Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: X0f9E2VFOxcU89dfL9+39uSRLVhmO75dz1wgStf4gMU=
Subject key identifier: A2:07:26:4D:58:8C:69:D9:8F:8F:A3:2B:E2:AB:92:44:D6:26:1F:43
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 01A149F39C1AADF6500BFA77F67270B56108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 139A
Signing time: Sat 17 Oct 2026 13:01:04 +0000
Manifest this update: Sat 17 Oct 2026 13:01:04 +0000
Manifest next update: Sun 18 Oct 2026 13:01:04 +0000
Files and hashes: 1: 3psKaSY7CT6URaeruLUFwZkMcnU.roa (hash: fj0+JCymjpW+3NEk9HmGETVM60SuUscKNMaXaBgYTFg=)
2: 9JGQPsaWzqRWIOApF5whvE4AxIc.roa (hash: 0ltom3fi/AGzQOkuUGF0tjXYR0L8QJ4XTtORcpTGq3c=)
3: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: pWDZqQtUFjxyP4cxuSmMZNJPqmP3+GqE2+g9HKTdRqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:f3:9c:1a:ad:f6:50:0b:fa:77:f6:72:70:b5:61:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Oct 17 13:01:04 2026 GMT
Not After : Oct 18 13:01:04 2026 GMT
Subject: CN=a207264d588c69d98f8fa32be2ab9244d6261f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:37:f7:8a:eb:30:5b:6e:45:f0:be:4c:46:80:
0b:dd:81:43:80:b6:83:b7:88:3e:12:ad:4c:f9:01:
67:f0:d1:71:6c:13:4b:50:55:ac:14:a2:2a:82:be:
25:4d:70:7b:5b:18:7c:58:06:a6:a8:10:b1:c8:3d:
53:a1:c6:f7:a2:5f:3a:e5:13:fd:6b:7a:cc:51:c5:
23:53:fe:b2:18:d7:72:db:07:4f:e3:34:4d:55:5a:
2c:4e:0f:01:f2:77:5a:65:d2:63:10:54:72:2b:88:
84:24:38:3b:94:0c:1d:63:54:11:cc:01:06:5c:f0:
e2:32:d7:8e:c5:31:2a:5d:5f:55:f8:f2:f3:38:53:
fe:f3:52:db:c2:6e:9f:e7:8d:e5:a3:86:73:1e:34:
b1:63:23:17:74:0f:57:46:be:a0:8f:30:e3:1c:48:
53:ed:27:32:76:ec:ab:9f:04:de:0b:3b:59:55:5c:
c1:a7:7e:44:97:86:55:59:05:3b:a9:18:45:8d:c4:
b9:a7:04:74:df:1e:42:3e:33:b1:33:20:f1:1c:26:
15:2d:17:f5:44:7d:21:b1:f6:33:a1:32:65:8b:58:
9b:98:b6:9f:55:c7:c3:9e:39:e1:b5:bb:6e:4c:ec:
7d:67:f5:eb:cf:bf:6d:c2:40:af:40:a4:77:7f:38:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:07:26:4D:58:8C:69:D9:8F:8F:A3:2B:E2:AB:92:44:D6:26:1F:43
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b4:88:2e:2b:03:73:b0:0a:3c:89:80:ff:03:7c:59:85:55:
e1:b2:65:38:b4:51:3e:fe:3c:23:d2:2f:a5:5b:dc:d3:b8:16:
dd:06:f4:e4:2d:cc:6c:cb:1d:e6:ef:b0:a4:98:2d:72:4e:91:
7b:4d:75:95:51:a7:b4:dd:e0:cc:9c:74:74:6a:52:b7:57:5d:
09:38:4b:08:3f:02:6e:7c:6a:f6:ed:05:9a:cf:04:e6:6e:7e:
31:e2:2d:53:64:f2:fa:89:db:ab:49:a4:e4:23:9e:11:3a:27:
4c:51:a7:00:5b:94:f5:e2:a5:c0:13:9c:56:c4:59:ee:be:e5:
7d:ff:43:3a:98:7c:b4:bb:55:71:38:5e:21:99:44:a5:50:42:
8f:03:54:2e:eb:8b:a1:35:0e:a2:f4:07:58:f4:d5:c9:37:a6:
c5:11:b3:e6:2c:05:20:c5:b3:bf:c1:31:dd:1f:31:d0:b3:cf:
59:3c:18:18:98:ad:76:e2:5e:7a:2d:d1:48:2a:63:5d:db:ae:
43:ea:b6:38:4f:cc:89:56:22:ab:c4:86:3a:5d:a6:37:4a:eb:
84:d4:30:4e:b1:02:8e:31:2b:37:30:15:ec:a4:1c:e8:2f:88:
bc:dd:ae:e5:41:47:ad:6b:a3:8d:68:f4:6a:f8:dd:65:50:a5:
bf:1e:d9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:28:58 2026 by rpki-client