Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
File: kfLh5DqmRNsVhnEYLy73foiWZg8.mft (raw, json)
Hash identifier: gh4IWo8tWyM7JQM3y5+Gs1K1+Fj5fx/MuvdOtGZWUA8=
Subject key identifier: AA:05:7F:58:58:6D:B1:EA:B8:B3:57:49:D7:6F:DD:88:E9:8A:85:2B
Authority key identifier: 91:F2:E1:E4:3A:A6:44:DB:15:86:71:18:2F:2E:F7:7E:88:96:66:0F
Certificate issuer: /CN=91f2e1e43aa644db158671182f2ef77e8896660f
Certificate serial: 01A11F404E894CB0CFA7244AB65133B8CF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
Manifest number: 010E
Signing time: Fri 09 Oct 2026 06:01:10 +0000
Manifest this update: Fri 09 Oct 2026 06:01:10 +0000
Manifest next update: Sat 10 Oct 2026 06:01:10 +0000
Files and hashes: 1: 0ZKhdRC1ISNyLJqs7qyYjd09MaE.roa (hash: sffu/a8bcElcI8BNy5um3eH5jCXlNb+/px2mPjs5pUw=)
2: kfLh5DqmRNsVhnEYLy73foiWZg8.crl (hash: fxlrQe346VXQS34/vWzSnm0XGeeWAG5A+jnrA74DvLU=)
3: tG4gTPfHdM_krBmnKLHGpg5R9c4.roa (hash: 7umB3yGBdGAwRb3JHQ8z/6Dgf6/LhI4qIuUqFDPArww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:40:4e:89:4c:b0:cf:a7:24:4a:b6:51:33:b8:cf:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f2e1e43aa644db158671182f2ef77e8896660f
Validity
Not Before: Oct 9 06:01:10 2026 GMT
Not After : Oct 10 06:01:10 2026 GMT
Subject: CN=aa057f58586db1eab8b35749d76fdd88e98a852b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:74:91:d6:63:a4:8b:bf:5c:0c:3d:11:3f:db:
27:c3:b6:4d:0b:16:1b:c1:f0:45:58:c7:79:34:42:
c1:e6:05:f0:53:d4:42:72:c4:9c:07:66:95:d9:6c:
09:29:97:27:38:ff:51:7b:be:00:64:f8:35:33:7b:
79:bb:72:ab:7b:05:0b:ff:68:44:53:cf:af:cd:1f:
bb:87:e9:93:ae:7c:cf:41:80:90:1e:eb:8a:fe:0f:
21:b0:b5:d1:01:3a:68:7f:1a:c9:12:f1:8a:6d:8d:
93:23:f0:a5:e0:f8:93:87:54:3f:42:e1:21:90:d7:
93:28:c5:d7:f5:f4:bf:87:23:7f:c2:4c:25:0f:f5:
3f:b7:63:1d:d3:d4:36:ce:82:cf:17:db:cf:3e:be:
b8:b8:11:1c:6f:50:27:9e:09:05:ed:f9:bf:3b:79:
4c:d4:c7:a7:c5:59:2e:e5:ef:e7:d4:49:72:95:79:
8d:4e:6f:0f:f8:33:8b:91:72:96:53:0d:bd:50:48:
18:a9:ce:d0:95:b0:c4:32:d2:b9:78:f1:bc:9c:f9:
2c:83:2d:8e:16:be:92:2b:73:fb:47:1e:bf:74:4c:
72:eb:c1:54:a9:cf:c7:be:c6:2d:84:91:c1:25:ca:
c7:9b:a9:3e:67:d7:f9:59:cb:7a:07:f7:fb:bc:06:
0f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:05:7F:58:58:6D:B1:EA:B8:B3:57:49:D7:6F:DD:88:E9:8A:85:2B
X509v3 Authority Key Identifier:
keyid:91:F2:E1:E4:3A:A6:44:DB:15:86:71:18:2F:2E:F7:7E:88:96:66:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:26:de:f6:a1:f7:21:c3:29:d2:90:ed:d7:d6:93:14:51:8a:
9e:43:73:ee:ce:9c:c8:96:1b:34:17:52:ac:3c:04:34:e3:37:
91:57:10:76:d9:a3:83:5f:ee:25:a5:71:20:29:ec:93:62:6f:
ba:d7:61:49:cd:83:22:9f:0b:e0:ad:bc:93:bc:d2:d9:4e:d0:
74:a4:c5:2a:83:00:3d:92:ec:d8:70:1b:88:f6:32:8f:7f:8b:
9f:44:90:dd:b5:df:3a:2b:59:ec:a7:72:70:35:f1:c0:8a:33:
2d:51:40:3a:5e:07:e0:a4:77:fc:72:55:98:5f:35:eb:42:d1:
cb:33:10:bc:17:ed:00:76:b0:84:4d:e3:8f:b7:d8:8d:4d:7e:
bc:07:a0:58:6b:e5:9f:c5:db:52:d4:3f:c4:2d:1c:96:e0:9c:
11:2e:55:c6:d5:93:48:84:b0:01:69:3c:13:17:2d:f0:df:ed:
2c:f6:1c:2b:4f:ee:5b:2f:05:6d:8c:80:68:0f:7b:e2:2b:a6:
5c:d7:6f:a0:9b:8e:17:df:af:66:19:68:9f:39:6d:f6:c4:e0:
86:f7:16:74:39:23:a3:e1:ff:d4:95:ba:75:13:4d:0e:ca:32:
00:4c:e1:e2:16:da:3a:6b:d6:6c:1f:fd:73:45:fc:aa:11:98:
d5:11:ed:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 12:22:53 2026 by rpki-client