Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
File: kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json)
Hash identifier: yNFFF6AK22QfVaE5T/lueIdr1kBi5enNEqYUbeaXb+0=
Subject key identifier: 06:4F:26:EE:5C:DD:17:2F:5E:04:85:0B:38:F9:51:71:47:16:CA:69
Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Certificate issuer: /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Certificate serial: 01A0558BFBDC23A60592EE00DFA7A2793DC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
Manifest number: 1A2C
Signing time: Mon 31 Aug 2026 02:00:32 +0000
Manifest this update: Mon 31 Aug 2026 02:00:32 +0000
Manifest next update: Tue 01 Sep 2026 02:00:32 +0000
Files and hashes: 1: iJabTTtAtZd2-Bt3JGr6szkGsok.roa (hash: 0sW3IKzf/8J/9kZJ3JO4MPvHO33GYi073LMRFSBG6BU=)
2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: R7ngWj0EH9GbmkXJAy75ZS/s66K35UIKbiSKrm420z8=)
3: xbuO7BsG7LbkSSQWawkvzIhK7y0.roa (hash: rlJz6+DJBLMlRi3myws4jEcOw9pVWqZGLHBQLp+0Ork=)
4: y3sbhhs4VAa9_leAXdVqA3jNjH8.roa (hash: Y15UbgY+4x80GYEq/q2RiWXokuPdkLl/xPzz6tjdo0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:55:8b:fb:dc:23:a6:05:92:ee:00:df:a7:a2:79:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Validity
Not Before: Aug 31 02:00:32 2026 GMT
Not After : Sep 1 02:00:32 2026 GMT
Subject: CN=064f26ee5cdd172f5e04850b38f951714716ca69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:ce:37:8d:ef:fc:a0:20:0d:d5:40:e5:4c:
c4:99:0f:99:9d:af:77:01:2f:86:31:24:f0:ff:dd:
0f:76:ba:df:de:e9:42:14:aa:e3:34:fb:fd:71:c5:
8e:45:e7:76:40:3f:be:df:2d:51:93:ef:b0:79:d0:
4e:bb:82:fe:3f:f4:91:2a:78:c3:2a:43:63:b1:d8:
a4:7a:c7:ef:5c:75:12:8f:b5:a8:39:8e:64:28:c6:
93:6e:f9:89:ce:3b:de:b5:89:6c:3f:cb:a0:36:c7:
7c:a8:c8:17:b0:63:04:be:ef:2b:21:1b:d9:9a:01:
85:78:d6:f4:5d:08:4c:16:30:13:26:a4:a8:29:08:
a3:cd:9e:0d:88:6f:38:97:35:83:b4:80:3e:c9:ee:
08:28:c5:24:fc:31:72:03:f2:7d:99:b0:07:99:3b:
90:df:e0:de:f7:29:18:29:02:17:33:e7:b4:6d:8c:
2d:49:32:f5:aa:5c:b1:45:54:bb:80:d7:6b:84:56:
cf:ea:25:97:f3:dc:f7:2b:15:90:6a:7f:7a:23:14:
45:5a:92:74:fc:6e:b2:9b:66:79:2d:82:e3:5a:a1:
34:e1:74:db:cb:e8:07:ca:cf:20:0d:36:c4:96:00:
55:bc:17:c4:f6:56:9d:c8:5e:42:16:84:07:ca:e7:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4F:26:EE:5C:DD:17:2F:5E:04:85:0B:38:F9:51:71:47:16:CA:69
X509v3 Authority Key Identifier:
keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:54:46:3d:9a:f8:9a:5c:65:d9:0c:92:ac:a0:89:db:a5:77:
56:5b:ec:7a:06:e7:44:45:0d:c8:90:45:52:45:b5:b9:de:6b:
68:d1:c8:ca:21:44:d7:9f:20:36:55:20:be:26:3d:43:19:57:
82:60:62:2c:cf:bd:78:1e:f9:62:f8:41:11:a7:90:e4:4d:bd:
15:29:b3:a7:c3:06:b9:3d:10:a1:f6:cb:e2:0b:c0:5d:60:3e:
0c:16:bf:1e:85:cd:b7:6e:6a:e0:25:69:35:72:84:92:c5:37:
ce:aa:05:ef:35:68:e0:e9:72:52:09:a7:b8:82:90:34:cc:35:
c2:e0:48:9b:b7:79:34:f9:bf:59:3a:38:71:86:c5:16:76:e3:
c0:d6:2b:12:68:75:e1:fb:19:ed:63:c9:34:c9:fd:be:b5:88:
e5:7b:50:65:d4:65:21:91:5a:ce:3d:03:e0:e3:6e:9f:ea:84:
a0:aa:f0:79:2c:5c:dd:ee:e3:a7:2b:2d:05:89:3e:38:25:81:
2a:78:36:e5:3f:5e:96:02:b7:ff:73:57:19:89:63:7d:a0:79:
89:56:92:7f:ab:2d:0d:8b:25:cf:f1:f1:12:d0:57:e3:df:ca:
47:46:c4:79:ae:a2:09:b2:6e:7e:3e:89:d4:10:ff:85:06:2e:
e3:74:ff:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:11:33 2026 by rpki-client