Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
File: kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft (raw, json)
Hash identifier: FWR7mcZ3WR0PSbe2PAjyQqI7XbcQyDg2hoUGzUTZomk=
Subject key identifier: F8:6F:78:36:A1:2D:30:2C:EC:18:E1:52:0A:E4:7A:08:B7:4A:A1:C3
Authority key identifier: 91:CB:57:D7:E1:E7:67:B5:3E:FD:E4:E6:CA:35:E6:EA:D6:3E:A0:F2
Certificate issuer: /CN=91cb57d7e1e767b53efde4e6ca35e6ead63ea0f2
Certificate serial: 01A1A7B8EA7B59977A3DA8B1697ABE837147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
Manifest number: 01FB
Signing time: Wed 04 Nov 2026 18:01:15 +0000
Manifest this update: Wed 04 Nov 2026 18:01:15 +0000
Manifest next update: Thu 05 Nov 2026 18:01:15 +0000
Files and hashes: 1: kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl (hash: gqFUuHiFA7wpVGKQKdKMgkNeBEc3yDfQyouXhje7Ltk=)
2: sNkrn4e_iEhVmsY7BKmVgiJzrPk.roa (hash: Wi4vAN2/n0xlq6WCGCToRrJhwKyrF46LKv+aBLh5wr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:b8:ea:7b:59:97:7a:3d:a8:b1:69:7a:be:83:71:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cb57d7e1e767b53efde4e6ca35e6ead63ea0f2
Validity
Not Before: Nov 4 18:01:15 2026 GMT
Not After : Nov 5 18:01:15 2026 GMT
Subject: CN=f86f7836a12d302cec18e1520ae47a08b74aa1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3d:47:55:aa:76:a1:c1:f1:12:b5:19:1b:25:
e1:91:d3:1f:36:9d:c0:64:28:75:59:c9:dd:24:4a:
48:2d:b5:47:3e:82:19:b9:c7:f8:1a:8d:ae:04:6b:
53:d8:60:25:d3:bf:7c:a5:84:98:e4:f3:08:c5:08:
2d:44:b4:fe:90:ba:f5:34:77:34:bf:d1:df:9f:90:
b9:1f:52:70:d8:99:db:28:eb:95:91:58:9b:42:58:
0a:9d:de:bb:61:bf:be:54:7e:bb:98:0f:2c:18:77:
86:f6:0c:9e:56:9f:f8:ba:98:3a:7e:0d:ce:6c:4c:
b8:22:21:08:68:72:e4:7c:1d:1e:e8:94:0a:46:d5:
05:3f:11:ef:9a:34:80:a2:99:c8:a0:43:10:ff:5a:
ec:c6:0d:ca:d1:86:b5:c6:40:a3:d1:5f:db:8d:9d:
07:eb:db:66:95:97:2d:45:e2:ad:f5:5e:b1:8b:cb:
84:46:12:f2:70:80:60:10:eb:c4:1b:0b:a1:c7:89:
65:91:20:2d:49:0f:43:2d:92:2c:8f:e4:05:5d:e4:
19:97:42:66:fe:e5:88:38:2f:ec:b6:89:8b:50:31:
5b:bd:a1:1f:c8:a7:2e:b0:26:bd:6e:bf:5d:0c:e0:
c2:91:56:6c:b4:46:8d:c1:bd:4f:a8:f8:52:f3:50:
b5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6F:78:36:A1:2D:30:2C:EC:18:E1:52:0A:E4:7A:08:B7:4A:A1:C3
X509v3 Authority Key Identifier:
keyid:91:CB:57:D7:E1:E7:67:B5:3E:FD:E4:E6:CA:35:E6:EA:D6:3E:A0:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kctX1-HnZ7U-_eTmyjXm6tY-oPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/aac8da-9eec-4587-9e73-e9618c3b5a95/1/kctX1-HnZ7U-_eTmyjXm6tY-oPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0e:8a:4b:b9:5e:90:e5:5a:71:9e:f6:c5:b5:94:00:fe:eb:
