Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
File: kdfs8XFCs7CTX443uPfZwlPw7hk.mft (raw, json)
Hash identifier: l9m9GlC6nTUS7Y3zsustcE/l+pIKBagq4pY+xcrF2Lo=
Subject key identifier: 95:A3:58:6E:D8:28:A2:97:9A:09:63:F0:54:5E:25:A7:0C:5C:C5:60
Authority key identifier: 91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
Certificate issuer: /CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Certificate serial: 01A09B12237129BA6C6FC8CDD82C15FD6C5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
Manifest number: 1A55
Signing time: Sun 13 Sep 2026 14:00:52 +0000
Manifest this update: Sun 13 Sep 2026 14:00:52 +0000
Manifest next update: Mon 14 Sep 2026 14:00:52 +0000
Files and hashes: 1: JL_bv1rE4SOiwiRn1jc2s_87lQQ.roa (hash: dWOsdKuE7dNLYI4NP8+n+WEeun5in1SyaWv26Okq8QI=)
2: kdfs8XFCs7CTX443uPfZwlPw7hk.crl (hash: PVoOprX5jM3UdJjG/omTnDrfNSWy+yRoZfOLzYH4Oyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 12:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9b:12:23:71:29:ba:6c:6f:c8:cd:d8:2c:15:fd:6c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Validity
Not Before: Sep 13 14:00:52 2026 GMT
Not After : Sep 14 14:00:52 2026 GMT
Subject: CN=95a3586ed828a2979a0963f0545e25a70c5cc560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:75:65:86:f9:bf:46:17:17:d7:17:2e:03:98:
5c:04:1a:d5:d7:d9:27:37:3e:60:6a:03:b8:a1:34:
e2:1a:b7:3e:16:c6:38:8d:6c:a0:6b:01:7f:3a:0a:
d4:f5:0f:66:69:9a:8b:2e:fd:33:59:ce:c5:b6:9e:
3d:40:eb:9e:2c:7a:5a:1c:15:d7:5a:11:00:05:3e:
33:5e:1b:fd:ba:f7:fe:52:6c:69:a4:5a:15:c8:65:
9e:09:9a:97:01:3d:1a:e6:77:13:26:63:95:b4:5b:
20:c4:f5:a4:37:67:45:ed:c9:9c:89:b8:69:af:d7:
1a:0b:3b:8a:df:a1:07:86:86:be:e9:d5:b9:64:bb:
08:a5:1e:8b:70:49:d5:19:4f:01:ad:8f:58:be:2e:
1c:f6:e5:e0:ea:c0:25:25:a7:30:c0:2d:29:74:14:
b9:88:57:6d:da:fe:3e:79:d4:ac:fa:3c:47:46:5d:
3f:0d:67:28:66:74:62:7e:84:00:11:5d:5f:82:bb:
1f:b7:09:43:2c:75:72:fa:f7:18:c5:3a:f2:73:dc:
1f:97:82:a5:1a:6f:ce:45:19:73:a4:3a:72:d5:f9:
8e:5b:cf:66:e3:6e:7b:65:64:cc:b7:b9:64:3a:35:
bd:4a:fa:3c:f0:9c:37:a2:12:c0:00:e3:63:2c:6c:
c7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A3:58:6E:D8:28:A2:97:9A:09:63:F0:54:5E:25:A7:0C:5C:C5:60
X509v3 Authority Key Identifier:
keyid:91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:68:08:2c:c2:5e:4a:3a:6a:d0:e5:c4:94:af:cb:e8:19:6c:
35:3f:5f:c4:a9:b9:1b:15:0a:46:50:cd:20:bc:18:c0:87:7d:
ed:b3:af:34:f6:cb:77:80:50:87:e1:9a:0b:1b:2c:a2:97:21:
bf:b6:a6:ce:39:5f:8d:14:94:1a:42:60:fb:e3:bf:7d:8d:e7:
4e:fa:e7:73:09:eb:ce:58:af:1a:fb:8f:99:52:70:d9:49:0b:
e8:e1:73:a7:4f:52:d4:13:ee:49:45:81:e8:67:cc:24:16:97:
45:03:b6:d9:8a:d6:85:5f:16:f5:83:6a:ae:5d:57:ee:54:ca:
16:a2:9b:bc:70:47:db:37:62:72:18:5c:66:ec:65:22:6a:c1:
95:8c:ce:5e:bb:f9:8e:42:98:50:f8:d1:0f:50:4c:90:60:57:
1b:40:7a:48:18:4c:3f:4f:a9:b2:cd:87:c0:ab:93:1e:93:d0:
75:14:8e:c9:68:c6:c9:5a:00:f3:9c:f6:8b:f5:a5:5b:cb:d5:
56:7e:a1:c5:bb:6c:f2:cc:f1:49:c9:32:96:ce:70:3a:eb:26:
c6:e2:ef:b2:5f:c3:76:a6:90:46:2d:62:c1:70:c8:ea:e3:4c:
f5:14:01:59:ce:51:ac:cc:b3:ce:b1:1a:1e:85:3e:1e:39:11:
3c:9f:8f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 23:04:12 2026 by rpki-client