Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: 0ewAe/Mbq/llsIBXCVeeZCLfnvBR88bHSB7mAHvHGhI=
Subject key identifier: C8:48:7A:9D:75:EB:70:F5:B9:AB:7B:B9:0D:C4:1C:99:20:51:80:00
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 01A08BD67FE294F267CA3C1218BAEF70FAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 15:01:25 +0000
Manifest this update: Thu 10 Sep 2026 15:01:25 +0000
Manifest next update: Fri 11 Sep 2026 15:01:25 +0000
Files and hashes: 1: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: oeWCbbXMWpOlTD4it/wc80MM10gresVyAIW2OaIY6XY=)
2: YF8tuWYG1Vw7dIaOMivXHZ0e1pU.roa (hash: oIHlw0teS6yzCF5/spwSi4mwOeeMJuzSTSKfdSl5QBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:7f:e2:94:f2:67:ca:3c:12:18:ba:ef:70:fa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: Sep 10 15:01:25 2026 GMT
Not After : Sep 11 15:01:25 2026 GMT
Subject: CN=c8487a9d75eb70f5b9ab7bb90dc41c9920518000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:eb:f2:63:a0:b2:a3:1e:9f:a9:a6:27:6c:
30:7f:3d:51:f5:2a:33:9a:e2:71:f3:3f:39:e0:12:
c9:82:7c:b7:d4:26:7a:a4:ee:e3:c9:c3:f7:3e:79:
f7:0c:9d:c9:7d:f7:f4:b8:cc:22:d7:45:a4:6d:d2:
5b:90:a9:98:fd:35:04:b8:32:b8:24:61:2a:82:00:
85:fa:1d:f9:36:7a:de:a4:10:e1:80:df:5f:b0:c9:
41:8d:68:36:6f:49:b0:6d:e5:a0:d4:5d:e4:1d:94:
3a:43:51:61:67:99:f0:14:dd:49:c5:62:26:79:bd:
55:94:ee:f3:5a:e0:1d:0b:3b:92:26:0e:c7:62:48:
9f:98:9e:7c:37:1e:28:21:cf:57:ea:78:18:2a:77:
45:2b:d6:d9:1d:eb:c7:41:c0:54:6a:3c:27:e4:3d:
ae:a8:d5:73:87:7f:b6:d7:cd:b2:44:03:2b:59:6e:
64:62:f1:8e:4f:77:3c:d4:f4:97:03:dc:95:35:6c:
de:78:d0:e0:0e:1d:d5:97:49:2e:79:2b:d9:ee:c4:
4d:9a:fc:21:7b:ce:53:4d:64:61:74:16:2d:5d:de:
53:05:29:b7:95:af:4d:6c:f6:e7:95:e5:00:e7:e1:
0a:17:f6:4d:ae:b4:4a:d7:d9:f4:fc:f1:b8:4c:ee:
b2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:48:7A:9D:75:EB:70:F5:B9:AB:7B:B9:0D:C4:1C:99:20:51:80:00
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:48:67:3b:92:48:41:2e:3e:fa:87:4b:43:12:ed:fe:04:c4:
35:65:34:09:68:72:66:cf:7f:59:0d:6f:b9:e3:76:55:0a:d1:
e1:32:1d:d3:09:ed:24:0d:b5:f7:2e:5d:fe:72:73:09:9e:a5:
ac:05:bc:4d:4e:5e:00:d4:cc:12:61:ba:c8:db:e9:76:2a:6e:
f0:60:3f:72:cd:0c:55:21:d1:0e:51:60:44:28:8f:e6:59:71:
c7:d3:1b:4a:a9:9d:af:82:c1:d9:11:2a:0f:73:20:46:59:25:
cd:c4:c1:bf:51:da:5a:8b:b9:99:5a:21:9f:fe:db:22:f0:24:
b1:15:80:f4:4c:cd:47:d3:54:39:fc:8e:7b:0a:43:54:d0:e8:
d8:0d:6a:b3:14:df:9f:41:6c:e2:80:fb:7c:34:06:3c:9e:4a:
83:59:20:5b:2a:26:3b:54:eb:3b:5a:78:98:64:ca:50:40:9b:
96:f4:97:e7:c1:0a:ad:9f:55:33:25:ee:a8:7b:e3:22:72:db:
e6:7d:57:10:78:f9:2a:04:3d:99:b1:88:60:de:d2:a7:3e:7b:
a0:0a:66:ad:98:73:cd:1f:cd:9e:9e:ea:d1:9f:34:17:6b:00:
9c:e7:65:45:93:28:4f:a7:ca:75:05:0e:97:7f:d8:a7:c1:8a:
01:7a:84:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:43:54 2026 by rpki-client