Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: MwH/B0d5vChzhE6d9057I+sXUtJJQxlVjk8jWyhSffE=
Subject key identifier: CB:59:79:26:55:DE:40:9A:F7:8B:B0:70:52:CD:0F:45:E3:E1:F5:D2
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 01A17739DC68091F07967DCEB9BBFD09C7FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 1313
Signing time: Mon 26 Oct 2026 08:00:42 +0000
Manifest this update: Mon 26 Oct 2026 08:00:42 +0000
Manifest next update: Tue 27 Oct 2026 08:00:42 +0000
Files and hashes: 1: LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa (hash: 5btPQpV3QRoECaB/uLJs3VZKrBAPWks8ioyfHTWrUsc=)
2: jDCERCzkhdhrug4frNl3uzi2ve4.roa (hash: bzlZu7qYns9heIilVJxGkJDoL0/9tWjc+pGecsMq6Ws=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: rRVjDg5mZke+aHg0j/P20ZMY3jXB8g2iBh0p3mLeUCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:39:dc:68:09:1f:07:96:7d:ce:b9:bb:fd:09:c7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Oct 26 08:00:42 2026 GMT
Not After : Oct 27 08:00:42 2026 GMT
Subject: CN=cb59792655de409af78bb07052cd0f45e3e1f5d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4d:35:9e:ee:51:08:4a:c5:54:80:1b:c0:09:
40:80:e8:65:c3:41:63:c4:50:01:e2:d9:b1:94:3c:
f0:38:69:a6:67:8d:2b:ba:08:57:8c:92:d0:95:ba:
f3:96:50:0f:ad:25:92:3a:ed:0c:24:db:51:f2:54:
c2:d2:c2:58:db:99:52:64:b5:46:5e:95:35:e5:77:
06:51:ea:e8:02:72:4d:10:f2:54:62:40:d9:0b:4a:
c9:f4:86:a7:1b:03:a9:31:7d:c5:26:09:6b:87:2b:
30:09:24:53:08:c2:36:d4:65:7b:a0:a8:4a:ed:6d:
e0:d3:c0:e5:0c:f3:26:62:2d:c4:94:7d:59:d0:ad:
9d:3d:32:93:a3:8b:ef:2c:03:fb:cf:ba:86:2e:41:
a5:a3:98:74:0d:14:38:f2:c3:2d:03:8d:43:c1:8e:
fa:46:17:81:8b:db:42:44:d4:4b:81:bb:65:0e:b2:
7c:f3:c1:91:40:0b:f9:94:92:61:81:e2:91:9b:e4:
e3:ee:14:65:64:e4:76:35:64:b5:ab:7c:3f:46:d9:
5a:45:f1:07:3f:9e:7b:41:e9:56:d5:82:12:09:67:
1a:4c:1b:a0:98:11:cc:55:b8:2e:5c:1b:13:ca:f7:
aa:da:7c:28:1f:5f:24:f8:e0:17:b1:37:2f:b6:42:
50:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:59:79:26:55:DE:40:9A:F7:8B:B0:70:52:CD:0F:45:E3:E1:F5:D2
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:23:85:c9:42:43:3b:8c:5b:4c:32:31:c5:36:88:75:56:4a:
3d:e9:33:1d:c5:8f:d8:8d:be:e0:94:b1:c7:df:a2:24:19:e9:
e8:34:76:b8:a0:07:0b:4c:45:f1:9e:f1:d2:ca:9c:76:11:57:
09:63:ad:38:49:c9:6e:21:1c:90:68:ec:9f:9b:11:78:b1:f6:
a7:f3:e3:24:a9:f6:db:57:bd:e0:89:b7:c7:47:7c:fd:4b:f5:
aa:7d:e3:03:cc:f2:27:23:cc:e8:e2:8d:e9:1e:d6:dd:d1:ba:
d9:c9:db:f5:e0:66:14:b0:59:96:a0:5e:11:2d:e6:dd:d0:fd:
aa:42:03:70:f8:2c:00:13:4d:57:c6:a0:b9:b8:5a:a3:ca:89:
13:3a:5a:d7:70:f0:44:bb:32:80:c5:95:d1:fd:14:2a:4c:18:
07:bc:eb:a6:76:1f:b8:d2:d7:4d:24:b9:eb:8c:9f:c0:fb:a1:
1a:e3:e1:5b:18:1d:3b:4a:9e:1d:5f:ce:73:f0:5a:27:51:88:
2d:21:2d:7a:16:26:93:5a:0f:ef:eb:ed:ba:16:44:c5:f8:32:
f3:02:07:67:9c:fe:37:29:eb:b5:45:6c:8d:3c:55:28:54:d7:
7f:c8:10:76:bb:2d:e6:5d:19:35:4c:fc:40:82:b3:33:c3:b0:
24:51:af:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:53:16 2026 by rpki-client