Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: Nw5Ce1CdG71VEPFqxD0+2UmDgYrhNmX5Y5x0UGcVtPU=
Subject key identifier: 52:5B:BF:CF:A6:00:E7:BB:D5:09:52:77:D9:7C:05:F1:51:75:80:16
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 01A13ECB69787F589C37AD05DE6D11F69A01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 09:01:20 +0000
Manifest this update: Thu 15 Oct 2026 09:01:20 +0000
Manifest next update: Fri 16 Oct 2026 09:01:20 +0000
Files and hashes: 1: gmcTjO0RV1Up_jbIfk_CZHi4V2A.roa (hash: Gqp9iA7OYQl9mvBvIysw6E+42GR1MiVOzZC/chm6YUU=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: 8zy5DxzC6GgjBm8cYq+1UWjmRl+VAFC6IlA642IIY4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:69:78:7f:58:9c:37:ad:05:de:6d:11:f6:9a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Oct 15 09:01:20 2026 GMT
Not After : Oct 16 09:01:20 2026 GMT
Subject: CN=525bbfcfa600e7bbd5095277d97c05f151758016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a9:8e:e8:bf:5e:e7:a7:ec:b7:eb:1d:10:a1:
79:a2:9c:36:c9:9d:24:32:0f:1c:eb:b6:48:f1:ba:
bc:18:51:0a:6c:97:a9:bb:32:b7:50:20:05:06:79:
ce:a2:1a:a9:c1:db:af:a7:05:50:94:50:f1:dd:9b:
60:c7:15:4a:62:53:10:40:2c:9b:c2:1e:74:06:2a:
4b:92:9c:fe:aa:9a:8d:45:99:35:f6:6f:5d:1c:4e:
24:83:4e:81:0b:c6:c6:15:fa:6d:90:75:03:75:d3:
98:94:7c:a4:25:90:16:57:d3:40:dd:24:0c:f2:d4:
a7:eb:eb:dc:af:72:ba:ea:aa:9e:da:3e:b3:fc:66:
04:c9:c6:07:af:99:b8:82:02:c5:80:2b:ad:66:25:
09:11:bb:b5:55:44:a3:b2:36:5f:15:27:6c:a5:a6:
95:cf:8a:a5:89:2e:02:60:57:73:40:3c:88:b3:04:
4b:e2:3f:eb:2d:91:ba:b1:8b:34:83:d5:85:50:bb:
b8:46:65:45:94:54:b0:63:e5:3f:45:4a:d0:f3:60:
48:4c:94:84:90:ff:55:b5:36:fe:71:88:73:24:2b:
0a:06:df:ec:c7:a1:da:9e:35:f2:c3:5d:d8:97:c6:
37:04:e9:4e:da:ef:6c:40:56:3f:b5:e6:87:1f:51:
3f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5B:BF:CF:A6:00:E7:BB:D5:09:52:77:D9:7C:05:F1:51:75:80:16
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:86:2d:b1:7e:3a:74:dc:ef:ba:eb:0a:c3:36:2c:e3:82:87:
29:68:6c:32:e1:4e:6e:70:86:74:7e:4e:f2:76:50:75:b8:ce:
7f:b3:b7:11:41:35:83:70:f5:c6:79:b4:64:8d:eb:74:57:a8:
28:0f:21:58:48:d3:7b:6e:85:66:53:52:f1:84:39:15:84:7b:
bd:0c:a4:60:4c:aa:4e:67:88:dc:2e:35:ac:c5:8b:5e:db:80:
b3:23:b7:32:c1:e5:65:8a:73:d3:5b:9b:b1:ab:61:6b:5b:e3:
cc:63:d2:59:5d:83:77:4c:ee:12:c2:e0:30:9e:36:a0:fd:a2:
ba:12:4f:23:76:6a:ff:74:b7:5a:fa:ed:c3:7b:00:6e:08:44:
5b:a2:7c:2c:96:12:ff:9f:e1:ed:cb:31:d0:80:eb:b7:89:a0:
51:50:a9:c9:92:19:16:aa:cb:03:ed:8b:da:31:4e:a7:a0:d9:
e2:34:b3:f9:bd:70:7d:5c:dd:79:58:a3:ae:1c:02:fb:40:e2:
6f:e2:e1:a5:40:f5:14:7d:c9:29:22:36:de:a1:c4:37:ec:61:
8c:bd:39:66:b4:77:ea:74:df:e8:ea:5e:b7:80:0b:f5:6a:d7:
d5:36:1c:a4:fe:55:c9:58:9f:78:4a:45:b1:b5:f5:f0:4a:1d:
1c:f0:80:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:26:35 2026 by rpki-client