Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
File: Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft (raw, json)
Hash identifier: zGRad1AwgXV+rA+zPpVO86nmpx7oC8eJalx1yr1QjiU=
Subject key identifier: 86:B8:EA:EE:4E:30:74:C1:B0:06:60:E4:44:D4:1F:25:25:C3:4A:62
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 01A083416227B8A862F98B64B1EBFC0D6BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
Manifest number: 1707
Signing time: Tue 08 Sep 2026 23:01:35 +0000
Manifest this update: Tue 08 Sep 2026 23:01:35 +0000
Manifest next update: Wed 09 Sep 2026 23:01:35 +0000
Files and hashes: 1: Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl (hash: RwIyviZfwLTcYv0mVuD8wbzeJqsFvlMrKWL0Y9EIizY=)
2: N0slNiBHstffC-gao1MW1YQJ8PQ.roa (hash: JaXa0++mAnzKhR6JZOxDsmM/XEgflmuCztEL8NWFM7Y=)
3: OGAXzzyKvK93UOJ2eRElJ2xX8l0.roa (hash: 81TYUiFkSE2RjmGLoS2LgzUIcK9S/4W9PHKeS9kyvh0=)
4: VxV8AU7symdxNF6mG17H8p1t8nc.roa (hash: dAlDZL9GvnaGaTbs3lmG9QucimTLtcBeWZc5pCpOTpk=)
5: WFGsTkyDEkw_wabTopaC390evNc.roa (hash: lJG4HZa8hX3A9smSi2LkkvTTIiCw5MIKUs7X4ZXob7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:83:41:62:27:b8:a8:62:f9:8b:64:b1:eb:fc:0d:6b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Sep 8 23:01:35 2026 GMT
Not After : Sep 9 23:01:35 2026 GMT
Subject: CN=86b8eaee4e3074c1b00660e444d41f2525c34a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:07:ca:69:b6:fc:7a:f5:84:fe:21:54:53:a3:
71:f8:47:9a:5b:aa:1b:76:67:3c:d0:d2:1d:21:e5:
40:58:87:42:2f:03:4a:52:b1:14:d8:23:7e:e2:e4:
79:5e:60:73:32:b4:75:75:35:2a:07:6e:1b:aa:28:
ac:53:07:da:2d:62:15:cb:16:bd:56:b9:16:16:a2:
4f:f9:c9:18:95:c6:c6:f0:93:39:e1:de:37:ad:08:
6a:4e:06:e0:ed:f5:13:8c:a0:44:e9:05:74:37:b2:
84:a5:d0:a6:37:eb:43:43:c0:7e:db:20:2d:6d:fe:
ad:70:8d:0e:33:e8:6e:88:58:eb:ab:f0:e1:94:c4:
4c:14:39:4e:44:ed:71:fb:a6:c7:36:1e:df:99:29:
83:7e:fb:21:d0:f8:f6:5c:e7:c9:35:21:78:a0:f0:
e8:87:f1:f0:48:2c:bd:0c:1f:6e:d9:ff:8e:8d:9d:
37:bb:47:1a:8c:a9:53:5c:92:94:e7:b3:8e:eb:b8:
71:cd:bf:4e:fb:af:d3:42:d8:45:fd:ab:fa:da:b4:
e7:e5:57:a0:5c:2a:74:e9:26:0a:ac:97:91:55:4f:
32:a3:55:cc:d2:eb:3a:16:ac:d1:cd:ec:54:31:66:
4c:b4:1d:83:15:9f:6e:a7:45:bc:87:ef:d8:20:dc:
d2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B8:EA:EE:4E:30:74:C1:B0:06:60:E4:44:D4:1F:25:25:C3:4A:62
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:fb:29:62:67:f5:d4:f3:52:75:25:d1:dd:7d:fc:9a:62:75:
7b:c0:ef:b9:61:36:0e:0a:43:cb:b8:81:3e:64:a4:22:44:06:
fb:b3:b1:26:91:4a:05:1d:81:c4:87:77:5b:0d:c6:2f:20:b2:
4b:b7:53:52:b3:69:fd:21:6d:ad:3e:5a:24:84:60:41:72:ff:
ff:85:47:15:e4:97:61:45:ac:ac:6e:9d:d2:cd:fb:31:8d:5e:
c5:d4:99:c4:d1:48:50:01:f8:8d:0b:25:34:72:d7:b8:e8:6b:
21:14:46:87:70:c9:5d:25:13:bc:c2:a7:a1:21:1c:c1:ed:d8:
0a:65:b4:a9:f8:ea:7a:4f:a1:78:67:de:0c:16:d7:e5:28:75:
5a:88:6b:1c:65:6a:e6:46:b7:04:ca:90:69:9a:d7:f3:31:a4:
5c:50:03:6c:e3:b1:bf:d3:db:3b:8f:33:ab:e8:e9:79:c9:fb:
f0:d2:ad:4a:a1:6e:1a:3e:84:9d:e7:89:d6:de:34:dc:e1:21:
c0:b6:b1:82:65:e1:b3:2a:54:e0:d3:3d:d1:33:5d:e3:2b:10:
e2:93:66:48:9a:0c:06:5f:06:26:3a:f0:50:5f:ef:02:68:f6:
72:43:94:a8:6b:f4:5a:8b:4d:a5:dc:bb:0b:19:81:2f:2e:46:
9d:71:87:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 02:11:21 2026 by rpki-client