Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json)
Hash identifier: Z78xX4x3qfUM0D1NgviR36e9yEqJHFlcc2rfjPFdUjA=
Subject key identifier: 73:C8:81:33:02:AA:6B:1A:58:7B:3C:59:3E:80:0B:42:4A:E7:F1:BB
Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109
Certificate serial: 01A08AC3041C759CFE26685E4D4402325B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
Manifest number: 16DD
Signing time: Thu 10 Sep 2026 10:00:31 +0000
Manifest this update: Thu 10 Sep 2026 10:00:31 +0000
Manifest next update: Fri 11 Sep 2026 10:00:31 +0000
Files and hashes: 1: B6o8w4JwncV5UpdSgcO7ItJ2vOY.roa (hash: fNh1jUU0AZ9h8EIANivzzlh97Xsidf9NN1/ISCBJySU=)
2: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: OomRZ8PkJYwodEQNjfr/XpPhzapp5MYWG4Mj6D9jbSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:04:1c:75:9c:fe:26:68:5e:4d:44:02:32:5b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109
Validity
Not Before: Sep 10 10:00:31 2026 GMT
Not After : Sep 11 10:00:31 2026 GMT
Subject: CN=73c8813302aa6b1a587b3c593e800b424ae7f1bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f7:66:bd:01:da:0f:b3:ae:2d:2c:a7:79:ec:
0a:48:cb:ff:c7:f3:a0:35:ee:bd:d0:53:2b:93:bb:
9e:01:45:35:a7:60:ea:a0:7f:fc:7d:60:4d:6f:aa:
5f:34:cc:d0:86:c5:39:b0:16:f4:e4:36:6c:96:1d:
fd:7a:d8:a5:ca:5f:b1:72:53:d0:32:b5:9e:a8:87:
37:b5:b2:d4:ab:a5:2b:4b:a7:9f:3d:5a:e2:d6:c5:
bd:c8:c8:e4:c3:8f:61:5f:a0:c5:13:90:ea:27:a7:
49:d4:63:71:61:c7:b4:d6:b5:87:44:41:c4:89:cf:
8d:73:f4:71:27:7b:59:c7:5b:18:51:77:a3:d1:60:
8b:5c:7e:0a:c4:f6:82:fd:94:fd:81:49:13:9a:f0:
81:a2:9d:22:dc:d2:02:a2:98:bb:5f:86:be:d3:9c:
73:37:18:8b:16:3c:74:b9:e1:36:4d:29:97:28:b0:
70:c6:66:40:b9:2c:bb:c5:3e:64:f0:ae:8b:ca:20:
c8:ae:ab:cf:ee:81:4a:03:0e:c7:f0:82:e7:e0:bc:
ec:e9:55:3a:05:a7:d4:4d:e6:d3:a2:44:8a:e5:dd:
eb:02:9b:c3:e5:8b:19:c5:2b:5e:c9:e7:62:e1:c2:
8f:e1:24:36:70:3b:f4:aa:1a:98:81:7b:f1:86:0c:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C8:81:33:02:AA:6B:1A:58:7B:3C:59:3E:80:0B:42:4A:E7:F1:BB
X509v3 Authority Key Identifier:
keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:27:1f:9d:ea:ff:a7:69:12:6b:0b:87:6f:ec:4f:a6:7d:41:
03:80:80:74:70:3b:33:15:e4:f3:cf:fb:b1:b8:fc:04:b3:65:
ad:3f:bd:8f:d2:de:64:5d:9d:df:97:3d:22:e8:bb:a4:4f:65:
ec:23:85:c2:23:c6:18:fb:13:64:fa:57:bb:ca:11:66:da:ff:
6f:5a:92:29:51:24:ec:ec:a4:71:83:cf:2a:69:46:22:97:8e:
5f:2f:81:74:c1:e3:43:a0:6b:9c:6f:a6:ee:6a:f1:9f:c8:f3:
a2:ed:9f:01:d8:a2:a6:4c:fd:c4:21:4c:9f:85:db:82:fc:03:
71:13:be:8d:f9:e3:c6:ce:e9:68:56:0f:fe:72:a7:33:aa:b1:
f7:7f:d5:8c:75:13:8d:0e:81:1d:68:5d:83:ce:f7:02:da:71:
ac:79:3f:54:54:3b:d3:cb:b5:cf:1e:25:cb:08:84:8d:2e:08:
47:56:b8:de:b8:0c:2a:b9:ff:15:12:0d:21:a2:13:1f:e3:6c:
31:63:93:b6:2f:7e:36:4c:0f:8f:b6:40:b3:d8:43:6c:27:4b:
bf:78:07:ad:c6:9d:2c:fd:22:e1:f9:96:2b:89:06:d1:3a:3f:
91:2b:2c:bd:c6:1e:af:db:08:88:dc:59:15:0b:ad:de:7b:b5:
48:45:65:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:14:45 2026 by rpki-client