Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: B8I+/IV9v7p4tagDRX7uJ4viOCAGX4kueytGP9mPjI0=
Subject key identifier: AC:2C:51:22:7E:4B:B9:29:9D:A3:7B:0C:07:9F:B9:67:F2:BE:6C:37
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 01A0C47BE5AD26CC9C7C306938ACB4AF8B27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 17EA
Signing time: Mon 21 Sep 2026 15:00:49 +0000
Manifest this update: Mon 21 Sep 2026 15:00:49 +0000
Manifest next update: Tue 22 Sep 2026 15:00:49 +0000
Files and hashes: 1: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: n6W6sZneF/r0yUKY5WDLj00iF0AxIaUGpwOEzsF31dk=)
2: o1Hi35nJUcBvkp2Bnd8ynDJygjQ.roa (hash: DLniWpeOmftt56jiBqyHM3DnY3UcxSHcNXX1Mo5VpS4=)
3: z5JkJ805eLdh9_PBzMN4E9jKOKc.roa (hash: ivUv5kOadHp5o5mSeOVgX0o87k8Q85qesScVE15Jy6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:e5:ad:26:cc:9c:7c:30:69:38:ac:b4:af:8b:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Sep 21 15:00:49 2026 GMT
Not After : Sep 22 15:00:49 2026 GMT
Subject: CN=ac2c51227e4bb9299da37b0c079fb967f2be6c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d3:20:92:66:51:e2:fe:82:0c:92:ab:c8:75:
c1:38:06:cb:56:18:f3:92:19:4f:85:1a:eb:cc:f1:
b7:de:c0:88:b8:d5:76:13:50:c6:07:b0:4e:48:fe:
9b:09:7d:7d:57:a5:05:f3:43:49:43:b6:c2:da:50:
a4:72:e5:ae:15:8b:d3:3b:4a:ea:19:49:99:f9:9a:
3a:0a:c0:0e:39:0e:d4:df:6b:00:7e:cb:d4:63:e2:
1a:24:a0:28:b9:3e:99:d0:d9:8d:34:00:a3:a8:5c:
c3:b2:74:e6:2a:17:8d:ee:17:7f:8b:ad:59:0c:90:
55:aa:42:f3:81:45:41:13:f8:5f:06:11:af:98:75:
5d:c7:54:39:a3:c9:b2:24:4f:1a:01:7b:3a:52:99:
3a:2f:3f:69:a1:e4:7d:a2:0f:32:13:5b:a7:dd:87:
f3:b7:de:5a:cf:9a:37:ca:82:96:a7:47:e3:c0:e8:
45:7a:e4:5a:ac:13:8b:22:12:9e:66:d0:d1:62:7a:
a7:01:44:a3:d7:0f:80:ee:8c:c1:88:3b:9e:82:c6:
4c:17:d6:5b:4b:06:8c:78:c7:5e:79:7a:29:59:7f:
a9:8f:20:4f:2a:3c:41:7b:a8:78:82:e9:5a:26:94:
a0:b9:47:4d:fc:dd:9d:bb:b9:ea:54:57:ed:17:84:
00:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2C:51:22:7E:4B:B9:29:9D:A3:7B:0C:07:9F:B9:67:F2:BE:6C:37
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:fb:96:28:5c:13:a1:6a:53:43:2a:eb:6a:1f:1e:e8:c0:15:
cf:75:66:34:ec:63:24:e4:64:47:51:84:94:2f:89:65:bf:38:
c6:78:5d:7b:95:29:89:a5:88:4f:bc:42:ca:b5:cd:bc:ad:e8:
61:ac:83:7d:72:32:bb:ab:3d:9a:cc:d2:b7:b9:ca:c3:e7:35:
99:c3:60:09:7b:10:99:ab:97:9e:e6:5e:db:da:e3:be:c5:4b:
c0:92:74:d7:5e:73:f3:de:b0:77:f8:4f:84:f1:5e:3c:8b:ea:
39:41:57:19:4a:a6:2a:57:fe:94:47:77:af:26:0a:14:57:fa:
1f:4a:86:b1:bd:04:b4:8a:28:5f:cb:6a:0e:8a:91:3f:7e:f2:
9d:64:fc:dc:e2:0b:24:95:c7:f0:76:54:c9:b1:73:23:56:b3:
05:7e:ad:00:1e:88:9f:49:f0:a0:88:70:f1:57:83:53:7b:72:
79:d3:9b:59:85:6f:e7:7a:93:7e:74:ac:2a:ba:78:7a:82:78:
b9:9c:e7:da:ba:21:b4:c6:b9:16:6c:13:0f:5b:b6:7f:f5:d5:
ac:d1:44:3f:ee:e1:ca:ea:cb:b2:3c:f3:6f:e0:73:5c:8b:40:
e1:bb:e8:95:ab:e7:28:50:ea:89:78:51:c8:31:88:12:0c:e4:
d4:6b:93:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:18:53 2026 by rpki-client