Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/6a39a8-10a3-44ea-bf8d-b91e6ea906d9/1/kZh0De0u0LMBsdWIngY51k-Rl-U.mft
File: kZh0De0u0LMBsdWIngY51k-Rl-U.mft (raw, json)
Hash identifier: nXMBb4h2HS0X1PwZYuGNYst4j9zpOgDn0i0RNiBRjsY=
Subject key identifier: 89:FF:6E:82:DC:C3:2D:2B:AA:B4:D8:87:B5:2D:01:F3:EB:65:AF:51
Authority key identifier: 91:98:74:0D:ED:2E:D0:B3:01:B1:D5:88:9E:06:39:D6:4F:91:97:E5
Certificate issuer: /CN=9198740ded2ed0b301b1d5889e0639d64f9197e5
Certificate serial: 01A1822BE8A681A0D8B5E10995FFE3231D6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZh0De0u0LMBsdWIngY51k-Rl-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/6a39a8-10a3-44ea-bf8d-b91e6ea906d9/1/kZh0De0u0LMBsdWIngY51k-Rl-U.mft
Manifest number: 3D
Signing time: Wed 28 Oct 2026 11:01:17 +0000
Manifest this update: Wed 28 Oct 2026 11:01:17 +0000
Manifest next update: Thu 29 Oct 2026 11:01:17 +0000
Files and hashes: 1: KpfVdOYi_L5CTxoNsCMeHYlQiAE.roa (hash: nOmWfQGfgslhciwVx27VS/SUVn0NOil8sEBYm9ZxdgE=)
2: kZh0De0u0LMBsdWIngY51k-Rl-U.crl (hash: QdS7yBj/PYH5QciPYAxucV+tVoWt0xwVm4qq7Adgxsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/6a39a8-10a3-44ea-bf8d-b91e6ea906d9/1/kZh0De0u0LMBsdWIngY51k-Rl-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/6a39a8-10a3-44ea-bf8d-b91e6ea906d9/1/kZh0De0u0LMBsdWIngY51k-Rl-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kZh0De0u0LMBsdWIngY51k-Rl-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:e8:a6:81:a0:d8:b5:e1:09:95:ff:e3:23:1d:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9198740ded2ed0b301b1d5889e0639d64f9197e5
Validity
Not Before: Oct 28 11:01:17 2026 GMT
Not After : Oct 29 11:01:17 2026 GMT
Subject: CN=89ff6e82dcc32d2baab4d887b52d01f3eb65af51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:58:bb:cd:e6:29:c9:46:f8:11:33:bd:1f:85:
2c:39:01:bd:97:1c:82:80:39:69:b6:e2:9e:7f:f3:
04:eb:97:55:b9:0f:15:b6:ca:9c:ed:43:7f:76:7b:
3d:f9:99:f7:ff:e8:01:9a:2b:12:88:c1:e0:4f:2b:
e7:c3:fa:a0:37:12:17:d9:83:02:a6:cc:82:b6:3c:
85:7d:6b:ba:06:a8:7a:ff:98:03:d9:4b:13:c7:22:
b1:89:9d:67:d9:1e:e6:ed:76:cb:4e:fd:b9:52:87:
f2:ca:41:9c:3a:20:a2:3a:b8:8f:43:2b:04:9d:28:
00:64:fc:f4:05:3a:ce:0f:32:e9:e9:1d:1d:9b:c3:
22:c6:34:55:02:74:e5:59:a8:d4:ba:ef:6f:11:c2:
2d:ce:f3:d0:c7:fe:ce:32:eb:b0:59:bd:e5:c3:58:
17:34:ae:a3:52:b9:65:d1:98:cc:9b:74:17:55:57:
b0:56:5b:5a:46:68:89:2b:57:4f:e0:0a:8b:c0:94:
44:26:8a:5a:4f:c0:8f:a3:af:5f:9f:cd:46:33:0a:
2e:89:aa:63:c8:57:90:a5:61:92:eb:f1:20:23:63:
1c:b4:1b:93:20:6f:52:5f:14:2f:c1:ed:3d:78:8b:
74:47:b3:c6:24:ab:06:b4:c1:63:21:c9:36:e9:96:
42:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FF:6E:82:DC:C3:2D:2B:AA:B4:D8:87:B5:2D:01:F3:EB:65:AF:51
X509v3 Authority Key Identifier:
keyid:91:98:74:0D:ED:2E:D0:B3:01:B1:D5:88:9E:06:39:D6:4F:91:97:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZh0De0u0LMBsdWIngY51k-Rl-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/6a39a8-10a3-44ea-bf8d-b91e6ea906d9/1/kZh0De0u0LMBsdWIngY51k-Rl-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/6a39a8-10a3-44ea-bf8d-b91e6ea906d9/1/kZh0De0u0LMBsdWIngY51k-Rl-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e8:f0:d1:86:05:bf:2f:7a:3f:20:1f:00:5b:58:19:73:0e:
fa:76:dc:a1:f9:a3:34:a9:35:18:05:5f:d2:37:c2:f2:4e:6f:
ec:ce:53:cc:7e:37:09:d2:dc:a2:78:67:18:d8:c3:20:c1:81:
04:ad:2d:bb:31:ea:54:dc:20:04:c9:88:4b:13:c6:9e:85:17:
62:90:97:59:58:02:4a:b7:37:9d:4b:92:a3:1a:7d:63:51:8e:
40:2d:f5:a1:4f:cd:2f:31:fe:be:66:bf:58:e0:69:50:74:cd:
18:6f:9f:07:ec:71:cf:76:3d:2f:b8:c6:88:89:90:9f:fb:61:
da:ec:09:26:c1:55:3f:ed:7c:70:a8:44:cc:3d:09:60:f9:6d:
83:da:0a:40:ad:26:05:11:c8:fb:65:6b:42:d6:8c:6f:58:e3:
45:53:78:8d:d8:f4:c9:90:da:06:87:ca:4e:e0:17:fb:05:4f:
45:23:89:8b:9b:80:ae:2c:ca:2e:81:ec:b2:db:bc:c7:59:bb:
23:11:72:3b:08:c5:8c:56:19:37:c1:22:48:42:7e:6a:37:99:
2f:af:de:79:69:65:13:91:25:c1:0c:d8:c1:15:14:51:ea:87:
fc:cc:41:3e:66:0f:62:fa:1c:0a:07:5a:d5:a2:8e:00:f9:9b:
20:48:fd:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:01:57 2026 by rpki-client