Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: fW9cyTflZogKtwytFSQPR6q3IMs6DLhOcQbsFKvZv3k=
Subject key identifier: BF:00:14:CC:42:F5:6D:63:05:25:A6:A8:1E:46:76:37:B5:00:83:D7
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 01A0BD9D7EB4D8BBBD9E4CE5F8BB43DD993F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 193C
Signing time: Sun 20 Sep 2026 07:00:10 +0000
Manifest this update: Sun 20 Sep 2026 07:00:10 +0000
Manifest next update: Mon 21 Sep 2026 07:00:10 +0000
Files and hashes: 1: 7zz3mufMehUd0c38xX7JTdPEQ7Y.roa (hash: iEmZwp8Gqr2F/CkXFP09kX00HiNuER7AVuZF/jjY/fM=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: Lscwk7hWfVTRT1wQZ23HLO8yWqvY/wnacLfFJKU9SdM=)
3: xGq1gAr_KK1wFSAmfr2LKGJvUNk.asa (hash: YYD3QqVh2P4eGz8z5m6Y8La0oMvGrQPkxmhrVB2u3TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:9d:7e:b4:d8:bb:bd:9e:4c:e5:f8:bb:43:dd:99:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Sep 20 07:00:10 2026 GMT
Not After : Sep 21 07:00:10 2026 GMT
Subject: CN=bf0014cc42f56d630525a6a81e467637b50083d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0f:62:7a:3c:84:ac:65:60:f0:23:00:99:05:
40:eb:2e:95:4a:3f:67:c1:6e:46:51:7f:2f:e0:af:
86:1a:40:ba:18:7f:bd:73:40:4a:65:9a:10:70:92:
50:a0:aa:5c:97:15:49:75:a0:f1:ff:64:c8:59:9f:
f7:ad:ba:47:72:26:27:54:c8:d4:fa:66:0b:d6:2c:
df:97:c8:30:01:42:6f:d4:34:75:e9:d1:dc:89:49:
75:b7:c8:d9:d3:69:0d:a5:8b:3f:c7:d4:1c:20:a3:
a4:25:07:66:91:25:16:d4:1c:e4:5c:4f:13:91:a0:
a4:4a:72:43:58:cc:60:ea:9d:d7:55:e4:6a:5d:33:
64:19:e0:57:2c:d2:69:8c:b7:d7:d5:9d:95:1c:e8:
2d:93:1d:dd:12:17:55:3d:4a:e5:11:60:23:ff:56:
1f:fb:50:46:df:bb:f5:02:47:ff:c1:d0:fd:e3:8a:
12:9f:21:48:6c:44:3f:c7:ee:67:8d:e9:e5:90:64:
b6:a3:43:cd:4b:7a:50:af:97:c8:51:4b:0a:20:e5:
0a:78:5a:da:d4:bf:e2:7b:0b:c5:34:60:ff:d7:87:
65:4e:3f:0c:1c:87:c8:3c:5e:33:2c:ff:cf:13:66:
a0:72:a7:7d:ff:f4:c4:46:30:8f:45:28:c4:e8:fc:
39:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:00:14:CC:42:F5:6D:63:05:25:A6:A8:1E:46:76:37:B5:00:83:D7
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:70:ca:3b:2e:ee:3a:79:38:07:b1:6b:95:49:2b:dc:2d:34:
57:fa:72:f7:52:07:32:54:14:1c:42:23:dd:66:82:e6:e4:ad:
b4:ce:29:5d:08:0a:0f:48:c7:50:c2:1d:99:86:5b:4c:e2:b0:
22:c6:66:38:80:7e:31:d0:98:b5:15:c0:4f:44:d9:8b:25:19:
0c:30:4e:9a:3a:ef:d2:54:a3:14:ce:a5:94:bf:8d:44:43:41:
4b:49:91:6c:75:71:c8:14:94:72:58:8e:c2:d6:fc:05:73:5a:
98:45:fa:70:59:9d:21:b5:e8:88:4c:41:27:97:52:3d:67:be:
9d:d0:7d:20:d8:e3:5c:08:7f:48:70:7d:45:fc:e7:4b:2d:bd:
95:dd:17:3b:8d:5c:5a:05:bd:7c:0f:20:3f:99:c8:b9:0e:a8:
dc:56:21:3a:97:0a:f5:c2:8c:3d:2c:16:57:3b:09:b0:71:3e:
4c:d0:95:85:67:a5:5c:ea:79:ae:8b:5d:c7:2c:88:7a:9c:51:
6a:99:a1:6b:f8:84:cf:9d:bf:3f:05:7d:66:57:25:6c:dd:d6:
b7:97:1d:05:de:87:61:47:9e:6b:6c:aa:97:84:cf:c7:f1:3d:
f1:e3:db:ef:a1:56:f0:09:bf:d2:83:73:b0:b1:fb:55:ed:5f:
26:ea:7c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:44:20 2026 by rpki-client