Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
File: kPJzpjxR6vP55a57n6r9spMTQN8.mft (raw, json)
Hash identifier: +zuhbIlFT/x8WcFuS4iPghYXom0osuLur/xccMngB7w=
Subject key identifier: EA:8D:25:41:63:D5:CE:D1:11:16:DF:EC:B8:3E:91:9F:A4:2A:BF:68
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial: 01A0BAD47ED66AD5DFA5151F05E67A31BC27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
Manifest number: 1A63
Signing time: Sat 19 Sep 2026 18:01:23 +0000
Manifest this update: Sat 19 Sep 2026 18:01:23 +0000
Manifest next update: Sun 20 Sep 2026 18:01:23 +0000
Files and hashes: 1: 2nuIt9bPWep-2UcGvqLkgY-wilc.roa (hash: Yp1t0MZeVuZGR3tdv1lGZRI1XtiJF6WvXUMNdE4/tt4=)
2: H1UfnsPmJquL-wAem-B7U2sSVbU.roa (hash: jJFynedk78xhXpOxYHZ7thKVc027uZMv2ZJ5fQeWm5w=)
3: kPJzpjxR6vP55a57n6r9spMTQN8.crl (hash: 2TvLHJNkLceomZIWCdkrtX4gFtu8ke8RA2Dvn7LBaTA=)
4: lMgoDA5bIRwWymuV894cK1NqlE4.roa (hash: 1MayWUj9g/XYEFJmVMWNXWfQS/ghagEhZ1TszpoNUJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 18:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ba:d4:7e:d6:6a:d5:df:a5:15:1f:05:e6:7a:31:bc:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Validity
Not Before: Sep 19 18:01:23 2026 GMT
Not After : Sep 20 18:01:23 2026 GMT
Subject: CN=ea8d254163d5ced11116dfecb83e919fa42abf68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:bd:e7:d0:ec:71:23:44:b2:55:04:34:93:
45:79:91:6e:b1:66:97:54:d7:46:3c:2f:5e:45:6c:
8b:76:4a:fa:b6:b8:9b:47:91:69:7a:2a:fe:b6:d4:
91:d4:af:d5:38:0b:7d:a7:23:65:b4:c5:65:d2:65:
db:89:dc:c0:a9:3b:67:42:ee:8d:43:d3:5f:6c:33:
f4:23:7b:c5:5e:dd:eb:c4:92:c7:28:bf:d0:fa:d8:
22:d4:14:7a:b8:15:a0:fe:65:d3:03:91:b6:d9:3a:
90:ba:e5:34:0d:f8:06:de:9d:c1:66:c4:02:97:30:
04:dc:ae:e5:58:2e:4d:05:a7:53:57:e0:8a:45:7c:
33:fb:2b:d4:a5:44:4c:f3:88:2a:83:c1:ca:66:48:
80:61:c3:2b:97:54:b6:b0:90:c9:8e:c5:2b:b6:48:
91:7c:32:c1:66:22:42:f2:94:57:d1:80:2a:35:91:
51:5e:d1:ba:20:bf:58:8e:22:88:c4:0a:64:a4:78:
09:3f:e1:4a:31:56:c1:d2:9e:ed:8d:cd:ca:53:1c:
65:08:aa:08:10:9c:09:76:b3:1e:7a:47:84:35:78:
0b:4b:84:a6:02:e0:6a:6c:7c:bd:d6:62:1f:ea:0d:
e6:6d:7c:0c:4e:4d:69:f6:76:bc:68:ca:7e:37:c2:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8D:25:41:63:D5:CE:D1:11:16:DF:EC:B8:3E:91:9F:A4:2A:BF:68
X509v3 Authority Key Identifier:
keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5f:32:f1:d2:1f:85:2a:8b:48:ab:cb:fe:50:d9:41:ba:e1:
07:a5:64:29:c4:fb:f0:12:64:b8:b9:b7:6b:21:b7:af:c0:67:
f1:c3:38:b5:77:f6:a6:07:7f:80:2f:a2:5f:bd:aa:95:f8:74:
c0:c2:1a:62:da:62:bd:bc:ea:23:dc:94:fa:fa:2c:c2:2a:76:
6c:3d:b2:20:7b:4b:5d:f8:14:b8:23:d3:b4:f7:68:50:db:12:
8e:39:ca:c8:5f:dc:62:30:46:39:f6:25:cd:d2:c2:61:52:92:
3a:33:0b:f9:76:2d:7c:0f:f2:0f:db:ed:32:c8:b8:b9:14:c0:
d5:a2:91:60:87:ab:d6:f3:1a:6c:e0:b3:9e:18:a6:f3:4f:52:
d9:23:06:70:15:ef:6d:3d:51:13:08:bb:44:4d:7e:1b:c9:f3:
34:8e:fb:9e:fc:7d:e7:53:8b:42:7c:52:6d:3b:35:78:68:0d:
14:b4:6e:3b:63:34:99:22:63:b7:65:29:a1:27:0b:c0:5e:1f:
92:d2:10:22:d5:09:23:08:9e:40:10:b0:24:b8:db:dc:a5:5e:
ea:32:fd:3b:00:05:8f:30:bd:c8:06:7f:a5:2a:cc:c9:1f:c5:
4b:ae:ff:ef:55:35:20:d7:84:20:5c:f5:3d:af:4f:da:06:ad:
1b:bb:5c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 02:35:24 2026 by rpki-client