Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: pmwgUa5I2gQvgAn/3E3rh8vLSlSdN6E+JqnkXVKjfZ4=
Subject key identifier: 31:F5:2B:9B:C3:FF:0A:A6:E7:FC:58:97:3C:4D:11:42:57:73:E1:1D
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 01A0897A5C1402948A1F489408E52CA370FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 163D
Signing time: Thu 10 Sep 2026 04:01:32 +0000
Manifest this update: Thu 10 Sep 2026 04:01:32 +0000
Manifest next update: Fri 11 Sep 2026 04:01:32 +0000
Files and hashes: 1: 0xBMzbimSDs_I2nvtM1Y5jK-78k.roa (hash: SgKHLhFkroj2Hq/iLApLxBA7Ln6Ya97UmYFoHMm8u7c=)
2: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: UYHi3Ij/mxK3bknwnfTDLb+2LKamDEXAiDD4ANltirk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:7a:5c:14:02:94:8a:1f:48:94:08:e5:2c:a3:70:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Sep 10 04:01:32 2026 GMT
Not After : Sep 11 04:01:32 2026 GMT
Subject: CN=31f52b9bc3ff0aa6e7fc58973c4d11425773e11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:9c:47:1c:65:1a:90:34:d0:ac:b2:b1:44:
99:76:67:99:94:bd:97:0b:da:bc:95:6e:1e:7c:bf:
12:07:a8:a2:f8:3f:1d:c9:ba:32:36:c3:52:82:cb:
8f:7a:38:15:02:3e:6b:4d:39:35:64:39:18:75:ac:
34:cb:66:08:d5:df:8b:08:c1:d9:1a:3d:fa:5d:8b:
52:04:2f:ce:d9:5f:4e:cb:33:de:bb:25:af:ab:44:
00:cd:1c:92:32:78:7a:7d:20:dc:03:34:a1:c2:15:
5a:7f:24:21:25:12:56:90:f1:e2:bf:3d:a8:b8:fd:
bb:13:bf:3b:10:fc:3a:e6:7c:b2:c9:26:6d:e5:85:
9f:31:5a:5a:9c:a9:ab:a2:fe:b8:0a:13:43:c3:b2:
c2:d2:0a:d9:76:37:df:a2:78:4b:35:e2:d7:e5:5f:
7b:46:8e:26:81:e8:8f:5e:6c:bd:b8:cc:42:dd:12:
ce:8f:c7:56:63:05:e7:d2:36:9a:3c:25:a9:15:97:
46:0b:ce:b4:03:3a:08:3b:fe:4c:c7:2f:54:77:b5:
20:63:e0:f8:83:b2:27:7a:e3:34:e2:47:73:51:02:
4e:db:58:90:d9:a8:ee:5d:cf:55:ab:3c:1b:8d:47:
4d:38:88:0c:70:8d:a2:e7:12:2e:64:04:35:82:36:
6c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:F5:2B:9B:C3:FF:0A:A6:E7:FC:58:97:3C:4D:11:42:57:73:E1:1D
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:cb:65:5a:e8:2c:97:b3:31:59:97:bb:6f:e5:21:4b:c6:a1:
67:27:87:fd:94:b4:91:ae:b0:95:19:40:44:2d:e7:b9:a4:f5:
2d:0f:44:22:61:8d:03:79:f0:f2:d2:48:bc:58:2e:05:77:43:
41:e6:40:35:18:21:9f:18:69:3e:79:7b:9a:3b:f7:52:94:ff:
a9:a7:27:a9:c3:e1:cb:05:bd:32:67:52:a4:be:1f:f9:9b:26:
b8:88:14:e0:82:85:8a:15:8f:ce:7e:f8:8e:c7:a9:1f:9f:be:
be:48:af:ff:70:e6:63:16:d5:c4:6a:b5:75:88:8f:fe:87:d6:
0e:93:01:a0:63:05:b4:99:5b:7b:82:6c:d4:fd:de:c1:3a:dd:
d6:94:09:b9:ca:d2:da:ba:b8:b9:85:2c:85:61:1c:cf:e1:4d:
9a:95:0e:6d:a4:1a:5b:fb:f8:a5:dc:fd:77:4b:b9:86:44:07:
33:fe:ff:61:99:fb:bd:74:ea:dc:cf:c9:85:15:d0:43:2a:92:
c0:b7:6d:05:7d:a2:98:93:7c:1b:8c:6f:40:37:2e:14:31:17:
93:64:b8:05:21:99:46:87:a6:50:11:b5:d7:66:18:2a:a3:09:
22:ae:4f:d3:8a:7b:e5:75:db:55:93:be:b0:55:ef:f9:b1:e9:
e2:7b:34:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:47:28 2026 by rpki-client