Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
File: kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft (raw, json)
Hash identifier: UuF50gUqPN40zssg+jk3uig4b6bvO0+7ro07y71lObE=
Subject key identifier: BE:12:1C:D2:57:41:0E:F4:C1:62:F2:D7:9C:7A:6C:DF:D0:41:65:79
Authority key identifier: 91:CB:57:D7:E1:E7:67:B5:3E:FD:E4:E6:CA:35:E6:EA:D6:3E:A0:F2
Certificate issuer: /CN=91cb57d7e1e767b53efde4e6ca35e6ead63ea0f2
Certificate serial: 019FDC19C322B8C3347850C761DA448EC120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
Manifest number: 010D
Signing time: Fri 07 Aug 2026 12:01:43 +0000
Manifest this update: Fri 07 Aug 2026 12:01:43 +0000
Manifest next update: Sat 08 Aug 2026 12:01:43 +0000
Files and hashes: 1: kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl (hash: ZbRDkMv8pnQF3vMWlzU5yU/35SS0DDAabzM+PZ+kySA=)
2: sNkrn4e_iEhVmsY7BKmVgiJzrPk.roa (hash: Wi4vAN2/n0xlq6WCGCToRrJhwKyrF46LKv+aBLh5wr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 12:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:19:c3:22:b8:c3:34:78:50:c7:61:da:44:8e:c1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cb57d7e1e767b53efde4e6ca35e6ead63ea0f2
Validity
Not Before: Aug 7 12:01:43 2026 GMT
Not After : Aug 8 12:01:43 2026 GMT
Subject: CN=be121cd257410ef4c162f2d79c7a6cdfd0416579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f6:e0:59:2f:26:95:eb:2d:a9:a0:e8:01:37:
b5:06:d1:cd:57:92:cd:53:90:5e:9f:ba:7d:af:a0:
e0:86:9b:ff:d0:2b:6a:80:27:b2:0e:5f:71:94:52:
7c:db:19:82:76:9f:56:45:81:f4:6b:0c:35:62:e6:
cf:8a:c7:78:c4:e1:f7:b1:ff:b9:1e:5e:ba:af:9e:
c7:73:3c:08:24:c6:97:cb:ea:71:01:d1:ae:c5:87:
f9:f8:08:c2:cf:67:3e:36:ec:87:3b:1e:3d:2f:68:
db:ee:65:02:8c:18:e9:31:a4:cb:74:29:69:b0:37:
fc:e0:2c:65:2a:37:3d:40:73:71:66:09:34:09:29:
a1:22:f0:89:22:09:8a:9d:e0:9c:73:83:23:b7:74:
d1:cc:12:04:0b:52:89:0c:af:dc:c7:d3:b2:ce:06:
bd:bb:66:41:96:e8:23:ec:8a:31:b3:cc:3f:bf:35:
b4:f2:68:9c:e7:81:50:72:e8:e8:2e:ca:45:a5:34:
c5:4a:81:4b:36:c4:09:b6:ec:1b:45:1d:78:fd:74:
3f:e3:0f:15:1a:d8:91:5d:aa:0b:24:c8:28:6b:6b:
e8:36:29:24:2e:5c:24:41:5b:2b:fc:11:50:69:36:
00:3f:63:17:b7:c0:d3:3a:16:24:dd:99:7c:1a:f6:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:12:1C:D2:57:41:0E:F4:C1:62:F2:D7:9C:7A:6C:DF:D0:41:65:79
X509v3 Authority Key Identifier:
keyid:91:CB:57:D7:E1:E7:67:B5:3E:FD:E4:E6:CA:35:E6:EA:D6:3E:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2a:0f:97:c4:ba:eb:ba:fb:5a:92:48:d0:fe:61:5f:c4:ba:
86:b0:8c:b1:55:5e:24:25:97:f1:58:07:35:d6:99:bf:6d:79:
e3:60:10:e2:ff:f8:16:9c:47:78:b9:1a:2f:53:3d:49:cd:69:
8a:4b:3c:33:6a:f0:70:1e:4d:f4:47:ed:43:78:e7:ad:2c:df:
38:1d:b5:ed:2b:74:41:b3:aa:a5:27:cf:2c:a0:d9:dc:07:a3:
31:74:1e:ba:94:43:a4:c1:7b:a1:08:0b:7e:60:57:92:79:8b:
68:c9:6e:61:17:42:c2:d4:3f:ae:6f:37:ee:47:f6:3f:8f:18:
1d:f2:6b:e8:57:b7:bf:7c:c8:93:cb:d0:59:14:79:af:bc:e4:
03:6d:47:d5:fb:34:37:6b:a1:c0:8d:8a:1a:b5:f3:62:06:1d:
b5:07:61:fc:5a:3a:a2:3c:e5:b1:47:f8:92:92:6f:64:e8:e9:
c5:f7:b2:76:08:d2:aa:4a:59:10:17:01:ab:91:9b:3d:07:3c:
88:15:dc:cb:42:ca:35:2c:c5:15:04:e5:08:1e:39:73:de:0c:
fb:06:4b:c2:87:11:ef:29:55:f8:5a:92:19:1c:93:73:30:61:
a2:b1:ac:6c:5c:fb:6f:6e:16:17:0c:83:37:ff:17:69:a1:51:
17:80:2f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 17:18:15 2026 by rpki-client