Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
File: kJgVO94ONFhLrJH6GGjX7yTWi88.mft (raw, json)
Hash identifier: 5NppAfA6jPqJ/Tk8zp73No0wFaJ2nNWuLZ/oxkHAFuY=
Subject key identifier: 91:CE:EC:92:7E:63:A3:22:A1:94:0B:9C:1B:0D:8C:53:11:CF:E5:B2
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 01A175147DDBC5BB2C9CD7AE89DBF55F84A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
Manifest number: 17B9
Signing time: Sun 25 Oct 2026 22:00:39 +0000
Manifest this update: Sun 25 Oct 2026 22:00:39 +0000
Manifest next update: Mon 26 Oct 2026 22:00:39 +0000
Files and hashes: 1: Iria4wIw1fU8cA4sqt1elN464-4.roa (hash: ISbIWO425ImSYvAJvg4vsV9/XdUj9FmYfNuddwC0P7Y=)
2: kJgVO94ONFhLrJH6GGjX7yTWi88.crl (hash: zRkkCIvbaaNUGOY+zujNFRlLNQ2ls7RqelGL/+px/OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:14:7d:db:c5:bb:2c:9c:d7:ae:89:db:f5:5f:84:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Oct 25 22:00:39 2026 GMT
Not After : Oct 26 22:00:39 2026 GMT
Subject: CN=91ceec927e63a322a1940b9c1b0d8c5311cfe5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:78:da:c5:08:fd:ae:aa:3a:bb:c3:fc:fc:
43:f8:2c:48:77:aa:b1:23:86:a6:21:69:ae:00:8f:
7d:6e:18:16:ca:73:aa:e7:f0:0a:d3:3b:a7:ec:fb:
74:4a:1c:95:e6:2e:7a:29:8f:63:cb:99:53:a8:7d:
9b:26:7d:10:3e:fc:62:8b:1d:54:c5:d4:ff:04:66:
8b:d6:99:4f:6d:86:d5:ee:bb:9e:59:2e:4e:a5:68:
18:90:d0:9d:9d:7c:66:02:69:de:df:e5:1e:3b:5d:
b8:7a:95:4c:51:26:c6:09:41:67:98:73:33:2c:f1:
12:19:80:85:68:4d:eb:23:8b:f8:09:c7:42:c2:1f:
b1:af:02:bb:6e:19:dd:9c:7d:31:ad:87:49:87:dc:
6f:b8:6b:f5:d7:e3:50:f2:ac:54:6f:db:e1:03:8b:
7b:0b:ae:5c:f9:1d:83:b7:fb:cc:4e:f9:e8:4c:da:
b0:27:d2:02:cd:03:3f:2e:c2:fc:13:d2:79:f5:bc:
0a:61:7e:f6:4d:20:68:91:c0:33:c6:5c:df:05:c6:
8e:9c:53:99:0b:51:a4:38:b1:51:a5:b0:cd:06:69:
d8:81:86:f3:37:65:60:17:cc:3a:2e:16:d8:32:87:
60:27:d4:ba:64:d5:35:81:e6:05:04:23:a0:8f:ba:
28:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CE:EC:92:7E:63:A3:22:A1:94:0B:9C:1B:0D:8C:53:11:CF:E5:B2
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4a:2f:97:84:31:77:2b:4d:bf:1b:c6:e3:6b:ea:b1:77:ea:
6a:08:cf:39:02:5a:14:1f:1b:d5:02:7c:19:69:d1:d7:8d:7e:
8c:36:c5:01:f7:26:0b:51:6b:a2:7b:97:cb:9e:42:47:e2:f0:
5d:7b:88:0b:f4:aa:3c:62:5f:c4:ef:bf:04:38:fe:f8:92:1e:
68:a1:a7:32:b8:4d:f3:64:09:f9:d8:07:74:ff:8a:25:10:3e:
04:1a:60:ff:f4:ab:60:26:e6:cf:40:c5:f0:b5:42:f8:c7:3d:
4f:38:1c:2c:43:e7:6b:f6:a1:93:af:79:27:b2:e0:48:3b:5f:
cc:12:7f:4c:a1:33:71:b1:3d:b8:5a:c0:61:72:c2:a9:cd:ae:
90:f7:bc:8f:2e:51:3b:4a:d0:d3:d8:bc:88:5c:fa:72:72:5e:
29:e6:06:63:7c:06:da:e6:e3:06:18:18:9d:f6:e5:8d:d3:0c:
62:5c:47:8b:97:0c:f4:8a:9b:8e:06:f3:e1:f0:49:16:ba:b8:
ee:b6:89:e1:8f:9f:8c:9b:d6:6c:8e:7b:65:98:3c:1a:cf:46:
21:df:0d:b5:e5:cc:38:15:96:25:d5:3b:b3:99:8c:98:d2:82:
71:fa:1c:c2:8e:7a:bd:38:59:d6:f9:a8:c2:1c:f7:a3:a3:4c:
aa:62:91:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:59:38 2026 by rpki-client