Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: PRg24OBqQvt/Y+MwzdFIAASQ3klXfYuuYkl+/W8rF8Q=
Subject key identifier: 4E:06:BA:BF:F8:5A:72:72:74:11:3F:0F:32:CA:3E:81:AB:E4:CF:39
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 01A0C746294F8BF3948057B3829030F2A98A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 1A6A
Signing time: Tue 22 Sep 2026 04:00:59 +0000
Manifest this update: Tue 22 Sep 2026 04:00:59 +0000
Manifest next update: Wed 23 Sep 2026 04:00:59 +0000
Files and hashes: 1: 1m9G2-vieK3ftJ-kJa3ZP6u1OfU.roa (hash: ZQIEzKU7il8uiojRzD821jeTtt7kM4ak69J3b8ymtKI=)
2: 3QZDpiFuYaMWkZup-aSbUWdprS4.asa (hash: 3GAfnluZl6XKpM2HXFLsUbC+T2sxlsnFXBVPFEOLNp0=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: 15BwrAnpP9QkgbIeYigKAvc53+Mobfq11TeVOVQyxAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:29:4f:8b:f3:94:80:57:b3:82:90:30:f2:a9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Sep 22 04:00:59 2026 GMT
Not After : Sep 23 04:00:59 2026 GMT
Subject: CN=4e06babff85a727274113f0f32ca3e81abe4cf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:11:c8:73:4d:00:b4:7f:ca:f0:f6:e9:03:
d6:60:d6:bd:b7:96:9d:e5:24:99:11:f0:55:e3:79:
d7:b3:f5:28:a7:7f:f8:cf:80:19:33:20:84:8e:0d:
5d:17:85:05:59:c8:7d:60:e1:6c:bd:95:3b:b1:c5:
12:ec:c5:c3:ee:ef:bb:50:6c:a7:4b:a0:98:a5:a4:
d8:dc:6e:94:e5:42:d1:8c:0f:2b:f4:de:24:f2:85:
d9:34:4d:c8:59:b5:92:22:35:b6:c9:a5:91:9e:28:
ed:19:9a:b2:f6:a1:aa:95:75:a7:1a:21:8c:88:61:
b5:69:57:59:51:64:6c:d7:b2:ff:a6:68:93:8d:12:
b4:35:de:5b:29:07:5c:b6:09:69:09:1d:ea:28:ce:
c6:73:ae:cf:58:67:02:e1:3e:2d:0f:01:0c:57:e3:
d0:fd:55:99:96:d4:e2:76:81:24:cf:14:78:5f:29:
18:c6:dc:8b:99:b0:2d:ad:34:0c:a2:37:99:a6:9d:
92:15:38:56:cd:48:2e:35:72:36:62:fd:95:b2:e7:
e4:f6:18:a1:5c:9b:da:cd:d0:c3:40:05:9b:8a:36:
82:cd:cf:6e:b9:34:d7:88:ec:a1:37:05:ec:ac:1d:
61:fd:cb:95:ff:20:16:73:5c:d3:42:a4:3d:b5:f5:
1f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:06:BA:BF:F8:5A:72:72:74:11:3F:0F:32:CA:3E:81:AB:E4:CF:39
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:27:06:82:4f:ae:ab:c6:21:f2:cf:d1:e8:a7:df:87:43:2a:
a1:e7:81:d3:89:7b:ec:ca:0f:d9:72:0d:88:84:06:37:c6:26:
be:7b:cf:10:c2:f5:ff:21:03:25:59:e6:c0:fb:d7:b2:eb:9c:
9b:82:99:0c:b8:54:c4:bc:90:3e:dc:a1:f0:4b:72:cd:f5:1d:
0a:95:7f:e9:06:11:bb:40:7b:c0:9f:0b:8e:b5:15:d3:29:56:
6c:94:b3:ca:42:bb:35:3d:9e:53:69:0b:ec:bc:40:3c:34:a7:
ba:56:f5:c9:df:a6:53:64:64:93:71:a2:94:bf:a6:55:3e:b2:
6f:d3:0e:18:eb:78:c2:a6:7b:55:a3:b8:b7:2e:93:8d:d5:8d:
66:b7:f9:00:73:58:1f:1e:01:0c:4b:23:3c:a5:5b:1b:06:e0:
c4:5f:4d:b6:ac:c5:49:d5:89:62:07:32:a3:54:ad:1c:4e:e3:
1f:77:29:79:e1:a9:aa:92:37:5b:c9:83:84:84:9f:19:2a:cb:
9f:e7:94:3f:57:81:03:81:ac:ac:c4:c0:39:fa:23:e3:73:6b:
4b:26:a2:0b:61:d5:d8:99:a9:66:7e:cd:e8:e3:e9:1f:f5:6b:
39:aa:de:5f:9b:6f:10:78:10:2b:76:04:ea:04:7d:8f:25:ee:
20:72:3b:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHRilPi/OUgFezgpAw8qmKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMWUzYzhkZTBhZGQ5ZGE5NWNmNDRkODlmNTBiZmRlN2Fl
MTlhNTcwHhcNMjYwOTIyMDQwMDU5WhcNMjYwOTIzMDQwMDU5WjAzMTEwLwYDVQQD
Eyg0ZTA2YmFiZmY4NWE3MjcyNzQxMTNmMGYzMmNhM2U4MWFiZTRjZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu8RyHNNALR/yvD26QPWYNa9t5ad
5SSZEfBV43nXs/Uop3/4z4AZMyCEjg1dF4UFWch9YOFsvZU7scUS7MXD7u+7UGyn
S6CYpaTY3G6U5ULRjA8r9N4k8oXZNE3IWbWSIjW2yaWRnijtGZqy9qGqlXWnGiGM
iGG1aVdZUWRs17L/pmiTjRK0Nd5bKQdctglpCR3qKM7Gc67PWGcC4T4tDwEMV+PQ
/VWZltTidoEkzxR4XykYxtyLmbAtrTQMojeZpp2SFThWzUguNXI2Yv2Vsufk9hih
XJvazdDDQAWbijaCzc9uuTTXiOyhNwXsrB1h/cuV/yAWc1zTQqQ9tfUfDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4Gur/4WnJydBE/DzLKPoGr5M85MB8GA1UdIwQY
MBaAFJMePI3grdnalc9E2J9Qv9564ZpXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2Yt
YjljYTc1NTVjMmM1LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi84NTJjZmQtZDU5Mi00YzJkLTk0Y2YtYjljYTc1NTVjMmM1
LzEva3g0OGplQ3QyZHFWejBUWW4xQ18zbnJobWxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABScGgk+u
q8Yh8s/R6Kffh0MqoeeB04l77MoP2XINiIQGN8YmvnvPEML1/yEDJVnmwPvXsuuc
m4KZDLhUxLyQPtyh8EtyzfUdCpV/6QYRu0B7wJ8LjrUV0ylWbJSzykK7NT2eU2kL
7LxAPDSnulb1yd+mU2Rkk3GilL+mVT6yb9MOGOt4wqZ7VaO4ty6TjdWNZrf5AHNY
Hx4BDEsjPKVbGwbgxF9NtqzFSdWJYgcyo1StHE7jH3cpeeGpqpI3W8mDhISfGSrL
n+eUP1eBA4GsrMTAOfoj43NrSyaiC2HV2JmpZn7N6OPpH/VrOareX5tvEHgQK3YE
6gR9jyXuIHI7Zw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 12:32:42 2026 by rpki-client