftDDiAM1nUDTWROprAe3VN6N4hhfDwWZ7j8lo
lSpHeE9wzcTHbOaL8at4kfJFgSvJfTOThZetYVwuhZMul2fh+M8QsBSsc1Vjvkee
EAMDFoImV5wJDOlve/7QuDjg54Z3B7+ei36dZ58gLaukjq6Iz9Z3Q0wKeQoTxNCx
aKn6IOyISPJPOSDQOAh7Igw2Ypku85ZaSWmU1W0Ih5Odp7vcZZdawTS/S8H3nY3w
1HyWty/jCBdiOeeBDaHCM7t7U1TIgXagyMQWZTVkHlTmoo6bLqMG72ILLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB4gfrWajenZ5ck3KDotu9bRDJbKMB8GA1UdIwQY
MBaAFCiFHG/G6zgW4RbIpKhR0NF4yQ8xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0lVY2I4YnJPQmJoRnNpa3FGSFEwWGpKRHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9iOWU2ZGYtZGE4Zi00NDkxLThmZTQt
NTI0NWIxMzUyMjFiLzEvS0lVY2I4YnJPQmJoRnNpa3FGSFEwWGpKRHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9iOWU2ZGYtZGE4Zi00NDkxLThmZTQtNTI0NWIxMzUyMjFi
LzEvS0lVY2I4YnJPQmJoRnNpa3FGSFEwWGpKRHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeo+Z7yg3
AJuNjrlqWg/My/6goc7Bi1Hh3XFKpIIHn4zOseuwVvC/JP6fdYz4M/ZBZPIEdtOF
W14MUISA1PQrO6rbQZg6XV28BZ8LWb64yK9w0i+R615Mq5ayktXYuLbaYm2EAiBa
gcP6+EuGGsDaUDmkQ6ep69YQsp+nx+65Eb7dAPE/d4u8Ps6E3pmoLHenvWd5prVO
tqUB/XFSGOVoBXl2lu20DTINyujR0NnRWmvUVg3j8ekRsEbmaZwd2PGuqXoON7jI
y/llLPaf4XtmFvRZR9wc715HrL5+WydDOwT+SGNvbgUorbPIcoBA5QNxIPjWOXdH
zVo+/+NXFXYfgA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:29:51 2026 by rpki-client