Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: NKuQI5UpBgJl+PtAJyrBI4XbPVGPCybqqxQapgGKyGY=
Subject key identifier: E8:08:3A:CA:32:E9:57:02:36:E1:19:48:93:DF:BA:72:E8:5B:81:33
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 01A003948945BCE1E9774A2701CB9968DFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 12F1
Signing time: Sat 15 Aug 2026 04:01:01 +0000
Manifest this update: Sat 15 Aug 2026 04:01:01 +0000
Manifest next update: Sun 16 Aug 2026 04:01:01 +0000
Files and hashes: 1: 3psKaSY7CT6URaeruLUFwZkMcnU.roa (hash: fj0+JCymjpW+3NEk9HmGETVM60SuUscKNMaXaBgYTFg=)
2: 9JGQPsaWzqRWIOApF5whvE4AxIc.roa (hash: 0ltom3fi/AGzQOkuUGF0tjXYR0L8QJ4XTtORcpTGq3c=)
3: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: x72BrpGgEQApZz+LOAe9XWTpilpoHovmUH0FEzHwOOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:94:89:45:bc:e1:e9:77:4a:27:01:cb:99:68:df:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Aug 15 04:01:01 2026 GMT
Not After : Aug 16 04:01:01 2026 GMT
Subject: CN=e8083aca32e9570236e1194893dfba72e85b8133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5a:df:0b:02:6e:9e:7d:ce:8f:8a:03:ea:36:
54:d6:d2:ab:40:3a:de:55:26:28:07:8f:3a:5c:a8:
b0:71:8f:5e:33:34:7f:2d:dd:e9:24:8c:f4:99:dd:
9a:f7:8c:af:8b:b9:51:e1:a7:18:f0:5e:c7:ff:c2:
45:78:72:fa:72:81:e8:45:55:72:5d:85:ba:72:0d:
e8:68:b1:c9:cb:be:c8:af:a4:fb:72:fc:cb:79:a5:
40:ba:42:ba:84:8a:57:01:9a:a1:26:10:55:0e:fe:
71:70:a8:fc:26:bb:70:dd:e2:8d:97:fe:10:fe:ad:
31:31:74:9a:49:aa:b3:ee:b4:af:c8:93:19:0f:29:
7a:28:07:9b:0a:06:41:c4:fe:15:45:43:64:d0:5a:
f4:f3:3b:8b:00:7d:1c:2a:1c:f2:37:b3:91:54:2e:
84:3b:4c:14:dc:ee:18:04:d6:eb:f5:6d:ac:17:79:
ff:ca:1d:09:67:e2:5f:94:d5:4b:70:3f:b9:0c:08:
25:2a:c4:ef:91:d3:bd:b7:12:f3:09:79:e3:4b:09:
6e:d2:90:d9:75:49:ad:9a:4b:00:0d:5b:c9:c9:77:
48:94:86:32:ad:61:48:2a:8b:e2:5f:e6:ef:30:cb:
de:77:38:66:ed:65:df:f0:67:79:44:05:ba:97:ce:
29:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:08:3A:CA:32:E9:57:02:36:E1:19:48:93:DF:BA:72:E8:5B:81:33
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d2:8d:88:0c:e5:e3:27:2f:fa:1d:df:4b:d9:16:69:9e:78:
67:67:fc:73:03:42:a7:25:b9:a7:af:7f:2d:7d:3c:92:26:72:
15:7a:d8:ca:4c:76:7a:00:9e:de:c1:77:bf:57:dc:86:d2:a2:
40:8c:09:f8:b3:f1:3f:7d:3c:22:b0:3b:99:90:d0:01:c9:19:
29:3b:89:11:91:65:5e:67:6b:78:47:0c:43:e2:50:11:6b:34:
06:e5:6e:d6:ba:9d:cf:37:41:f9:1c:3c:a7:db:d9:47:7e:1b:
5f:58:d8:7e:85:91:9c:3e:d4:c4:45:1d:77:47:9a:3b:2a:21:
23:b6:16:3d:26:11:2c:d9:52:03:b8:93:da:ce:28:fa:55:dd:
3b:4c:1f:d9:98:06:dc:f3:6e:03:7e:a2:ca:9c:37:fa:6e:d1:
5c:e5:93:ec:76:a6:7b:c0:5c:dc:b2:4a:43:90:e8:29:81:89:
06:3b:c3:ff:6f:9d:fa:e6:e8:4c:1b:39:ff:0c:d1:95:8d:1b:
93:37:08:f4:54:67:a1:ec:8a:e7:aa:40:75:6d:bd:13:c2:0f:
e5:81:69:36:f8:7b:ed:f7:b9:dd:e5:7c:c6:7c:d3:9b:96:bd:
85:44:3b:a2:18:70:3e:b4:ab:2a:55:1d:c9:c9:f3:ab:32:05:
ea:6e:3f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:13:52 2026 by rpki-client