03:7b:0a:c3:29:88:e4:bb:95:97:2d:37:13:94:ed:8d:b9:4f:
6a:e8:68:b6:94:19:98:71:3f:d7:4f:ae:c4:34:bb:37:98:2f:
4b:18:21:58:a2:74:09:8b:1f:d6:2e:3f:12:28:e4:5d:00:f8:
18:1f:89:40:0f:65:80:10:a9:a1:34:0f:a8:19:b9:eb:ee:a1:
4b:24:1a:7e:ae:4b:71:dc:93:08:c1:a4:9d:30:6c:98:95:a8:
06:2c:7e:bc:b8:73:4b:8a:03:e1:de:ce:75:b3:9f:dc:2f:9f:
c3:ea:f2:0e:67:d4:63:91:13:8e:0c:ce:c4:55:1f:fb:ca:a1:
42:ee:0c:d9:fe:e8:69:08:6a:57:2a:e9:c7:7c:0d:41:51:b7:
79:10:d8:35:68:72:32:d7:10:89:d8:40:8d:41:03:3d:46:cc:
73:a3:5e:0d:ca:46:ca:31:d2:61:34:f9:67:a4:af:cb:f0:48:
da:c2:c7:4d:a6:2d:f4:c7:38:0b:51:86:a5:1b:7c:64:24:0b:
7b:d3:52:3c:80:d6:6b:e3:43:0d:31:7a:45:c2:bd:c9:6b:d3:
b8:31:cf:38:5e:24:99:b6:2b:dc:15:a1:d2:f5:3f:7e:52:d9:
26:55:64:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGnuOp7WZd6PaixaXq+g3FHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxY2I1N2Q3ZTFlNzY3YjUzZWZkZTRlNmNhMzVlNmVhZDYz
ZWEwZjIwHhcNMjYxMTA0MTgwMTE1WhcNMjYxMTA1MTgwMTE1WjAzMTEwLwYDVQQD
EyhmODZmNzgzNmExMmQzMDJjZWMxOGUxNTIwYWU0N2EwOGI3NGFhMWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj1HVap2ocHxErUZGyXhkdMfNp3A
ZCh1WcndJEpILbVHPoIZucf4Go2uBGtT2GAl0798pYSY5PMIxQgtRLT+kLr1NHc0
v9Hfn5C5H1Jw2JnbKOuVkVibQlgKnd67Yb++VH67mA8sGHeG9gyeVp/4upg6fg3O
bEy4IiEIaHLkfB0e6JQKRtUFPxHvmjSAopnIoEMQ/1rsxg3K0Ya1xkCj0V/bjZ0H
69tmlZctReKt9V6xi8uERhLycIBgEOvEGwuhx4llkSAtSQ9DLZIsj+QFXeQZl0Jm
/uWIOC/stomLUDFbvaEfyKcusCa9br9dDODCkVZstEaNwb1PqPhS81C1bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhveDahLTAs7BjhUgrkegi3SqHDMB8GA1UdIwQY
MBaAFJHLV9fh52e1Pv3k5so15urWPqDyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2N0WDEtSG5aN1UtX2VUbXlqWG02dFktb1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hYWM4ZGEtOWVlYy00NTg3LTllNzMt
ZTk2MThjM2I1YTk1LzEva2N0WDEtSG5aN1UtX2VUbXlqWG02dFktb1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9hYWM4ZGEtOWVlYy00NTg3LTllNzMtZTk2MThjM2I1YTk1
LzEva2N0WDEtSG5aN1UtX2VUbXlqWG02dFktb1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgg6KS7le
kOVacZ72xbWUAP7rA3sKwymI5LuVly03E5TtjblPauhotpQZmHE/10+uxDS7N5gv
SxghWKJ0CYsf1i4/EijkXQD4GB+JQA9lgBCpoTQPqBm56+6hSyQafq5LcdyTCMGk
nTBsmJWoBix+vLhzS4oD4d7OdbOf3C+fw+ryDmfUY5ETjgzOxFUf+8qhQu4M2f7o
aQhqVyrpx3wNQVG3eRDYNWhyMtcQidhAjUEDPUbMc6NeDcpGyjHSYTT5Z6Svy/BI
2sLHTaYt9Mc4C1GGpRt8ZCQLe9NSPIDWa+NDDTF6RcK9yWvTuDHPOF4kmbYr3BWh
0vU/flLZJlVkGQ==
-----END CERTIFICATE-----
Generated at Thu Nov 5 05:46:48 2026 by rpki-client