Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: grAOoXc1Y4/En+nzibpiId6vKUDg0AvPEmJaJTRX/UE=
Subject key identifier: 2E:D4:11:11:B9:B2:DB:3D:F2:58:D4:A3:A2:AC:DE:4C:A4:FB:29:AE
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 01A1A7147F3E7B517F2E165495E82F27318F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 19B5
Signing time: Wed 04 Nov 2026 15:01:40 +0000
Manifest this update: Wed 04 Nov 2026 15:01:40 +0000
Manifest next update: Thu 05 Nov 2026 15:01:40 +0000
Files and hashes: 1: 7zz3mufMehUd0c38xX7JTdPEQ7Y.roa (hash: iEmZwp8Gqr2F/CkXFP09kX00HiNuER7AVuZF/jjY/fM=)
2: e8spZEtEhonO9N-hg7HcCZMNshk.asa (hash: RCh1JAySaD7nFyipw72qrbgKuehMISXx49PcyNenDJ0=)
3: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: cwp3y2r+TsTSVrANBa0h+R6w8SZKN8o9uOHHf/Npcs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 15:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:14:7f:3e:7b:51:7f:2e:16:54:95:e8:2f:27:31:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Nov 4 15:01:40 2026 GMT
Not After : Nov 5 15:01:40 2026 GMT
Subject: CN=2ed41111b9b2db3df258d4a3a2acde4ca4fb29ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:02:f8:63:92:57:65:ed:29:54:78:f5:4a:18:
f8:37:8d:d4:a5:d6:4c:81:3a:17:ee:92:ae:f0:4a:
d9:20:90:56:76:e3:d4:d0:37:3e:dd:73:d9:17:53:
fe:c0:af:01:4b:69:db:bb:e8:3a:08:45:73:e3:b9:
54:5f:dd:34:93:48:b9:46:eb:a6:ff:65:44:3c:48:
9b:d2:b7:d1:5d:08:ee:90:4a:b1:05:4d:5a:8d:19:
b2:4d:f8:3a:12:2d:8c:36:74:c4:92:59:23:03:cd:
c9:aa:34:70:aa:0b:1a:9e:09:74:6b:e5:fb:90:5b:
ac:6f:50:16:68:e3:16:ba:18:f6:94:8b:c8:61:4f:
e8:63:03:07:94:f1:62:45:64:c5:3f:5a:d3:27:14:
d1:f3:73:b7:7f:a9:45:f4:3c:54:22:fe:4b:05:39:
d1:c0:80:98:55:af:7b:95:c1:17:26:62:c3:44:4e:
fa:b8:37:59:ad:28:2a:1d:35:d8:b8:40:5a:ed:17:
72:7a:45:bd:42:e0:98:fe:6e:7a:72:97:e3:c0:8e:
26:40:13:55:a3:ac:8f:c0:7b:e4:92:8a:59:2f:50:
d5:b6:58:a7:de:a7:f3:fa:89:95:e0:f6:e2:86:69:
82:4e:9a:39:98:73:ef:5f:25:1a:51:eb:27:bd:b3:
6a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D4:11:11:B9:B2:DB:3D:F2:58:D4:A3:A2:AC:DE:4C:A4:FB:29:AE
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cb:37:66:ba:e0:6c:f6:40:15:98:54:08:9f:eb:a5:3e:3a:
3c:63:25:24:dc:f6:aa:ca:0b:3b:82:71:fe:cc:7f:86:df:0e:
32:d3:e5:7a:8d:7f:ef:6e:6e:7e:bc:34:09:50:de:c1:c5:70:
94:ee:a6:6f:b5:38:3f:b1:cb:0c:0b:0c:18:3e:5d:4c:15:fb:
cc:13:ca:96:d9:d8:6f:48:76:e9:64:e1:9a:15:f0:98:86:8c:
64:fe:b3:49:2f:4e:0a:77:16:48:77:2f:bf:b3:6c:44:8f:c2:
25:fd:48:44:09:c3:65:fc:63:3d:f8:02:e1:a3:ee:99:fb:10:
c9:bf:05:b2:2a:c7:ac:55:b9:76:7a:91:8b:c4:04:a5:5d:c3:
5b:17:aa:3d:25:e3:3a:12:68:1a:86:bf:2f:cb:23:13:0d:a4:
b6:c9:47:6d:aa:96:d9:d9:63:45:e3:55:96:0f:d3:f9:b9:31:
a9:69:a0:c2:d5:21:88:d3:43:af:ab:db:16:82:f5:0a:74:41:
57:1c:26:8a:de:b9:9b:65:2c:f6:20:f0:16:4e:48:69:10:57:
32:69:41:65:f4:e7:e6:42:cd:90:5b:29:cc:c4:0c:29:4a:2c:
40:ad:d8:02:29:e6:f0:62:fb:1a:49:c7:7b:41:da:e8:68:44:
5a:c0:9f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:41:30 2026 by rpki-client