Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft
File: kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft (raw, json)
Hash identifier: VhuBem2AOOf9YBw882A9lMGAHxRgJdnHGAtCAmQV5Mw=
Subject key identifier: 8A:1C:0F:53:6F:45:9E:4D:7C:20:C8:9D:CF:F3:CF:A3:09:1D:4D:AE
Authority key identifier: 91:EC:C5:84:07:DC:26:D0:B8:09:DD:DB:4C:67:D6:75:5D:FF:86:FD
Certificate issuer: /CN=91ecc58407dc26d0b809dddb4c67d6755dff86fd
Certificate serial: 01A1517672977EC7C6A4607BE562B7163227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kezFhAfcJtC4Cd3bTGfWdV3_hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft
Manifest number: 0128
Signing time: Mon 19 Oct 2026 00:01:19 +0000
Manifest this update: Mon 19 Oct 2026 00:01:19 +0000
Manifest next update: Tue 20 Oct 2026 00:01:19 +0000
Files and hashes: 1: JLLfHMatuxcdEQiT0UQSyxEk5Nw.roa (hash: qBCZAB7xvXxou+T2GdjhZxyRoHv6x5IT+u6DzlaMiOg=)
2: cDmtSrPi3Xfa9GQ3-l6u7-BE248.roa (hash: 0shjjAec7Cb9aPFwygq8U/0Lwh0QCfxBtCpb+tdZIdk=)
3: kezFhAfcJtC4Cd3bTGfWdV3_hv0.crl (hash: JjT/sZUm+GOh7CoStMOfQ7koKZRJpSaXEam9KQ3RSLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kezFhAfcJtC4Cd3bTGfWdV3_hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:76:72:97:7e:c7:c6:a4:60:7b:e5:62:b7:16:32:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ecc58407dc26d0b809dddb4c67d6755dff86fd
Validity
Not Before: Oct 19 00:01:19 2026 GMT
Not After : Oct 20 00:01:19 2026 GMT
Subject: CN=8a1c0f536f459e4d7c20c89dcff3cfa3091d4dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8c:b8:7c:21:d4:72:30:f3:c4:ec:f7:6d:50:
bd:fb:8c:66:9d:d5:11:d9:48:73:04:23:b9:e4:08:
0f:2b:23:bd:6f:69:5c:4a:17:c6:3e:eb:4f:33:a5:
22:a0:8d:ae:df:ac:51:ae:f3:45:41:69:bb:e1:85:
cd:d5:a2:f4:a1:a3:12:78:d6:f5:95:71:66:cd:66:
24:de:a0:4a:05:2c:df:68:db:45:ab:68:a1:81:c9:
0b:e7:27:52:1a:d8:88:1e:b1:0b:58:e5:08:69:bf:
d2:51:14:dd:88:32:81:0e:58:9f:c9:70:62:47:9c:
7d:a0:a5:50:72:a4:a0:d7:a0:e1:48:4c:91:f7:76:
96:fb:57:3b:01:01:6e:9c:be:96:58:0e:4a:22:a7:
e9:44:0b:94:cb:a5:cf:b6:74:f8:92:c3:6f:62:8f:
a1:80:64:74:67:f1:33:81:a6:89:ce:73:24:9e:65:
bb:b3:b7:db:37:c9:b2:2c:d3:83:fa:e6:70:48:1f:
da:56:cc:8a:62:28:20:4c:e5:e0:d7:12:63:cb:cc:
43:ef:39:55:53:14:ed:90:30:91:dd:f0:53:f4:39:
38:1c:68:7b:94:4d:71:81:cc:b8:3f:f3:ec:c8:03:
54:c5:5b:ae:94:a8:d1:61:3a:73:c7:1a:3c:f4:20:
c3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1C:0F:53:6F:45:9E:4D:7C:20:C8:9D:CF:F3:CF:A3:09:1D:4D:AE
X509v3 Authority Key Identifier:
keyid:91:EC:C5:84:07:DC:26:D0:B8:09:DD:DB:4C:67:D6:75:5D:FF:86:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kezFhAfcJtC4Cd3bTGfWdV3_hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:32:89:d3:66:37:15:11:59:0a:8f:88:29:86:a9:42:93:76:
18:d2:7c:16:ac:00:fd:2a:7d:a0:02:60:d5:5e:a6:77:b1:4d:
92:cb:32:15:7a:19:28:d1:64:ff:56:b5:b0:37:d3:32:a3:3f:
0c:e1:1c:b6:86:57:8c:19:e8:73:2e:be:9b:36:3e:24:a1:b9:
a7:f3:fb:f5:95:e8:90:cc:ee:0b:72:ff:ff:7d:28:d5:58:2a:
e6:4f:ea:80:5d:23:fd:f6:3a:41:98:27:32:28:f7:cc:72:bc:
7d:bc:e8:93:64:37:50:cb:42:bb:3f:4c:2f:71:87:8d:c0:dc:
8b:bf:13:68:4a:89:09:30:4e:60:6f:4f:6b:a2:28:7e:25:ab:
38:4b:28:e2:ec:3f:a4:c9:08:b0:07:d2:76:d6:4a:1a:cd:85:
95:66:66:9e:34:b9:36:6b:86:bd:a3:fe:35:c6:9d:52:fc:61:
af:0a:c8:98:70:e0:f5:3f:ec:df:9d:a0:a3:f6:7e:57:c6:4e:
f9:c5:4c:6e:f4:e2:67:23:a1:15:b0:4c:f2:f8:e4:92:fe:1c:
a3:ed:5d:3e:92:e6:ba:6b:a7:ea:84:f6:86:8b:12:44:5f:a0:
16:60:4f:fe:85:1a:9b:92:2b:89:1d:00:d2:27:26:bb:ec:b6:
2d:5f:54:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:12:36 2026 by rpki-client