Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
File: KT0QRM1I1hcW11ngIN29qoFNXNU.mft (raw, json)
Hash identifier: TUwrsFS5LDdhuqbFhbqpCSgUrpMKyiIyJvzxVGnkpCU=
Subject key identifier: 70:91:0A:DD:A2:57:EC:29:30:35:1D:13:A1:FB:ED:D3:72:D1:30:E0
Authority key identifier: 29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
Certificate issuer: /CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Certificate serial: 01A17EF42771BCF50DAE34E1A18ECD0B596A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
Manifest number: 12CD
Signing time: Tue 27 Oct 2026 20:01:32 +0000
Manifest this update: Tue 27 Oct 2026 20:01:32 +0000
Manifest next update: Wed 28 Oct 2026 20:01:32 +0000
Files and hashes: 1: G8Xjmm3bP-hXRGstLE8Fpo1sPVM.roa (hash: fWJBQMog1YWkp2bEy9v1fjvr2kKDsca319UpenUU6lI=)
2: KT0QRM1I1hcW11ngIN29qoFNXNU.crl (hash: +xfyhkAsr6qGUM87f2dzL9b6pBdsVfW5khxMD9gQBqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f4:27:71:bc:f5:0d:ae:34:e1:a1:8e:cd:0b:59:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Validity
Not Before: Oct 27 20:01:32 2026 GMT
Not After : Oct 28 20:01:32 2026 GMT
Subject: CN=70910adda257ec2930351d13a1fbedd372d130e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:36:76:c3:33:90:48:ef:7b:a6:3a:48:04:5f:
6f:bd:b2:6c:e5:31:7c:84:e7:ed:e2:0d:dc:cf:21:
d2:8b:82:04:38:28:0b:be:d1:1f:c5:5a:2f:86:8e:
70:31:11:d0:45:12:29:d7:87:0e:7b:79:c7:f0:ae:
1c:a0:62:81:cf:fa:10:3e:13:47:70:85:8b:66:42:
95:6f:11:d5:14:0e:48:44:17:32:dc:d4:8b:49:55:
86:49:b3:d3:81:09:ef:21:40:ff:c0:0a:83:be:7a:
bb:f3:76:a7:bf:02:76:26:99:8c:07:ef:34:e4:57:
19:f8:fc:89:17:3e:74:eb:13:f6:7b:9e:73:f9:0b:
01:f9:53:bf:dd:86:06:6e:5b:15:16:26:c1:9b:e2:
9e:53:b5:a7:fa:f7:77:43:4c:34:bd:55:1c:6b:80:
d2:cf:7e:e2:d5:5d:9c:ff:b2:4b:03:2f:dd:05:4c:
25:90:41:de:1e:96:00:af:dd:b9:23:a0:aa:59:a3:
35:61:2d:1f:8d:d0:5c:55:2b:de:df:5f:9d:57:d2:
70:36:f8:1f:19:81:89:fd:c3:0e:5c:4e:7c:2e:1d:
77:a3:94:a5:b6:ca:24:46:59:8d:be:8a:cf:0e:90:
c5:fa:a3:4b:46:cf:88:be:d9:fe:10:53:71:9c:c1:
74:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:91:0A:DD:A2:57:EC:29:30:35:1D:13:A1:FB:ED:D3:72:D1:30:E0
X509v3 Authority Key Identifier:
keyid:29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a2:17:bb:b4:f4:2b:34:54:f5:e8:c2:d3:01:93:50:72:01:
fb:7b:c6:01:01:9f:c1:4a:ff:2c:c9:3d:f7:90:d2:59:ed:c8:
d2:b8:7b:93:b6:a1:d2:34:f5:62:7c:77:fc:1e:c3:39:b4:ac:
f1:7f:85:ca:1a:f7:ec:78:9a:35:83:9f:98:2d:2c:f1:02:a3:
1e:47:f0:44:50:d7:bf:c1:ad:c7:73:28:a0:43:3f:6d:a1:ad:
0d:4e:4c:90:08:f9:77:c1:93:92:85:77:42:c6:ac:4a:e2:80:
ce:1f:47:32:6c:5a:6a:dd:e9:d3:f4:dd:05:75:53:11:a1:01:
e9:3f:a6:b2:9a:fa:71:f1:e1:5f:bc:48:4d:0f:c8:df:8e:52:
5f:1f:ad:56:46:dc:84:c0:04:98:01:9f:33:76:92:06:4f:ed:
8d:82:a5:87:0a:c6:6b:d4:b7:00:e5:c6:10:95:9d:8c:39:0b:
8e:6a:e9:08:5c:68:0a:3a:b2:4f:75:b3:9e:e6:24:8d:d0:cb:
cb:cd:1e:e0:bb:f9:e3:55:74:4e:1f:e8:cc:e0:b3:34:df:09:
31:7a:f8:3b:cd:e2:6f:84:2d:93:b4:56:77:46:2d:cf:78:a7:
75:78:4f:d4:2c:46:96:74:7c:db:8e:cf:a8:af:0c:46:ca:e8:
01:af:2b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:43:19 2026 by rpki-client