Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: f+WmhzRKSln29dNObKErg559Q1vNWbPrfPlGOQwh2zg=
Subject key identifier: 74:6E:8C:C2:B7:E7:C5:EA:2A:AE:37:7E:A5:D7:5B:D1:0B:15:AC:ED
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 01A028B4010A87C90BD9AB472ACF1EE9D4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 1A15
Signing time: Sat 22 Aug 2026 09:01:20 +0000
Manifest this update: Sat 22 Aug 2026 09:01:20 +0000
Manifest next update: Sun 23 Aug 2026 09:01:20 +0000
Files and hashes: 1: gmcTjO0RV1Up_jbIfk_CZHi4V2A.roa (hash: Gqp9iA7OYQl9mvBvIysw6E+42GR1MiVOzZC/chm6YUU=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: 1gUfHPzx0ET9xLpxqlg+7xat6DQF40X4lzq95YR77d8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:28:b4:01:0a:87:c9:0b:d9:ab:47:2a:cf:1e:e9:d4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Aug 22 09:01:20 2026 GMT
Not After : Aug 23 09:01:20 2026 GMT
Subject: CN=746e8cc2b7e7c5ea2aae377ea5d75bd10b15aced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4c:2d:b2:79:37:c1:d5:73:48:9e:3f:e9:18:
66:a7:85:ef:34:19:8a:47:21:37:9e:8a:d0:ee:49:
d1:00:67:0b:29:4e:50:37:bf:38:e2:b4:56:64:25:
49:72:ed:1d:24:f1:55:a8:11:25:76:c7:14:08:4e:
ba:d9:eb:1e:5e:6d:aa:76:4c:48:1a:8a:76:28:03:
2c:aa:37:33:81:42:4f:8a:52:e9:d7:27:e8:8a:d2:
1a:27:72:c1:fa:b6:70:79:88:55:9f:86:63:49:73:
0e:c7:b7:d8:22:a3:94:ea:e4:12:bd:87:0b:66:cc:
da:3e:f9:b1:71:32:c6:43:c8:cd:59:77:c4:db:67:
8c:97:6b:69:5d:db:93:fc:59:6e:03:9d:70:db:72:
90:fd:1a:f5:59:22:31:dd:a5:04:c7:0c:ab:aa:bc:
da:fe:3b:7a:9c:05:4e:ae:97:94:32:1c:83:35:e4:
47:c1:56:b2:14:fa:59:61:7b:f0:d4:81:ea:68:86:
67:98:c3:e1:28:17:19:43:3b:96:47:e0:de:79:24:
5c:ca:9d:91:ad:50:a6:5d:3f:99:65:f3:21:37:14:
3d:40:cd:9e:12:72:0b:94:04:e2:ec:82:c4:5d:3f:
6a:d6:de:86:55:7e:f2:5b:de:9b:15:fd:e2:c9:d6:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6E:8C:C2:B7:E7:C5:EA:2A:AE:37:7E:A5:D7:5B:D1:0B:15:AC:ED
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5e:2b:b8:7a:5f:11:bd:b8:79:6f:35:95:fd:fc:52:5e:7d:
b9:22:c3:61:de:ee:e2:d5:85:e9:0b:0b:0d:15:c4:d5:48:56:
04:ff:67:d4:33:2a:54:0f:ae:a8:6e:02:e0:19:bc:63:39:37:
32:cb:59:7c:a4:e8:ed:a4:1e:6c:f6:8a:d1:06:7c:7b:7b:a7:
49:f6:df:06:d9:d1:4a:e9:c5:24:58:1b:77:90:e9:02:81:4d:
0f:08:3a:df:59:b7:70:0c:df:1d:4d:a2:ba:ad:0a:c3:82:59:
7d:40:d6:17:b4:97:e6:e7:c3:af:23:7c:83:5d:ab:ed:26:93:
ba:0e:33:24:ac:9e:e3:ce:68:51:d1:b3:ee:f4:6a:81:82:dd:
e9:31:2e:01:b1:5b:d5:a8:97:b4:68:39:4a:0a:28:e1:97:47:
92:fb:f0:05:7a:ce:82:2f:a3:ae:a0:92:9b:1e:fe:7a:f9:69:
fb:6c:93:c1:df:c5:74:f0:d1:c1:99:ba:30:25:72:f8:d6:74:
7a:cc:cc:30:cd:91:2c:28:c9:e4:19:e0:ef:8e:1a:9e:97:e2:
2e:73:18:8f:ff:57:ba:7c:0d:43:f4:c1:84:40:52:6c:cb:7a:
80:78:bc:56:d7:34:25:fe:d1:93:59:f5:00:48:0c:17:4b:bd:
f5:4e:68:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 11:01:33 2026 by rpki-client