Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: VUfZgPxphIYiZeAE7KYA5DJQ/C2Pm/d7zJmS4tlVBlc=
Subject key identifier: 96:37:20:A8:4E:7C:B4:9B:0D:4F:7C:55:F4:A8:93:6E:49:BB:C0:E7
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 01A12466891ED532B23008D0EFC7BB2844DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 1A98
Signing time: Sat 10 Oct 2026 06:01:01 +0000
Manifest this update: Sat 10 Oct 2026 06:01:01 +0000
Manifest next update: Sun 11 Oct 2026 06:01:01 +0000
Files and hashes: 1: fqnqgR-axVnKnA0P1MNMOEPlOKQ.roa (hash: dS17jdz8caEPLRuaszV/W/bAD/gLlYgn1NNbi4+I3kM=)
2: gRgykk6dz_IwqNNOBfkFkQce2pk.roa (hash: PzJ5ETV1AGTHV0gxW4EKMy3jivHWboSvAxQ7aMFFRFY=)
3: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: 9yM6G7KJJu2TyCvs2UjETJk18DjraWgVfhKahoa2l2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:66:89:1e:d5:32:b2:30:08:d0:ef:c7:bb:28:44:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: Oct 10 06:01:01 2026 GMT
Not After : Oct 11 06:01:01 2026 GMT
Subject: CN=963720a84e7cb49b0d4f7c55f4a8936e49bbc0e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1d:29:4c:e0:44:e7:5a:e7:8e:b7:ce:26:c1:
c2:59:82:77:5f:3b:7b:c7:78:2e:7c:a5:fe:c5:d5:
66:f9:f4:f0:cf:eb:25:43:a6:78:5f:21:f7:ba:0e:
dd:09:c6:3d:fb:8e:8d:ed:9e:b3:3a:c5:13:79:9a:
ea:7c:2c:f9:56:81:a7:bf:83:5f:84:50:ed:0f:e0:
83:29:a7:87:d8:89:61:eb:c4:88:d3:7b:d9:b2:75:
3b:ea:a6:fb:ae:53:47:9e:c7:95:6f:a6:e0:fa:bd:
3e:c3:50:a5:48:f0:2b:11:02:e7:67:1f:ff:28:94:
ff:82:b9:ac:3c:63:1e:a2:29:f9:08:9b:87:94:1a:
05:6f:66:7a:ff:56:e0:91:25:57:34:ae:cc:fa:33:
d6:7c:64:12:bf:99:9a:79:20:64:8a:e0:a7:df:80:
2f:08:8a:53:af:d3:f6:b8:9c:41:08:db:8a:b3:07:
05:2e:28:89:b4:2d:cd:a3:c6:08:2e:03:89:1e:8d:
68:d6:fb:b3:c2:a1:3c:57:b7:07:41:d2:55:12:e9:
f5:4a:25:cc:d1:41:35:0d:54:89:d8:14:83:39:76:
e6:da:58:b6:3b:05:13:ab:c3:f7:5f:8a:fb:fb:09:
0b:77:c7:35:7b:ac:be:95:c1:35:c7:30:ad:1e:fc:
2e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:37:20:A8:4E:7C:B4:9B:0D:4F:7C:55:F4:A8:93:6E:49:BB:C0:E7
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:26:2b:9a:2b:cc:04:8d:34:e7:ca:65:3f:e8:5d:dc:7e:fc:
fe:fd:54:41:94:f0:e6:69:e1:44:eb:77:1a:e2:35:78:79:b2:
8e:1b:3f:05:fb:10:0a:eb:73:13:78:83:19:2b:2c:e8:c3:ce:
e8:f3:81:1d:e5:b2:7c:dc:e5:72:9d:23:f4:de:3c:fd:c0:8e:
b1:72:a2:da:1b:ee:ec:39:dc:15:ae:52:9a:d7:cf:5e:8f:8d:
a6:73:5a:44:f2:15:5f:4d:61:8f:c9:c7:5b:95:3d:1b:54:50:
09:50:17:1e:13:0a:5c:39:0d:bb:9d:93:98:b1:f4:1f:fe:3a:
db:68:b3:15:fd:30:52:2c:73:f3:21:73:29:d2:3b:dd:5f:a3:
10:a4:f6:f9:55:5b:de:f9:b4:f8:7d:14:13:be:61:fe:b0:5e:
f2:5e:f1:75:71:57:e0:6d:50:99:e5:eb:8c:67:25:e9:62:82:
64:0f:3d:b6:e3:f1:7f:ea:da:06:78:28:a5:60:c6:2b:e5:c9:
91:a0:52:76:34:71:96:bd:84:a7:8c:aa:7e:b1:2d:05:de:3d:
7b:9e:10:83:0f:57:41:b8:79:55:7d:5a:4b:82:0b:de:b2:08:
da:ef:8a:87:6b:ae:ac:b9:25:73:68:2c:7d:0b:b2:e6:ba:58:
4e:09:37:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:54:38 2026 by rpki-client