Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: SZ9ZMvkMeEHZcNY6OWMrOFg54SxML5wMYRXrQhsT9Ps=
Subject key identifier: 62:24:7A:00:6E:74:FE:F0:E4:3B:B1:A8:3F:D3:75:20:96:B1:0D:E2
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 01A17703273CF0A3426FC367FC7165410624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 1AC5
Signing time: Mon 26 Oct 2026 07:00:57 +0000
Manifest this update: Mon 26 Oct 2026 07:00:57 +0000
Manifest next update: Tue 27 Oct 2026 07:00:57 +0000
Files and hashes: 1: duZd3xX6ldZFnJAWeKOY3aU-YWA.roa (hash: zrGRAnADEy4+RjdotY9/kdUuG4P+5ZGMBez8xpARCts=)
2: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: SKu8G72CRdUgLFY5KfGBcm19SXNURdFpg1CcVVY6p50=)
3: tB6SdtPeaNHkXKdCFOrT0cZRLQo.asa (hash: hEt0QePrXimypD2t1C7kRdRaY7tLoSp85y3ztSay7R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:03:27:3c:f0:a3:42:6f:c3:67:fc:71:65:41:06:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Oct 26 07:00:57 2026 GMT
Not After : Oct 27 07:00:57 2026 GMT
Subject: CN=62247a006e74fef0e43bb1a83fd3752096b10de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:a1:2a:b2:31:6e:f4:57:88:57:cf:ab:0d:
91:23:5f:71:e9:2e:d3:54:ee:6c:52:fa:c3:67:9e:
1c:0a:e1:4f:f6:6f:d3:de:32:79:0b:1d:b8:40:8a:
b3:11:40:96:9e:13:b6:62:c2:0d:17:be:97:fa:de:
da:34:d6:3a:7f:b6:3f:c6:0e:ef:62:4d:85:ed:1f:
ab:d9:5e:4e:0e:b7:8a:cc:17:69:53:4d:55:af:e9:
1b:89:b2:96:5f:19:a5:44:1f:fd:f2:bb:fe:3b:93:
96:95:4c:ea:e1:5e:b7:a8:0f:f1:df:c2:9a:a5:7e:
09:93:88:8c:06:78:a7:70:be:93:f2:f4:fc:0f:ad:
56:53:1a:9a:06:f6:f4:16:21:16:fa:9a:15:ff:60:
9c:b6:fb:39:a1:f9:9a:9f:11:b3:b2:04:04:01:c2:
63:f6:56:15:3c:1b:81:54:9e:44:44:4e:f9:0c:3c:
bf:8b:e5:a3:d2:ae:55:89:e8:cd:e5:9a:16:fd:d6:
4a:3a:8a:e0:a0:27:91:2c:64:c1:c5:21:34:d0:ed:
9e:11:8a:63:98:fc:b6:18:34:d8:b7:62:ae:14:af:
dd:b6:9b:6d:96:5d:ef:04:fc:55:3b:b3:e9:e2:57:
ba:1a:7a:8b:07:82:e3:73:1c:8e:fb:5c:dd:c4:90:
e8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:24:7A:00:6E:74:FE:F0:E4:3B:B1:A8:3F:D3:75:20:96:B1:0D:E2
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:30:47:d6:a8:96:f6:62:f9:d5:b7:f3:ec:f5:06:16:33:00:
3a:f2:2d:99:e6:c2:7c:a2:b2:26:f3:be:d7:be:69:e7:46:54:
b5:ef:dd:5e:45:72:0a:9c:e1:08:64:31:22:50:73:de:2d:78:
26:c4:6e:d1:86:8c:d9:b8:08:86:04:8f:7b:cc:87:26:c3:d3:
18:08:d9:0a:57:a8:72:ba:3e:29:9e:aa:1f:0a:40:b7:bd:eb:
96:8e:ed:17:67:a6:97:cb:8b:ce:2f:84:9e:02:b8:7e:74:5c:
fd:d2:71:81:df:da:34:18:7d:c0:7f:cb:bb:c6:a9:86:d5:d9:
42:51:34:e5:97:6d:4c:e9:18:4d:77:aa:ec:b5:87:66:91:3c:
69:5d:2e:1b:67:50:ef:f1:4d:05:ce:b9:d6:d3:8b:8c:ab:1e:
22:1c:c9:0d:5c:e3:f5:fd:8a:6d:26:b6:b9:80:83:97:a4:cd:
a1:57:70:87:57:5d:5c:fa:34:33:5d:70:57:59:15:37:26:33:
0b:a0:a0:93:5b:41:e5:bf:49:df:9c:a1:b8:b8:43:15:88:36:
02:dd:cd:55:24:a2:b6:8e:0d:f5:40:be:2b:7e:22:87:27:5b:
d4:8f:fc:ee:cb:74:df:cf:37:e6:d8:fb:32:67:c0:f0:89:02:
1a:f8:18:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:20:56 2026 by rpki-client