Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
File: kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft (raw, json)
Hash identifier: 0YX5XnUiAnSE8G1cLVj+yJUDuvaBz+/SxYRuG5oaPrE=
Subject key identifier: 42:84:57:12:53:06:83:B8:27:64:DA:44:B7:E0:6D:8A:1C:E4:46:FA
Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
Certificate issuer: /CN=926b9336fcaf3657cedeba53c47e948010877e20
Certificate serial: 01A130340B9D78B3CAC698BE74DE81E03995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
Manifest number: 1A9F
Signing time: Mon 12 Oct 2026 13:01:19 +0000
Manifest this update: Mon 12 Oct 2026 13:01:19 +0000
Manifest next update: Tue 13 Oct 2026 13:01:19 +0000
Files and hashes: 1: 2NDM2UnGAd2KPMu3UUA1fO528tk.roa (hash: WD6GmcclgmWq2djvqA2C1xAumTZt22gmy95ALSn/gmc=)
2: kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl (hash: ZzHXuuVmxcARkVbT/YvTY0z6htw1WLNmBG5aIj/zvFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:34:0b:9d:78:b3:ca:c6:98:be:74:de:81:e0:39:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20
Validity
Not Before: Oct 12 13:01:19 2026 GMT
Not After : Oct 13 13:01:19 2026 GMT
Subject: CN=42845712530683b82764da44b7e06d8a1ce446fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d2:12:12:e3:58:40:a3:7f:f0:8f:5a:2f:82:
44:9e:62:87:03:24:a2:19:56:7e:1c:fd:e2:8b:6c:
e4:71:75:7a:9e:79:cc:7a:03:4f:ac:df:a5:90:2a:
b3:35:d0:1d:0b:6f:66:25:bf:e0:75:2a:81:07:ed:
e3:29:79:fc:d8:98:ac:89:c2:72:e4:88:e8:2a:3d:
0e:27:dc:59:6b:52:1b:ea:b9:be:cb:9b:41:06:2c:
70:f2:fb:36:86:a8:21:06:71:57:5c:b9:31:da:8b:
7b:43:48:72:50:b4:e3:02:d9:d3:d8:6f:c9:4a:cd:
be:5c:02:c5:85:12:c3:8d:7b:dc:ee:75:c9:ec:ad:
46:df:1a:d3:d3:46:f9:f7:fb:52:9a:d6:dd:ce:91:
df:30:f2:bf:f2:b2:ab:ec:f3:7b:74:98:62:9c:65:
54:79:54:dc:cf:ea:b1:f3:c3:a2:55:22:6e:e0:11:
c3:42:55:c5:8a:fd:d9:1f:10:cf:fe:9a:f6:43:e5:
32:1a:a7:e2:7f:fe:cd:fa:ea:f8:7d:32:c3:2e:e2:
1a:7b:58:e2:13:13:fb:61:76:9c:96:0e:0b:89:6f:
4e:76:da:98:7e:53:6c:7f:8c:09:38:21:49:06:a7:
f7:d5:3f:79:25:18:cb:ca:1f:61:6e:29:43:3a:b9:
b4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:84:57:12:53:06:83:B8:27:64:DA:44:B7:E0:6D:8A:1C:E4:46:FA
X509v3 Authority Key Identifier:
keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:4a:f9:da:94:89:0c:55:a3:62:4a:2a:60:09:83:0e:dd:5b:
03:d2:8e:3d:4a:3c:20:1b:79:8e:0b:aa:02:a9:8a:9a:cd:3f:
67:b6:f2:71:f9:ee:0b:27:da:1e:a6:4a:4e:1d:41:d9:b1:5a:
39:79:3f:36:21:c9:fc:46:52:2d:cb:da:2e:70:ee:7a:e3:ba:
69:98:3d:86:61:55:9c:10:34:ab:e5:48:06:f7:c1:7b:0d:27:
d8:af:24:71:3a:8a:6e:27:36:7b:b2:e7:1a:60:47:a7:4e:5b:
19:3a:0e:8c:a7:8c:ba:c0:89:94:f5:46:61:52:6b:92:55:f8:
a2:ac:c4:43:2d:43:d6:7e:51:06:2c:8e:2d:b4:93:ba:e0:b4:
ab:58:45:51:6e:58:7b:e1:e5:94:e6:03:6b:b0:10:25:44:66:
17:7e:05:17:3c:f9:e5:07:78:aa:84:e9:1b:a9:98:12:ee:87:
5f:17:b8:0b:36:a3:27:65:c9:c9:6a:fd:28:17:fc:34:60:22:
fc:e4:6d:4a:61:1d:b5:14:4a:80:54:76:e2:28:ec:b5:67:3a:
39:6c:02:97:35:42:d3:fd:0e:dc:6e:f5:86:c0:5e:36:6b:4d:
8e:c7:28:6c:40:a0:31:78:7f:7d:a1:ca:ea:c0:33:59:0a:56:
13:26:0a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:47:33 2026 by rpki-client