Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json)
Hash identifier: +o/9pqGtoWHLe47diL17IGkcCQQEmf6DkXzXHsZpuCw=
Subject key identifier: C8:7E:A3:A8:AE:00:59:23:6C:93:6C:A4:6E:F2:0C:23:4C:95:C1:71
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial: 01A0D45D5128D93330F435F84153FD60B416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
Manifest number: 1A00
Signing time: Thu 24 Sep 2026 17:01:20 +0000
Manifest this update: Thu 24 Sep 2026 17:01:20 +0000
Manifest next update: Fri 25 Sep 2026 17:01:20 +0000
Files and hashes: 1: f_NbFcXhsPWXIxa4Q-RL2lQE9H8.roa (hash: r4M7joZLYltcoMhevwH4wLr16D2gCWd/Vhwm8RHpnDM=)
2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: jwXtsIsZeo38Rxioh22IVd1bdadH1SYSFJpw0+nte4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:51:28:d9:33:30:f4:35:f8:41:53:fd:60:b4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Validity
Not Before: Sep 24 17:01:20 2026 GMT
Not After : Sep 25 17:01:20 2026 GMT
Subject: CN=c87ea3a8ae0059236c936ca46ef20c234c95c171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:55:c5:56:ae:b2:aa:94:c3:ce:0a:e7:c7:6a:
ca:0f:6f:63:17:f7:e8:cc:e0:c1:09:68:c2:51:55:
f6:7d:47:2d:6d:b9:da:aa:11:5d:7a:dd:7c:df:9c:
0a:d7:45:0a:1d:86:a1:68:1b:dd:2e:0b:75:a4:d0:
46:ce:f4:c9:33:c2:b3:ec:a2:94:e1:7f:10:6b:a2:
06:f2:38:28:ff:e9:3f:70:b9:1d:9f:69:90:97:68:
19:72:62:a5:dd:76:54:4d:c6:a7:e0:f8:5e:75:39:
a0:17:ae:ac:9f:28:7a:47:71:73:ab:98:55:0d:5b:
38:64:43:70:82:6c:25:f3:52:14:00:c5:39:15:23:
76:f7:58:e3:74:6f:15:cb:51:1d:e6:87:e8:4f:46:
a1:67:2d:38:da:33:3a:41:90:fe:3e:55:69:45:cf:
ec:55:59:c0:b6:71:18:74:1d:52:fe:99:aa:1c:60:
d1:d9:e0:68:11:8f:0b:42:46:5c:8e:72:99:36:6b:
3c:4c:20:a6:88:c0:b3:78:75:b3:7a:88:3b:f8:2f:
2f:7a:a2:d8:9f:8c:19:c3:b0:80:4a:79:f7:b7:9d:
cf:6f:e5:eb:b5:d8:ae:b5:69:52:c1:b9:80:6c:a2:
80:fd:7b:c2:5e:30:60:c9:9d:0a:07:87:01:3d:7e:
f8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7E:A3:A8:AE:00:59:23:6C:93:6C:A4:6E:F2:0C:23:4C:95:C1:71
X509v3 Authority Key Identifier:
keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ad:dc:22:4f:60:d8:1f:2c:15:7a:17:4a:5e:fd:c8:31:36:
21:ae:6e:84:82:ff:05:6f:83:c5:97:e9:1b:dd:6d:15:ae:fa:
61:ce:c4:2b:c8:2d:6f:e8:f8:10:5b:be:59:22:10:d1:e1:d3:
45:c6:d3:a9:9d:ad:09:0f:35:6d:e5:41:73:14:74:5e:bb:ca:
61:20:96:c3:4e:02:1c:ee:38:fb:fc:28:48:af:53:f4:b8:d8:
b7:55:0d:22:20:88:a2:0a:0e:c8:c2:2c:9f:e3:eb:db:0b:c7:
44:a0:7a:c2:58:87:16:48:88:34:50:f8:74:f3:a7:fc:6b:73:
e4:a4:e6:03:db:ca:b1:79:b2:ba:a4:fa:48:de:38:39:38:2b:
b1:26:2c:21:64:5b:5a:6f:b3:a2:06:00:86:39:66:9c:1c:50:
ce:fd:03:b6:83:0f:45:a2:d7:da:2d:08:2d:d0:7d:5f:fa:ed:
aa:02:30:9f:6d:91:28:63:d5:3f:95:60:9b:12:c7:f2:30:19:
aa:cb:29:9f:1c:3f:fa:62:65:d8:2e:f2:2c:01:78:17:56:79:
63:11:28:cd:95:fa:cc:7a:0e:b2:28:66:6a:87:a9:2a:19:d4:
9a:38:01:d2:71:19:f4:6a:6c:21:0a:f3:6e:14:ba:63:07:dc:
b9:69:06:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:23:41 2026 by rpki-client