Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: B4FDCHKxBA+Z9c7Y6mPJbyI3nyw28dhWgDqhPx0DY1U=
Subject key identifier: CB:2C:D1:DF:BF:18:8C:D7:E5:6E:06:29:46:87:DB:F6:8D:25:71:77
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 01A08C7AE3FDE1F4DDA755E25B4918F6CFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 160C
Signing time: Thu 10 Sep 2026 18:00:59 +0000
Manifest this update: Thu 10 Sep 2026 18:00:59 +0000
Manifest next update: Fri 11 Sep 2026 18:00:59 +0000
Files and hashes: 1: LASCfdMWoE20CF7WDK1PIh4LaTI.roa (hash: rIpKOSzr2MEm9EPCffOjAkuNKQPPOYskeo9lWvqTyOo=)
2: W7FoM9P8V95TjMG5CxF-kXC2djY.roa (hash: cqNL2j3ndLF7zdz8pZtr2cRhV6k7abA3ZyK4595EJ/s=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: /SU+zG3HoLiZ8fKjKj9MECYAjFxRtsojcV/VoWtOcy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:e3:fd:e1:f4:dd:a7:55:e2:5b:49:18:f6:cf:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Sep 10 18:00:59 2026 GMT
Not After : Sep 11 18:00:59 2026 GMT
Subject: CN=cb2cd1dfbf188cd7e56e06294687dbf68d257177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:bf:b0:37:d7:3c:fc:28:22:de:bb:1a:13:
ae:f1:30:43:4e:1f:14:7d:fc:48:3e:db:05:18:0b:
4e:66:66:3c:65:da:2f:f0:ab:ac:31:dc:57:85:9c:
d7:fd:a7:4e:79:d3:5d:2d:42:0b:f0:d5:ab:9f:eb:
3d:28:31:0f:e3:a5:3c:f6:5f:71:cd:aa:51:01:d0:
d7:db:28:07:2c:c2:b0:e2:4a:4a:8a:fc:f6:29:50:
74:08:93:e6:fb:01:ff:a5:3f:fb:27:9e:ad:00:ea:
d7:7b:27:81:41:b4:0a:e5:cf:26:f1:b2:b8:5d:1e:
48:09:16:6d:2b:6b:95:dd:76:c0:92:2f:03:61:86:
0f:a0:02:f3:85:13:dc:d5:76:f9:28:54:c5:7a:4b:
60:f9:26:fe:dc:0a:f0:e8:dc:76:2f:75:a8:28:d2:
b6:68:0d:d3:87:8f:6f:b7:74:93:7c:d7:cd:a5:e6:
99:86:89:6c:11:8e:dc:81:13:fc:04:ea:75:62:6b:
60:dd:26:6b:c8:b5:03:2f:10:ee:ba:a0:18:a0:ff:
e3:d2:fa:5e:6c:27:a4:e0:cb:06:12:05:94:8a:0c:
ca:bb:25:19:bf:82:0a:67:3a:e6:b3:bb:4e:26:55:
10:3d:6b:03:00:de:3c:37:66:5c:1b:ab:c2:98:d6:
12:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2C:D1:DF:BF:18:8C:D7:E5:6E:06:29:46:87:DB:F6:8D:25:71:77
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1d:c4:6a:e1:48:73:50:61:b7:c9:00:ce:e5:ef:d9:33:44:
dc:4e:59:a9:c3:04:b0:4a:7d:68:fe:83:b9:63:3d:83:f5:44:
3a:c9:a3:49:53:ae:37:8f:84:de:f6:65:3f:82:d6:6d:0b:77:
a9:88:c8:91:b8:66:77:f4:52:11:88:27:d4:8a:42:be:a1:4c:
cc:9e:00:d0:e3:e2:b3:c8:b8:9c:c5:2c:86:b2:a5:4b:dd:a8:
27:bd:fc:06:fc:2f:6e:fc:74:af:34:d6:de:87:bd:89:ac:92:
fe:52:c3:2e:1d:2f:b0:0c:97:72:a3:0b:0a:69:3c:9a:69:1e:
71:39:b5:57:15:b0:11:3e:25:ce:c6:22:3b:65:67:f9:a7:49:
24:e0:6c:85:6c:69:24:c2:bc:ba:2d:e5:c2:98:b6:5d:ff:59:
db:59:1c:53:9a:f3:8e:fe:4f:68:45:73:3a:8a:e7:67:68:b2:
5c:4b:b1:a7:ea:2c:9f:7d:4f:89:e8:2b:6d:18:9a:00:e2:c9:
07:4e:f2:10:6b:df:3f:9b:c1:78:6e:0b:a2:ec:78:ca:bb:43:
34:ca:3d:47:55:92:27:83:f5:c7:85:82:95:2a:46:e0:4c:bb:
f4:f2:e0:09:c0:9f:98:2a:5d:1a:3f:7f:3a:02:2d:b6:05:33:
9e:1d:fc:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMeuP94fTdp1XiW0kY9s/uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjA1ZjVhNjRlYTFmYjA5MGFkMjZkY2ZkYjE4Y2VmYjlh
YWJkOGQwHhcNMjYwOTEwMTgwMDU5WhcNMjYwOTExMTgwMDU5WjAzMTEwLwYDVQQD
EyhjYjJjZDFkZmJmMTg4Y2Q3ZTU2ZTA2Mjk0Njg3ZGJmNjhkMjU3MTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAK/sDfXPPwoIt67GhOu8TBDTh8U
ffxIPtsFGAtOZmY8Zdov8KusMdxXhZzX/adOedNdLUIL8NWrn+s9KDEP46U89l9x
zapRAdDX2ygHLMKw4kpKivz2KVB0CJPm+wH/pT/7J56tAOrXeyeBQbQK5c8m8bK4
XR5ICRZtK2uV3XbAki8DYYYPoALzhRPc1Xb5KFTFektg+Sb+3Arw6Nx2L3WoKNK2
aA3Th49vt3STfNfNpeaZholsEY7cgRP8BOp1Ymtg3SZryLUDLxDuuqAYoP/j0vpe
bCek4MsGEgWUigzKuyUZv4IKZzrms7tOJlUQPWsDAN48N2ZcG6vCmNYS4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMss0d+/GIzX5W4GKUaH2/aNJXF3MB8GA1UdIwQY
MBaAFJIgX1pk6h+wkK0m3P2xjO+5qr2NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82NTIyNjctZWExMy00ODkyLTlmZmEt
MDljMWI3MzM2YTUxLzEva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS82NTIyNjctZWExMy00ODkyLTlmZmEtMDljMWI3MzM2YTUx
LzEva2lCZldtVHFIN0NRclNiY19iR003N21xdlkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABh3EauFI
c1Bht8kAzuXv2TNE3E5ZqcMEsEp9aP6DuWM9g/VEOsmjSVOuN4+E3vZlP4LWbQt3
qYjIkbhmd/RSEYgn1IpCvqFMzJ4A0OPis8i4nMUshrKlS92oJ738Bvwvbvx0rzTW
3oe9iayS/lLDLh0vsAyXcqMLCmk8mmkecTm1VxWwET4lzsYiO2Vn+adJJOBshWxp
JMK8ui3lwpi2Xf9Z21kcU5rzjv5PaEVzOornZ2iyXEuxp+osn31PiegrbRiaAOLJ
B07yEGvfP5vBeG4Loux4yrtDNMo9R1WSJ4P1x4WClSpG4Ey79PLgCcCfmCpdGj9/
OgIttgUznh38yw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 22:46:52 2026 by rpki-client