Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
File: kd3H2eAtRMa_jGNcHQcV9uicEBI.mft (raw, json)
Hash identifier: YE6UhmDgmhSZ6a3gUQ376d9GDBCfVSwco3Nk439tI+s=
Subject key identifier: 96:64:8A:54:B5:E1:B0:69:85:C2:81:76:FE:E0:17:DD:46:48:AB:C4
Authority key identifier: 91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
Certificate issuer: /CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Certificate serial: 01A0C21F960C3FAEF67848BA2C70895EDA50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
Manifest number: 0421
Signing time: Mon 21 Sep 2026 04:00:44 +0000
Manifest this update: Mon 21 Sep 2026 04:00:44 +0000
Manifest next update: Tue 22 Sep 2026 04:00:44 +0000
Files and hashes: 1: AFumXuOXKbFW_VkGOp5C3uN9vdM.roa (hash: aE6C4dtIcbKwEv5eXKa14vptksNPYJV0xnZklbhvP6E=)
2: Y4PPIpkii_K_B3es2z2wg-o0K4g.asa (hash: E0zhRt7/fWPWPotvek7QQ9QAuuv2LHcZSkRznjzV2UQ=)
3: kd3H2eAtRMa_jGNcHQcV9uicEBI.crl (hash: 54ufbtdClF3OT3WByeSiDreB3JR+NUaoNbwpmOQMnXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:1f:96:0c:3f:ae:f6:78:48:ba:2c:70:89:5e:da:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ddc7d9e02d44c6bf8c635c1d0715f6e89c1012
Validity
Not Before: Sep 21 04:00:44 2026 GMT
Not After : Sep 22 04:00:44 2026 GMT
Subject: CN=96648a54b5e1b06985c28176fee017dd4648abc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:42:18:2e:0d:3d:38:20:e2:b5:0f:66:55:9a:
56:0f:c9:7e:2d:a9:31:aa:72:19:ae:28:e6:03:3d:
42:75:af:51:76:f9:90:c7:ec:41:5f:ca:92:8a:a7:
c6:a1:65:ef:33:29:6d:f9:a6:0a:d6:ec:1c:e8:0f:
49:39:76:27:27:80:d5:a2:51:23:10:79:d9:26:40:
cc:6f:d1:d2:44:f5:97:f6:49:c4:77:58:96:1c:93:
ee:ad:8e:43:b8:dc:70:b5:a4:40:02:ba:61:d8:e2:
bb:48:6d:e8:a8:42:37:18:46:77:42:c2:3c:19:7d:
b3:96:e0:bc:97:be:69:51:6f:1b:42:ae:70:eb:38:
c3:f8:ed:5b:6e:ce:9f:5c:74:12:b0:8b:28:3f:13:
95:8b:9d:e6:43:37:04:c4:8a:e2:8a:53:d7:30:6d:
1b:c2:3f:c1:ce:f7:c4:40:68:a4:dc:e3:59:f4:0b:
7a:d5:c7:91:da:dd:eb:e1:d9:99:0d:14:53:f1:06:
39:a7:0c:e3:76:5d:c7:ac:de:f8:43:bb:a4:a4:df:
12:f4:94:82:d6:fd:bb:41:2b:0a:48:80:39:eb:ec:
03:f3:65:fb:b1:dd:03:93:fb:e0:2a:ca:cd:da:3b:
1e:3e:71:99:04:cb:cb:34:e3:d6:bb:35:67:f8:58:
c1:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:64:8A:54:B5:E1:B0:69:85:C2:81:76:FE:E0:17:DD:46:48:AB:C4
X509v3 Authority Key Identifier:
keyid:91:DD:C7:D9:E0:2D:44:C6:BF:8C:63:5C:1D:07:15:F6:E8:9C:10:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd3H2eAtRMa_jGNcHQcV9uicEBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7afbc-b885-4755-8d15-893b8dd2d2b0/1/kd3H2eAtRMa_jGNcHQcV9uicEBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:62:ce:22:f0:87:c4:44:63:82:2b:8a:2b:8e:c8:b0:59:cf:
3a:94:98:d5:b2:3f:8f:f1:a1:44:fc:e1:e9:4d:11:7d:4b:48:
84:39:af:bf:0e:a4:0b:cf:3d:d0:bf:7b:02:17:76:16:e5:20:
bf:40:6d:3a:8f:c7:9a:70:02:be:72:eb:25:5f:af:d0:e3:0a:
72:dc:3f:de:94:b5:1b:77:c3:c5:17:b9:7d:a2:7b:a5:3a:d3:
22:f9:3f:60:54:4e:2a:68:4a:74:75:5f:28:36:27:fd:f1:ca:
f1:75:04:44:38:a7:88:12:56:9b:57:b1:07:5e:7d:df:27:40:
ed:17:8d:88:b0:4b:f1:fb:b3:dd:f3:93:aa:90:b5:f6:6a:51:
fe:e7:ba:45:65:fb:9b:ef:ef:eb:14:81:1a:27:dd:3e:55:7c:
c9:94:52:fe:28:8e:93:ed:7a:2a:23:41:d2:62:69:9a:c8:74:
89:b5:fb:f0:7a:a4:6e:0e:06:97:ff:f5:4a:37:2a:a1:1a:c7:
b3:28:67:27:52:87:31:00:d9:71:d0:d9:8d:99:59:fb:ed:df:
7e:6a:12:77:f7:31:cb:9e:bb:2d:83:c9:12:45:94:92:5e:d8:
19:65:d0:2a:b8:26:2a:ff:54:f7:45:b4:f5:bb:bd:ad:0c:2c:
b4:fb:6d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:18:32 2026 by rpki-client