Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
File: kKfL8X0LoKJqsBpkBgFBEUziudE.mft (raw, json)
Hash identifier: N0d89ekvjknzqx3ATJHbqfR293QqZLXcSAYuGhaCQK0=
Subject key identifier: 35:19:EC:C8:D2:95:2B:DF:3E:0F:49:58:4B:8B:DC:D7:78:B9:93:B2
Authority key identifier: 90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1
Certificate issuer: /CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
Certificate serial: 01A17A03DD94E7957766013013B53F07D9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
Manifest number: 0D4F
Signing time: Mon 26 Oct 2026 21:00:36 +0000
Manifest this update: Mon 26 Oct 2026 21:00:36 +0000
Manifest next update: Tue 27 Oct 2026 21:00:36 +0000
Files and hashes: 1: 9ysfhP83Nmm5ft1dF01KIz9IUpQ.roa (hash: 18cwGXFTJaQbHW96LZdk67APWAeUaMFUp7iHSl3ZJFk=)
2: kKfL8X0LoKJqsBpkBgFBEUziudE.crl (hash: 6S2DPzjp1hzwGT6HC7PpzqUtMS4Ke24LEJqTFQvc/ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:03:dd:94:e7:95:77:66:01:30:13:b5:3f:07:d9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
Validity
Not Before: Oct 26 21:00:36 2026 GMT
Not After : Oct 27 21:00:36 2026 GMT
Subject: CN=3519ecc8d2952bdf3e0f49584b8bdcd778b993b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:26:72:2c:31:b0:9c:8f:fc:33:66:9e:6c:4b:
33:b9:5b:8a:38:1c:06:16:bf:95:8d:14:90:28:29:
75:58:0b:bf:e1:ce:da:2b:eb:92:48:d5:14:d8:42:
56:e7:ed:c4:7e:6a:e3:37:26:7b:3f:76:d3:d2:75:
86:9c:6a:c3:d8:96:14:a3:ad:f6:e9:80:a7:f3:7e:
c6:39:d9:fd:0c:1a:3e:2f:84:c3:ce:72:24:b0:c2:
06:c7:fd:3e:8a:67:68:d8:2a:2f:b5:8f:04:69:87:
b9:f1:af:d5:5a:80:8a:ca:e5:12:17:f1:d3:56:b6:
da:aa:55:d8:71:1f:1f:20:c6:4e:0d:12:96:bd:2d:
e5:0a:d7:ad:b4:42:33:28:28:30:d9:90:96:63:a4:
ec:b8:99:59:96:fd:10:eb:99:f0:67:66:10:f2:53:
52:81:62:3e:07:09:0b:ab:e5:a8:10:ad:c1:d4:50:
39:24:8b:f7:4b:be:45:09:37:e0:99:b9:43:3d:a9:
71:1f:52:1e:bc:2f:8d:f5:07:41:87:77:8d:6e:8b:
fa:df:05:f3:97:64:de:8a:42:19:7b:88:3f:68:f6:
9b:69:03:d4:47:30:bf:44:31:28:e3:7b:41:b0:29:
62:8d:fb:d4:f4:24:26:04:53:ee:99:7f:95:b9:df:
b0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:19:EC:C8:D2:95:2B:DF:3E:0F:49:58:4B:8B:DC:D7:78:B9:93:B2
X509v3 Authority Key Identifier:
keyid:90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4f:70:da:69:c8:26:95:0a:8f:42:96:4c:d8:70:b3:d0:be:
8d:a2:0d:47:ef:f2:a2:45:d1:f2:e6:65:80:32:0f:36:c8:e6:
2c:ce:aa:0d:a4:43:98:bf:6e:38:0a:df:9a:bf:f1:3d:54:7b:
b0:b9:89:6e:9a:79:76:50:43:56:b0:c0:10:16:3e:81:0f:da:
4c:b7:fb:62:3e:76:7f:f2:6d:0d:4d:b5:74:d0:db:77:4d:a3:
ad:fa:7f:3f:8d:cb:2e:78:d2:2c:89:26:38:66:10:44:c4:4a:
0b:92:0b:3c:3e:91:01:f9:71:d3:31:cb:9b:f1:05:c5:72:18:
b6:f0:9f:23:02:27:55:ac:c8:e5:04:72:9a:4a:23:f2:5c:60:
e3:f1:0c:37:32:1a:26:dc:b0:25:87:b3:cb:ff:7c:df:79:46:
aa:74:3b:83:99:6d:a7:e6:b9:31:f8:fd:ca:89:75:32:9b:47:
63:c8:64:55:1b:96:bf:1a:2f:25:f9:f8:ed:67:61:65:d5:10:
43:ff:08:6e:76:e4:d2:d1:48:85:e6:86:9f:e9:97:57:41:57:
5e:dc:74:25:fc:fa:d4:30:89:bb:41:25:c4:8f:bd:eb:c4:13:
ee:12:42:18:e7:24:04:5e:20:a6:37:de:79:43:39:df:10:ef:
3c:87:b5:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:17:13 2026 by rpki-client