Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
File: Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft (raw, json)
Hash identifier: keDOOT+Gl+UW+KOZdyrs7joOIy8zZYYGszorhJsJPHQ=
Subject key identifier: C9:6E:8D:D7:9D:4F:F7:70:58:A3:D1:BC:2F:DD:79:60:B3:DF:C7:2A
Authority key identifier: 2A:48:9E:93:DC:BD:87:0E:9C:21:49:BC:A3:41:89:FB:4A:95:AC:03
Certificate issuer: /CN=2a489e93dcbd870e9c2149bca34189fb4a95ac03
Certificate serial: 01A1291EF3A0C05742E016E4C8CF9D76DFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
Manifest number: 029C
Signing time: Sun 11 Oct 2026 04:00:56 +0000
Manifest this update: Sun 11 Oct 2026 04:00:56 +0000
Manifest next update: Mon 12 Oct 2026 04:00:56 +0000
Files and hashes: 1: Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl (hash: V1JGAykRwhK21TdqqGzIR1/WSB8fWF52VaRXo8FlYoE=)
2: udm-0Xl3UglvtX_NHkrgYLZH0SE.roa (hash: WYCvnHc5H5Xz3d6/Kkp/D6s/RlGIj7T/WQo1xaUpk+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1e:f3:a0:c0:57:42:e0:16:e4:c8:cf:9d:76:df:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a489e93dcbd870e9c2149bca34189fb4a95ac03
Validity
Not Before: Oct 11 04:00:56 2026 GMT
Not After : Oct 12 04:00:56 2026 GMT
Subject: CN=c96e8dd79d4ff77058a3d1bc2fdd7960b3dfc72a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:63:dc:53:83:87:f9:f3:df:8d:ca:e1:18:64:
6e:f2:52:ad:d7:83:eb:60:3f:34:8d:bf:a1:43:77:
6a:eb:4e:ce:08:8b:c6:72:7c:49:e5:4b:41:25:dc:
aa:a7:67:b3:00:f6:de:82:10:b0:e5:27:f4:ee:ee:
ef:3a:0d:5f:d5:df:61:8b:7c:83:87:0f:b5:de:8a:
ea:ff:e6:d9:c3:30:46:f7:d5:f2:a2:6c:c0:75:94:
12:a2:77:f6:ee:bd:20:cd:45:fa:5d:90:9e:34:73:
82:3c:b3:01:41:e2:80:a4:e0:1d:8f:1b:f8:e3:6c:
29:a0:7c:72:0d:6b:5b:99:c0:48:40:84:db:28:b9:
5f:03:4d:cf:68:14:6e:42:9a:f5:d7:dc:e3:ec:00:
30:8c:f2:87:5a:74:27:a1:a5:73:2b:87:02:0d:ab:
8b:5b:86:4e:dd:bf:ea:21:76:cd:ce:c8:27:cc:c7:
d9:e3:16:b0:d5:ee:0e:97:ee:89:f3:2a:b8:9b:cc:
11:03:15:ab:69:8a:ef:6e:e9:2d:86:7b:49:2c:42:
32:07:94:e0:a5:07:21:60:f7:fc:60:0a:c5:34:95:
63:78:94:97:86:ae:8d:7b:c1:5c:56:19:de:7d:fd:
6c:83:6b:5d:96:51:79:4c:d8:08:ab:fc:ce:e8:9e:
ea:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6E:8D:D7:9D:4F:F7:70:58:A3:D1:BC:2F:DD:79:60:B3:DF:C7:2A
X509v3 Authority Key Identifier:
keyid:2A:48:9E:93:DC:BD:87:0E:9C:21:49:BC:A3:41:89:FB:4A:95:AC:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:34:47:55:66:38:2f:e5:39:09:b6:f0:99:cc:d0:8f:df:3e:
37:08:ee:e5:4d:50:72:29:3c:9a:f2:00:33:65:63:7e:ff:89:
04:29:37:83:60:10:d3:64:f6:0a:6f:c6:28:2e:f1:09:11:fb:
85:6c:0b:b1:5b:d8:21:74:b9:d0:86:19:ad:0b:e7:0d:18:ad:
ec:1c:4c:20:3b:a1:2f:53:f8:56:81:d7:af:47:a2:48:aa:87:
23:b7:10:fa:2b:a6:0a:fa:93:9a:1d:25:ac:4a:c3:46:8c:ae:
5f:0b:6c:1b:ad:81:ef:c9:de:3d:3f:69:37:e9:72:1d:6d:57:
b9:e5:bc:ec:83:9c:76:c1:6a:12:93:01:2f:82:d4:61:ee:c5:
2e:d2:be:49:c1:89:32:9c:7c:da:69:f4:6c:c9:65:7c:11:57:
2d:2b:3b:78:9d:4e:1f:1f:80:02:3c:d6:cf:3c:7a:11:ad:ce:
0c:4a:a9:d8:45:f9:07:c2:61:4a:38:1c:42:5c:eb:c8:c0:d4:
c5:65:22:c5:29:34:bd:13:f3:01:d9:24:b3:8f:06:09:47:3f:
ca:44:ca:27:f0:fe:ff:70:ca:34:59:53:53:28:e3:35:4d:88:
ed:57:79:a1:62:db:36:43:52:03:05:0f:b3:e4:f1:2a:27:63:
39:20:d2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:00:12 2026 by rpki-client