Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: bUtQhlt2eScXXcPPkzdcj3+pSbstQgJJJrDUvLm5GtA=
Subject key identifier: A6:B2:69:23:50:61:87:EE:DF:B1:D0:16:04:98:BD:A1:25:97:34:10
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 01A184F5980636F8AA5275D35069D62C793A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 1ACA
Signing time: Thu 29 Oct 2026 00:00:49 +0000
Manifest this update: Thu 29 Oct 2026 00:00:49 +0000
Manifest next update: Fri 30 Oct 2026 00:00:49 +0000
Files and hashes: 1: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: qLl8anKUsPA34V51gLONnidLRc7wb9A5KU801gYBFrU=)
2: YF8tuWYG1Vw7dIaOMivXHZ0e1pU.roa (hash: oIHlw0teS6yzCF5/spwSi4mwOeeMJuzSTSKfdSl5QBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:f5:98:06:36:f8:aa:52:75:d3:50:69:d6:2c:79:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: Oct 29 00:00:49 2026 GMT
Not After : Oct 30 00:00:49 2026 GMT
Subject: CN=a6b26923506187eedfb1d0160498bda125973410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:78:4c:07:6e:fd:fc:fb:4b:d4:2b:8f:64:
21:f8:c7:46:4e:65:85:54:7f:be:f5:14:aa:50:3e:
a3:9e:d0:fd:36:a3:f5:c3:26:59:60:94:c7:83:2a:
28:58:0d:6e:eb:a7:e0:47:f6:a1:91:93:9b:b2:ea:
69:3f:54:e3:2d:37:1d:56:16:a4:78:01:08:ed:8a:
5c:12:71:f8:e9:cb:27:07:8c:06:b5:fc:e9:cc:16:
d6:30:75:4b:8e:b4:1b:a0:88:2b:02:60:81:7c:f0:
cd:5b:5a:39:99:bc:d9:9e:33:77:19:62:27:7d:b8:
40:74:0a:78:aa:bf:66:b7:47:9a:10:1b:6c:37:00:
b9:b9:a2:fa:56:d7:fb:38:7b:5b:dd:14:c1:37:e4:
01:34:7f:e8:7b:ae:64:63:e8:48:11:8a:8a:4f:a1:
f6:3c:1c:ae:67:32:2f:63:cb:c6:54:5a:b3:fb:4d:
b4:af:a7:df:ef:28:a4:de:f9:02:d5:bb:9d:13:cd:
0c:9b:99:b0:8c:bb:69:35:34:17:f1:e4:fb:40:10:
86:9a:49:96:f5:bc:19:3a:c4:e3:b4:27:da:5b:17:
15:2a:d2:7d:2f:e6:33:6f:5e:33:79:82:58:13:17:
db:ed:98:19:4b:e5:7f:7b:0e:24:3a:59:00:c9:9b:
0f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B2:69:23:50:61:87:EE:DF:B1:D0:16:04:98:BD:A1:25:97:34:10
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0b:0f:7e:0f:ae:39:fe:da:a0:95:8a:f3:b3:49:a1:78:02:
ea:6f:64:63:78:15:3e:1e:f7:75:22:35:25:b3:55:cb:8a:03:
5b:a4:df:83:78:5d:34:91:86:c7:4e:26:ff:1a:87:4d:13:3a:
c1:f2:a6:c9:be:d4:a5:79:05:38:85:65:de:b7:73:19:13:3d:
c7:88:b5:d0:a7:f2:27:f4:87:00:2e:5d:c0:cb:df:6f:01:ab:
63:8e:b2:42:36:e5:bd:a3:b1:23:f3:7b:17:c7:52:6c:65:cc:
60:97:f2:96:4c:7e:cf:6a:38:38:dc:cd:d3:f1:d9:cc:a4:fa:
e6:78:17:fa:91:1c:c2:7d:46:6d:dd:df:f4:37:ef:07:c3:f3:
73:1b:28:a7:02:fa:73:57:2a:bd:a3:fe:c2:5f:a1:f6:2c:29:
8a:05:34:07:a3:c7:31:55:60:4e:8d:18:ad:d9:b9:51:8c:52:
26:03:e8:0f:fb:04:a7:d6:4c:b5:ad:05:67:9f:98:d7:1c:d7:
7e:d3:85:cc:54:83:40:1b:d8:d8:f4:95:23:1a:ae:34:06:4c:
9c:fb:7a:98:6e:33:dc:1d:53:33:b3:d5:af:c5:3d:b3:aa:0c:
76:2e:d0:82:c2:65:ae:4c:c6:d2:b9:d7:87:96:97:32:3c:f4:
e7:f2:7c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:50:14 2026 by rpki-client