Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: ynUJiHk+aH2JB3DncHwEvAEdwPbEoOWeS+hsk/waEqo=
Subject key identifier: 55:5E:77:3F:B1:29:BF:AF:A7:40:2F:1E:C4:EC:BB:CE:D1:F9:87:48
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 01A1859B633AE2FE3ABF0D430B01A093519B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 168D
Signing time: Thu 29 Oct 2026 03:01:55 +0000
Manifest this update: Thu 29 Oct 2026 03:01:55 +0000
Manifest next update: Fri 30 Oct 2026 03:01:55 +0000
Files and hashes: 1: LASCfdMWoE20CF7WDK1PIh4LaTI.roa (hash: rIpKOSzr2MEm9EPCffOjAkuNKQPPOYskeo9lWvqTyOo=)
2: W7FoM9P8V95TjMG5CxF-kXC2djY.roa (hash: cqNL2j3ndLF7zdz8pZtr2cRhV6k7abA3ZyK4595EJ/s=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: oAxBEaQQhjkXWSEksxt6GMgfs13T8o5Vt64QJoUus4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 03:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:9b:63:3a:e2:fe:3a:bf:0d:43:0b:01:a0:93:51:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Oct 29 03:01:55 2026 GMT
Not After : Oct 30 03:01:55 2026 GMT
Subject: CN=555e773fb129bfafa7402f1ec4ecbbced1f98748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:43:52:4e:c4:9e:1d:35:ad:7f:27:9f:81:
32:d6:8e:4c:33:f2:18:c2:7d:69:2a:56:f3:62:e6:
9e:36:64:38:36:96:0d:85:58:df:e0:ff:fc:55:fb:
8f:b3:41:7b:9a:32:98:a8:eb:da:2a:4d:ab:c2:78:
61:f2:06:e8:b2:c1:50:ef:98:50:f4:4d:60:f1:96:
73:0f:6f:42:fd:b7:76:bd:ea:ec:c8:ba:b7:8b:bb:
65:a6:0e:f6:f1:b0:a8:bb:45:f4:e0:0c:0b:41:b9:
4c:3a:1e:c5:b9:3f:e4:ab:40:61:d9:9c:27:eb:75:
4f:ec:08:17:03:68:54:74:ab:5b:d3:56:2c:3f:f3:
73:5b:23:24:a2:60:b3:83:20:00:93:cd:f8:eb:45:
e4:f9:12:32:9f:a8:83:34:ad:23:47:3f:d9:f0:40:
12:42:49:3e:e7:83:59:7b:05:1f:80:1a:70:76:73:
8f:1e:3e:5d:6a:9f:37:e8:26:0a:3f:f2:26:c8:84:
2d:94:e2:98:8b:a3:4f:54:c5:3b:92:4f:75:f5:6c:
13:c2:fe:37:0f:56:20:28:40:15:7b:ca:31:12:b1:
44:5f:dd:ac:f7:28:c7:80:c6:14:ab:f5:a7:b1:21:
70:b9:7a:67:e0:52:88:d6:b1:b5:56:b5:0f:01:27:
df:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5E:77:3F:B1:29:BF:AF:A7:40:2F:1E:C4:EC:BB:CE:D1:F9:87:48
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:12:e3:b7:8f:fe:0e:c0:ff:ea:2f:97:2c:ea:19:1d:b4:48:
a5:72:be:6c:ec:ec:da:32:4a:ae:2a:a4:e0:d0:5c:55:1e:1c:
4b:25:2f:21:96:c0:59:c5:12:3a:29:13:73:b2:d8:5f:c7:46:
dc:e4:a1:91:67:43:95:9e:98:91:88:4e:d7:d0:3f:84:5e:7c:
8c:c1:13:10:a9:b3:ee:59:4e:8f:45:85:31:cf:ad:5a:1b:0c:
df:49:42:21:e4:5a:22:24:bf:dd:66:65:02:20:10:e9:2c:fb:
9a:be:37:e7:63:72:1b:c0:4f:35:f8:67:8a:0c:e4:1c:ac:ec:
1c:b9:43:c9:4d:25:10:e4:6e:4f:9e:59:09:72:cc:7a:78:29:
2c:ce:f3:b2:aa:5f:1e:63:a9:cf:34:10:63:51:01:c2:f7:a5:
af:61:6f:8f:f9:c7:ed:c2:94:63:aa:ad:b1:3f:1a:c9:87:86:
b6:ed:4a:9d:4c:a3:34:3b:ad:d6:d6:c9:c0:73:48:b7:4d:3c:
ee:74:9d:ba:02:72:95:5f:bf:dc:c4:30:ec:74:e8:f2:89:c8:
c1:2e:b8:bc:53:e8:c1:7e:db:a9:8d:e5:ca:7f:b7:92:75:1a:
c0:87:99:0f:62:f1:2c:62:22:2e:43:23:ff:99:0c:95:06:e6:
55:a4:e2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:55:42 2026 by rpki-client