Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier: q4fFITGtTNxB7rw1oU7cYblUH734zpmC3wBXqFtOV5g=
Subject key identifier: 39:16:B2:08:52:BE:8D:AF:B1:98:69:FD:96:75:32:C0:85:BC:FA:B8
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 01A089E801C791E54418FE1F11958813B3C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number: 1A4A
Signing time: Thu 10 Sep 2026 06:01:18 +0000
Manifest this update: Thu 10 Sep 2026 06:01:18 +0000
Manifest next update: Fri 11 Sep 2026 06:01:18 +0000
Files and hashes: 1: ddmt2-uWwkD03hR8f-AnYnhHvEQ.roa (hash: NzfyOsp8qB/kzAypqWkHF3Ue4tcxIJ2yaDyTF4sPpVU=)
2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: P4/jujbPrYuyKETd9IAoxw7F9zkFcr3XL3HGLXloark=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e8:01:c7:91:e5:44:18:fe:1f:11:95:88:13:b3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: Sep 10 06:01:18 2026 GMT
Not After : Sep 11 06:01:18 2026 GMT
Subject: CN=3916b20852be8dafb19869fd967532c085bcfab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8e:71:68:39:9e:49:1d:36:4b:b6:2c:56:a4:
bd:83:95:6e:40:76:77:09:18:6a:bd:f9:47:2b:52:
e8:dc:f6:e2:6d:88:9a:4d:9f:59:4c:57:3e:45:75:
07:b5:e2:28:63:59:36:00:b1:88:a1:0b:c8:39:8d:
1c:d4:73:8a:6b:08:f0:62:b7:76:8b:32:20:6b:7c:
11:08:ad:1a:e6:19:88:e7:85:41:00:d3:3d:cb:bc:
dc:05:ea:02:21:4e:50:63:1d:38:0f:31:dc:cf:28:
85:1d:25:8c:60:3d:df:8f:9e:4a:bc:9f:70:65:79:
b7:28:f9:57:fc:50:05:ad:31:b0:b6:d9:77:d4:13:
96:6e:30:79:fa:26:c8:74:0a:db:89:b9:fd:33:90:
4e:ec:51:27:82:42:dd:b1:d3:81:0e:c1:98:21:2d:
d1:e3:de:8c:0e:da:d7:f2:db:44:02:c6:75:77:76:
8d:28:91:a5:cf:ea:95:1d:d7:7f:4f:e7:2f:5e:56:
9e:ed:92:c8:64:25:3a:db:ce:b2:06:8e:db:49:dc:
4d:df:30:be:d1:44:02:d3:23:4b:7a:70:e6:35:f9:
e8:f4:eb:32:b7:af:7d:20:02:77:0e:b9:88:67:3d:
8f:49:f2:91:eb:31:a7:39:5a:d6:f0:62:39:76:31:
36:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:16:B2:08:52:BE:8D:AF:B1:98:69:FD:96:75:32:C0:85:BC:FA:B8
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:77:b9:4f:4e:61:34:38:bb:05:74:51:7b:e4:ad:f9:44:6f:
27:9e:70:f1:d4:be:1f:a6:5e:5b:45:93:4f:73:b4:ec:ed:bd:
20:35:85:57:79:38:bb:c8:ef:3d:61:39:f8:3e:af:10:2b:3e:
50:f7:45:0f:8c:04:39:f9:12:d3:93:83:84:89:0b:73:fb:a8:
7f:b0:df:27:98:19:f3:1f:c9:d5:0a:ad:c4:24:f4:b2:44:13:
95:e0:cc:c8:93:8a:a7:24:88:2a:0c:87:5a:3d:cf:83:03:b7:
3e:c8:01:6d:3b:2d:c6:f6:2c:19:33:f4:23:f6:c1:0f:fa:bd:
34:a1:7b:6e:71:81:5c:9b:2e:53:04:15:92:3a:06:b7:ef:36:
16:30:58:39:86:aa:ef:db:2f:ee:4a:ec:b0:e9:26:f6:6f:23:
c2:58:59:75:ac:2e:bb:f9:2e:9d:ea:52:87:35:39:32:89:e4:
de:8a:91:51:f6:99:11:19:5e:de:a8:be:33:9a:50:7e:8e:28:
b2:34:fd:1a:df:cd:1f:02:35:a8:67:6a:08:f4:80:b0:1c:48:
dc:a0:a8:99:07:28:4f:43:5d:4d:67:c1:5c:f7:22:5c:5c:fa:
e0:7c:49:a3:4e:fc:97:9c:1b:76:8b:e7:2f:fe:44:94:4b:7c:
04:45:47:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCJ6AHHkeVEGP4fEZWIE7PIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYWU1MzhlMmE5MTM0NmYwNDAyNTk4YjBmZjJmYjlhOTVj
MDdjMzkwHhcNMjYwOTEwMDYwMTE4WhcNMjYwOTExMDYwMTE4WjAzMTEwLwYDVQQD
EygzOTE2YjIwODUyYmU4ZGFmYjE5ODY5ZmQ5Njc1MzJjMDg1YmNmYWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Y5xaDmeSR02S7YsVqS9g5VuQHZ3
CRhqvflHK1Lo3PbibYiaTZ9ZTFc+RXUHteIoY1k2ALGIoQvIOY0c1HOKawjwYrd2
izIga3wRCK0a5hmI54VBANM9y7zcBeoCIU5QYx04DzHczyiFHSWMYD3fj55KvJ9w
ZXm3KPlX/FAFrTGwttl31BOWbjB5+ibIdArbibn9M5BO7FEngkLdsdOBDsGYIS3R
496MDtrX8ttEAsZ1d3aNKJGlz+qVHdd/T+cvXlae7ZLIZCU6286yBo7bSdxN3zC+
0UQC0yNLenDmNfno9Osyt699IAJ3DrmIZz2PSfKR6zGnOVrW8GI5djE2JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDkWsghSvo2vsZhp/ZZ1MsCFvPq4MB8GA1UdIwQY
MBaAFJCuU44qkTRvBAJZiw/y+5qVwHw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4Mzkt
YzVlNzgyMTU3OWYxLzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4MzktYzVlNzgyMTU3OWYx
LzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXe5T05h
NDi7BXRRe+St+URvJ55w8dS+H6ZeW0WTT3O07O29IDWFV3k4u8jvPWE5+D6vECs+
UPdFD4wEOfkS05ODhIkLc/uof7DfJ5gZ8x/J1QqtxCT0skQTleDMyJOKpySIKgyH
Wj3PgwO3PsgBbTstxvYsGTP0I/bBD/q9NKF7bnGBXJsuUwQVkjoGt+82FjBYOYaq
79sv7krssOkm9m8jwlhZdawuu/kunepShzU5Monk3oqRUfaZERle3qi+M5pQfo4o
sjT9Gt/NHwI1qGdqCPSAsBxI3KComQcoT0NdTWfBXPciXFz64HxJo078l5wbdovn
L/5ElEt8BEVH+Q==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:38:16 2026 by rpki-client