Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File: koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier: ZMZfpMdlzSEQkHczfYHi6mLJdxR5uQinAZ4SXIMxQnI=
Subject key identifier: 53:9C:88:8D:78:BD:26:38:C3:99:67:15:1C:56:FE:22:EC:C9:38:E2
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial: 01A140B9C05C0644974F45094FF79778B2A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number: 1AA8
Signing time: Thu 15 Oct 2026 18:01:17 +0000
Manifest this update: Thu 15 Oct 2026 18:01:17 +0000
Manifest next update: Fri 16 Oct 2026 18:01:17 +0000
Files and hashes: 1: f1xxhacm7jnvbldN6spjT65Vwn8.roa (hash: rqkDD8hNvJtlHHJ4fiGoQKM/oQxgw1TdOWMEVdkAPbI=)
2: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: GMhQXEcYXLpp7soDcSDEhZAJsHGd4OCc4+qQy4+2IN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:b9:c0:5c:06:44:97:4f:45:09:4f:f7:97:78:b2:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
Validity
Not Before: Oct 15 18:01:17 2026 GMT
Not After : Oct 16 18:01:17 2026 GMT
Subject: CN=539c888d78bd2638c39967151c56fe22ecc938e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:86:9b:46:64:6a:68:04:9d:e3:8a:bf:d2:28:
0e:87:48:41:34:3e:27:bf:25:0e:ed:da:a5:d9:ab:
f4:36:ae:5d:ce:18:2e:6f:3f:02:c5:b7:c7:01:07:
2e:8d:90:5e:a8:79:3a:db:8b:36:4e:b1:33:f2:cc:
8e:e6:95:08:7f:12:b6:34:47:4c:d8:c4:fe:a2:da:
50:72:ba:06:f9:f1:82:df:68:a8:10:22:f8:7e:71:
c3:d6:a8:37:a3:03:e1:db:49:03:f5:cb:e9:c0:56:
9a:13:ae:71:dd:75:ce:d1:34:a6:8b:20:87:d1:1f:
8c:2c:51:37:8b:3b:a3:36:bd:da:6f:a4:35:3f:e8:
4e:ee:61:32:23:de:3e:d4:e7:9b:76:ee:a0:d0:10:
97:a6:2f:b6:ab:f8:db:9a:d5:41:79:ff:e8:65:46:
66:ae:79:df:8f:d7:81:c2:6e:0a:3f:00:45:10:83:
7c:eb:e7:62:a2:2f:f7:07:9a:d3:53:1c:ae:7a:8c:
c2:9c:87:21:85:dc:7e:fe:fa:f6:69:58:04:2f:98:
1d:b6:90:bf:68:62:c2:8a:33:7c:90:f5:a6:00:f4:
f6:fe:6f:78:06:63:29:a3:18:54:e1:4b:71:51:a4:
35:21:fe:e7:e3:ae:c3:d2:04:6b:15:18:01:11:ef:
80:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9C:88:8D:78:BD:26:38:C3:99:67:15:1C:56:FE:22:EC:C9:38:E2
X509v3 Authority Key Identifier:
keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:0b:4a:e8:c7:87:c2:ae:48:56:82:d3:f8:eb:a6:79:db:8b:
44:3d:2c:f6:a1:9c:58:77:60:29:68:98:08:b0:7c:20:6d:f0:
21:b2:bf:28:86:e9:2a:bf:c3:fe:76:35:54:88:c4:c1:97:6e:
e5:18:b3:8c:95:e0:0b:b6:48:48:bc:eb:a9:8f:aa:81:03:17:
9d:6b:c5:8d:d3:f5:c2:a3:1b:b8:08:9b:e6:ca:26:14:07:eb:
83:52:ff:a0:ea:5b:08:fd:9a:28:c1:2a:5f:ea:02:96:3a:d0:
69:57:69:03:a6:35:80:b6:0c:9e:a3:93:ac:db:7f:52:34:7d:
41:b8:a2:c2:e9:f1:cb:85:3d:45:19:1d:7e:09:73:54:52:1c:
07:6e:90:df:49:64:78:9e:18:e7:76:25:fe:5b:10:98:1f:26:
25:aa:48:11:cf:7d:6f:f3:27:80:a6:06:d3:2e:74:88:d5:d7:
44:ba:9b:7d:4b:9b:ba:aa:b3:d7:b0:c2:fe:3c:c9:5d:2d:c7:
62:8d:fd:bc:54:74:62:9d:f2:c4:24:67:ff:55:4d:01:a3:0e:
6c:10:ad:f8:db:8d:8b:e6:09:2a:67:5f:e7:43:9b:22:88:13:
2d:f9:80:35:f0:7f:6f:40:66:e5:af:79:e6:26:07:24:96:0a:
ec:bf:c8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:53:52 2026 by rpki-client