Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
File: KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json)
Hash identifier: 4dlqXD6dQq3OJqmE//gIbi6zdmoKNNDYUapKGEE+G64=
Subject key identifier: B9:E8:4E:A8:09:9D:6D:09:3F:30:34:EA:9D:80:F7:0F:4D:28:88:C0
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial: 01A15477D295024BA97B186A1DA285F369B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
Manifest number: 1AB2
Signing time: Mon 19 Oct 2026 14:01:41 +0000
Manifest this update: Mon 19 Oct 2026 14:01:41 +0000
Manifest next update: Tue 20 Oct 2026 14:01:41 +0000
Files and hashes: 1: EjRGmDzvaxLmwHNTtjOXaCz9U7s.roa (hash: DiOXAHVLFTKKr3dT1PY1tAEci/bbe0sz/zVufkS6kQs=)
2: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: MBEICUlgFeQBeuRvFOLpTGpPwpRMedNj3EobqRTdWO8=)
3: PHk_vBlGAMsxS-MnrekIlyqTI-4.roa (hash: DfXZCDYGxK8xf8JFedzWYQFF9T3pi36VwRR9xAmGXEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:77:d2:95:02:4b:a9:7b:18:6a:1d:a2:85:f3:69:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Validity
Not Before: Oct 19 14:01:41 2026 GMT
Not After : Oct 20 14:01:41 2026 GMT
Subject: CN=b9e84ea8099d6d093f3034ea9d80f70f4d2888c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:13:61:25:fd:15:10:cf:c3:5d:06:9f:b1:c2:
3d:a2:6b:5f:e5:40:5f:fd:25:7b:0d:e2:e0:4a:7f:
64:5a:47:86:70:69:a8:46:7e:e3:89:89:41:53:77:
c5:cd:c2:68:b4:49:ff:34:f6:9b:db:69:f6:fc:88:
f4:51:d6:82:e4:da:96:0b:8b:5a:89:6e:0f:9a:85:
61:d3:bd:1c:8b:49:64:9e:8b:af:6f:ed:b0:91:0b:
02:0b:a6:1a:3a:a2:ca:ed:6b:76:ff:63:3d:04:bb:
f5:7c:a8:7f:96:83:dc:1c:00:65:f4:23:bd:c4:e0:
b7:f0:c6:e9:fa:99:12:56:34:3d:e8:97:dc:74:74:
17:d1:15:06:c2:58:04:2b:67:2a:61:98:a6:e8:5a:
64:bc:f4:a7:da:60:c5:3d:b3:a9:00:41:b5:3b:8d:
ed:03:26:12:aa:ae:1d:cf:4e:4c:df:58:90:13:38:
ad:4f:ae:e6:19:2f:4f:18:1e:a2:ca:55:95:d4:8a:
7c:85:36:1d:08:bb:bc:33:e3:93:ac:72:c2:7d:a6:
6b:61:16:e8:b2:2f:84:77:d3:cf:de:ac:f0:68:b2:
aa:18:cf:89:1d:ca:89:f9:dd:e0:42:9e:4b:d2:0b:
81:3c:7f:60:b1:7e:b8:ef:69:96:3c:64:1f:a4:b6:
37:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E8:4E:A8:09:9D:6D:09:3F:30:34:EA:9D:80:F7:0F:4D:28:88:C0
X509v3 Authority Key Identifier:
keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1d:5d:7c:29:a4:13:62:6d:46:4f:a0:8d:6a:60:dc:4b:2b:
d2:97:02:47:74:d4:5b:10:ed:02:3a:93:e0:6e:90:b8:81:80:
a3:5a:fc:e6:a3:ee:00:95:13:bf:0f:a5:6c:db:34:b1:cc:9d:
b5:d2:7b:ea:bd:23:75:f8:93:f1:57:e2:44:1e:6b:84:4f:79:
9c:c2:54:e6:bb:64:2c:e7:b6:be:00:e8:7e:54:8b:d5:1d:2b:
6b:23:8d:f6:a8:15:f9:8f:9e:f1:b7:eb:df:d5:20:82:09:4f:
3f:c3:c5:bf:a9:2f:a4:92:43:3f:80:01:e8:3b:60:69:31:cd:
4f:c4:5d:41:90:f6:a5:9a:e3:1a:4e:a2:7a:1c:90:54:7b:47:
a5:eb:f7:d6:70:e9:59:00:e1:c8:62:cf:78:63:03:a5:9f:7f:
5d:e8:f4:45:4a:09:74:8e:a6:a3:cc:94:06:90:cc:ef:44:b7:
d6:f3:6e:9d:fa:a4:a9:52:46:c2:be:fb:a8:30:55:39:86:25:
3f:50:6c:0e:e1:50:34:9e:e6:1e:ed:9f:dc:4a:ec:af:e0:46:
45:e3:fb:e3:df:1c:7d:a2:13:02:4f:c3:4e:63:04:f8:ea:47:
4e:bf:39:73:e9:87:25:06:77:1c:8e:58:b7:02:8e:72:0f:8b:
ec:51:ee:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 23:55:04 2026 by rpki-client