Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: nQHTWQZXZCDsH6o3SD+ALx6hAzHSQFRRZDvd8GBlqxE=
Subject key identifier: C4:A6:A0:A7:45:02:EE:1A:75:7E:5D:0D:A3:3C:8E:A2:AA:0E:C3:59
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 01A18F4329AEA5DE08BB69F4AA19CFB08872
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 1692
Signing time: Sat 31 Oct 2026 00:01:45 +0000
Manifest this update: Sat 31 Oct 2026 00:01:45 +0000
Manifest next update: Sun 01 Nov 2026 00:01:45 +0000
Files and hashes: 1: LASCfdMWoE20CF7WDK1PIh4LaTI.roa (hash: rIpKOSzr2MEm9EPCffOjAkuNKQPPOYskeo9lWvqTyOo=)
2: W7FoM9P8V95TjMG5CxF-kXC2djY.roa (hash: cqNL2j3ndLF7zdz8pZtr2cRhV6k7abA3ZyK4595EJ/s=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: 3Uv7Xpw2wrP4qWSLUuggUUhugtyNahCmGH9N4mDmge4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:43:29:ae:a5:de:08:bb:69:f4:aa:19:cf:b0:88:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Oct 31 00:01:45 2026 GMT
Not After : Nov 1 00:01:45 2026 GMT
Subject: CN=c4a6a0a74502ee1a757e5d0da33c8ea2aa0ec359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d4:fe:0e:fc:07:19:90:f8:3e:e8:e4:d0:b4:
5e:b1:50:5e:58:82:13:f0:98:32:73:10:28:c1:69:
e5:f6:29:b2:e3:92:95:db:62:e6:c3:0d:5b:6a:c3:
83:68:ee:57:60:0d:7e:90:f0:0b:75:f0:d7:70:07:
5f:24:be:4c:dc:d3:bf:b8:3e:89:f4:1a:80:48:b2:
a4:9d:4b:eb:f9:ee:6d:69:84:40:cb:58:08:64:ee:
51:39:6f:1b:da:0a:11:33:06:8f:c4:21:29:a3:70:
e7:50:28:d8:a3:c1:01:f9:de:e7:a8:cd:57:47:f0:
72:0b:f0:f9:5f:4f:58:f7:18:0e:db:81:0a:b0:5b:
c0:27:55:e2:1f:97:7f:c2:2f:51:c8:81:8b:54:e7:
66:21:09:71:c4:5b:27:b7:48:c7:31:9c:7d:06:c0:
dd:3b:14:7e:3c:28:82:07:2a:e0:a3:6e:d1:b0:9c:
90:81:60:5d:d1:2f:30:e0:a2:57:0b:ee:a2:b8:54:
b6:f1:6a:c0:f3:e6:58:a3:c6:eb:ab:fd:02:f2:d7:
c4:1f:9e:c8:2b:d7:3e:36:d9:cf:6a:f9:82:63:9f:
0a:80:bb:ee:e0:6c:31:4d:21:9f:5d:ee:b8:1f:0e:
3a:f6:fa:4c:a4:50:3d:f8:46:55:aa:e4:b1:d4:85:
53:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A6:A0:A7:45:02:EE:1A:75:7E:5D:0D:A3:3C:8E:A2:AA:0E:C3:59
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:5e:ff:99:24:81:c1:a3:51:53:83:7d:c7:3d:ef:ad:2b:40:
ff:1f:93:0f:cb:5b:1b:b9:ba:e1:6b:00:46:16:c9:36:2f:26:
d8:72:6a:53:92:92:f5:65:af:ce:e3:30:f3:2d:05:d5:48:8d:
04:a7:91:51:cf:99:92:d9:ba:fb:61:93:74:f0:7d:47:26:e9:
6c:d8:82:e1:6d:52:e0:47:15:7b:a4:7a:86:40:ce:c8:73:50:
2f:86:12:67:98:57:90:93:7a:87:f0:30:de:fb:45:72:52:bb:
49:03:85:fb:51:e0:96:92:92:70:35:44:b1:f7:3a:a6:9d:89:
91:66:df:1c:c3:8d:68:fd:1b:ea:bb:00:99:07:af:8a:ab:52:
68:db:be:d8:e5:0d:b2:14:2b:e0:82:c0:fe:6d:db:5f:25:8f:
6b:70:fb:ee:80:4b:74:a8:e2:05:fb:16:85:a7:eb:24:f9:7a:
59:93:3f:fe:31:a0:f0:68:5f:f1:aa:1f:c0:65:2f:35:12:bd:
04:6e:18:5d:2e:07:31:47:4b:5f:fe:e3:0a:02:82:4c:66:7a:
16:ad:24:78:20:88:f7:e1:a6:21:54:23:dd:0d:56:60:05:45:
03:57:4e:52:a3:8a:93:2a:8c:de:3e:d9:e1:3b:fd:6d:2e:c9:
1f:c9:66:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:41:34 2026 by rpki-client