Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json)
Hash identifier: 7px7wipkMBEySW0FwXHf75mFVgl0xBDta10rjSZaY50=
Subject key identifier: 68:97:53:FE:7F:76:0A:6A:19:18:31:9B:42:19:2E:89:78:3E:7C:77
Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109
Certificate serial: 01A1A6A69DBE60332C2AFB4128F4EB8F4C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
Manifest number: 1770
Signing time: Wed 04 Nov 2026 13:01:39 +0000
Manifest this update: Wed 04 Nov 2026 13:01:39 +0000
Manifest next update: Thu 05 Nov 2026 13:01:39 +0000
Files and hashes: 1: B6o8w4JwncV5UpdSgcO7ItJ2vOY.roa (hash: fNh1jUU0AZ9h8EIANivzzlh97Xsidf9NN1/ISCBJySU=)
2: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: b+aYPXf0flIWF2Hd6E69YEhWXruuGh8pU/KxV9zNxbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:a6:9d:be:60:33:2c:2a:fb:41:28:f4:eb:8f:4c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109
Validity
Not Before: Nov 4 13:01:39 2026 GMT
Not After : Nov 5 13:01:39 2026 GMT
Subject: CN=689753fe7f760a6a1918319b42192e89783e7c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d7:d4:07:93:28:b4:60:fd:67:74:a9:73:7c:
c6:26:43:3a:df:3a:24:f7:e6:9e:a4:e9:67:87:61:
d6:0c:55:89:4c:1d:6b:4e:c2:fe:a0:ad:f2:3b:74:
b6:9a:6f:00:0d:d6:1a:dc:c1:b5:9e:8c:4a:9b:bb:
4b:50:2a:01:b9:24:9a:17:74:ea:27:e2:84:05:4d:
9a:7e:4b:70:86:c4:6d:05:12:96:d3:de:2d:b7:64:
5b:00:82:de:85:23:79:24:6d:58:e1:ff:94:27:0e:
fc:33:4a:29:f2:2b:b1:dc:34:c1:c4:bd:34:22:3e:
3c:38:ba:fe:1a:8e:0a:d7:17:8e:56:ac:4a:fb:6f:
4d:e9:1a:8d:23:1a:fc:ad:e2:a0:dc:84:5f:21:2e:
0a:00:13:2b:17:44:02:97:e2:aa:f5:ba:b9:67:20:
b8:cc:c3:33:e1:9c:9c:a7:62:49:7a:9c:ca:8c:90:
cc:67:cc:e2:99:1e:a6:f6:8f:3b:b8:da:82:e4:71:
cd:9c:9d:33:8a:07:72:80:1b:dd:dd:87:aa:08:8d:
47:00:5e:0c:80:b8:eb:3e:0f:60:20:e4:ec:ef:b2:
36:d7:ab:f1:7a:bc:27:e3:30:2f:91:11:f8:f2:c8:
75:b8:24:1e:65:03:13:4e:e1:74:58:8b:af:f9:0d:
a0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:97:53:FE:7F:76:0A:6A:19:18:31:9B:42:19:2E:89:78:3E:7C:77
X509v3 Authority Key Identifier:
keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f2:c8:e5:5e:71:8f:dd:47:c1:b4:91:1e:df:f8:aa:72:3d:
85:74:9f:60:3e:8d:f1:f4:fe:4e:26:89:02:a6:d9:b0:f6:82:
4a:86:d1:d2:9a:7d:6c:e1:57:71:10:cb:d1:d7:89:c8:d0:cc:
da:8a:0a:af:44:c8:1b:c7:67:78:00:c1:38:ea:2e:6e:46:29:
42:b0:08:4b:ec:61:41:24:05:48:34:24:c8:96:48:f1:23:5c:
23:d9:ce:40:b5:be:96:7b:15:09:01:8f:10:5f:f3:13:fd:f8:
92:e4:c5:76:03:70:a3:88:c2:3f:60:19:9a:83:21:15:db:ae:
19:77:60:de:39:5b:eb:6c:e8:97:b4:5e:75:fe:e2:a3:a1:47:
dc:23:dd:6e:1d:f2:88:ec:c9:98:51:ad:63:30:22:a2:ea:57:
b1:a7:2d:df:fd:cb:25:53:e5:1d:90:14:65:6f:83:e7:cf:51:
f4:8e:27:1f:fa:8b:1f:30:fc:d8:d1:c3:09:8f:fc:49:f7:d7:
7b:4e:e0:50:db:5b:58:76:d5:38:ab:1a:a0:25:f3:a5:b2:4d:
7d:9b:85:31:f0:b7:8b:f0:61:92:7e:4b:51:1b:c8:c7:14:74:
4c:a9:c7:fe:c5:33:ee:36:1d:2a:64:d9:09:49:68:50:02:60:
46:3c:ef:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:11:19 2026 by rpki-client