Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
File: kmyYtRBh80DM5OC0zjYc40q8L84.mft (raw, json)
Hash identifier: M8hmSJpWPzzlgDSNBcSkbDQSCgktcTeeoorADMdOqCE=
Subject key identifier: 1D:BE:9B:78:95:97:ED:AB:F3:12:D6:F8:01:2E:34:B7:A9:DF:25:8D
Authority key identifier: 92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
Certificate issuer: /CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Certificate serial: 01A09245D8CCE897DFB94707D6DC7E3DB74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
Manifest number: 0A98
Signing time: Fri 11 Sep 2026 21:00:46 +0000
Manifest this update: Fri 11 Sep 2026 21:00:46 +0000
Manifest next update: Sat 12 Sep 2026 21:00:46 +0000
Files and hashes: 1: MXA3c8QX3g7YwiQOnrLTeGWh5fs.roa (hash: E7jF1me4KBNOx1U7XGJgq5UdFci6SFszrBrpba8pjPc=)
2: kmyYtRBh80DM5OC0zjYc40q8L84.crl (hash: 2y4ozIlzXyBono1KkX6xmpxx4uItKxgPv0RAbfESEMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:92:45:d8:cc:e8:97:df:b9:47:07:d6:dc:7e:3d:b7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Validity
Not Before: Sep 11 21:00:46 2026 GMT
Not After : Sep 12 21:00:46 2026 GMT
Subject: CN=1dbe9b789597edabf312d6f8012e34b7a9df258d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:ca:76:ad:44:34:a0:48:a4:05:41:a0:c7:
21:ed:b0:f3:d3:b3:55:ca:1c:c7:a2:19:ae:51:d4:
31:87:01:25:8d:cf:57:f5:d3:04:30:cf:d5:e0:02:
54:80:d5:b9:68:ff:e3:66:21:45:48:45:85:89:e6:
72:e8:06:8e:ed:e7:1d:c2:38:81:d9:62:a9:96:a3:
07:e8:59:56:3e:10:97:02:df:45:58:29:7e:eb:af:
7c:18:12:5c:d6:e1:5e:8a:d8:0f:dd:f7:13:07:33:
50:f0:7f:98:64:83:a4:4d:1c:c8:5a:5b:fc:b4:be:
6c:05:61:8e:5d:e3:3f:a9:14:f3:a4:1b:f3:28:39:
3b:b2:17:6e:c9:71:13:f7:2e:8c:d9:72:ad:47:4a:
e3:e7:79:30:27:9e:6e:64:78:ca:eb:50:e7:9c:ee:
fa:69:01:4f:75:04:9f:7f:88:82:5b:d1:70:4f:6a:
98:19:f8:8c:49:a2:c1:c5:64:2d:17:4a:44:0d:fd:
f7:59:c6:7a:a6:78:e3:c9:56:5e:79:4e:98:3d:18:
ff:0b:ea:67:93:86:25:60:5c:14:54:60:ee:c6:97:
6c:df:d9:03:ce:fa:40:33:4b:ad:d0:d8:90:3f:ad:
50:fd:4b:c3:1c:97:02:05:48:fb:5d:fc:65:11:b3:
81:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:BE:9B:78:95:97:ED:AB:F3:12:D6:F8:01:2E:34:B7:A9:DF:25:8D
X509v3 Authority Key Identifier:
keyid:92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:4e:3c:05:35:2c:d1:86:d8:5b:fb:aa:48:21:51:f1:4c:a0:
dd:45:e0:8e:94:9f:30:53:19:0b:42:13:41:f2:74:69:d3:95:
ef:e1:83:9f:29:af:ee:0d:56:eb:91:1f:25:cd:c1:fa:38:5d:
e3:ef:c0:c7:ed:c4:fa:b3:3c:d6:9f:5c:bb:c8:35:52:53:64:
65:3e:e7:87:34:6f:8f:71:03:6c:85:48:f6:ef:ef:b2:7a:36:
f8:4a:49:f6:f3:1f:e4:fd:f2:10:1a:97:22:23:8e:d2:41:ab:
bd:f1:3a:d9:c9:25:28:b9:6e:cf:d4:23:0d:10:d6:84:5e:f8:
f5:27:45:2b:3b:c3:11:f7:5f:5c:d8:72:fe:ec:a5:f6:ea:fa:
03:99:1f:95:3d:40:cd:2d:4e:84:9e:c8:27:cf:03:09:e0:d2:
53:ef:ff:14:3e:af:d4:52:67:02:bb:89:40:ef:86:c5:9d:3e:
ab:c4:86:dd:39:67:4e:f8:67:c0:5f:69:9f:a3:9a:d3:9f:45:
50:c9:14:00:08:50:d7:c5:16:7e:67:65:19:54:9f:a8:61:68:
d0:62:cb:35:82:10:c9:67:d5:aa:49:5e:98:ec:5f:dc:ae:43:
6b:af:fa:44:39:d2:42:01:f5:12:9e:99:80:79:ae:74:0a:c3:
bc:2e:cd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 00:02:56 2026 by rpki-client