Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
File: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft (raw, json)
Hash identifier: mR3YGJy3ZBih8yGWVIzw6W7LC9CTmdilwB2oh55RQ8Q=
Subject key identifier: 52:CB:21:28:DF:14:68:01:B0:F3:CA:5A:2D:16:C4:5F:FC:33:64:76
Authority key identifier: 91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
Certificate issuer: /CN=91c2c2912e10581587052a5ca770910b26174f14
Certificate serial: 01A0BFFA326265D215BB22523B58472E946C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
Manifest number: 1A65
Signing time: Sun 20 Sep 2026 18:00:40 +0000
Manifest this update: Sun 20 Sep 2026 18:00:40 +0000
Manifest next update: Mon 21 Sep 2026 18:00:40 +0000
Files and hashes: 1: 56kT45t-qSFh3hK2wMAHEPe_l3g.roa (hash: B1kcQ0n3V1oBn5LuFRtNw52bw6GFBqtOJ6KnuvJCSJ8=)
2: Emuj5k89JyREiy7IdcOgO90JxIk.roa (hash: iTdUaaQCRTcj3yyScv/Hj+qSgG3Y32ohh6EPvVp7v0U=)
3: dY7A4EadxR4Leo0RbN6ul5bgqMo.roa (hash: GFcXlnvExOtDmX5nvATDpdkuw0bc/vixgXHk7cM+5Yw=)
4: kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl (hash: /RTdthjz0B6EuTKduTIz2yBSSEXGdw9+77AcYDtu2So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:fa:32:62:65:d2:15:bb:22:52:3b:58:47:2e:94:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c2c2912e10581587052a5ca770910b26174f14
Validity
Not Before: Sep 20 18:00:40 2026 GMT
Not After : Sep 21 18:00:40 2026 GMT
Subject: CN=52cb2128df146801b0f3ca5a2d16c45ffc336476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1c:c6:27:8d:59:4b:a4:03:63:d7:49:5d:35:
69:70:9f:20:80:ca:0c:d4:72:0e:08:0e:61:b3:1e:
3c:db:cc:dc:a0:42:b7:8b:3e:f0:04:b8:3f:fe:41:
23:84:a6:fd:6f:8d:5d:a7:e7:f3:ad:28:47:1e:43:
97:35:5f:e8:94:20:80:35:75:2a:fb:03:7f:60:db:
47:c8:27:71:ae:7e:25:80:cf:5f:65:d7:1c:65:98:
8f:d8:d3:84:8e:e6:da:68:29:6a:0b:c0:07:5d:e0:
2a:40:ad:3f:93:33:fb:2a:30:d2:1f:4e:6b:a9:ba:
52:dd:24:9d:c8:04:36:07:94:ab:2e:14:e4:76:c3:
ee:5e:a6:17:2e:f0:9b:0b:bd:81:a5:6d:06:a7:7f:
c1:8c:1e:b1:a0:6d:6e:bf:3d:34:e5:b3:fe:50:c9:
33:d3:9c:d1:f7:c4:e4:70:fd:dc:dc:2b:7e:e5:f5:
75:a6:af:e0:90:53:5b:c0:b8:b8:c1:65:e3:8a:44:
0a:1c:3c:cb:35:ad:a3:9c:67:80:8a:fa:a3:b3:ed:
4a:66:bb:71:32:7a:5c:a5:e7:19:4b:4b:e8:b3:5a:
5d:bd:12:e6:27:7d:8c:a3:41:c8:c3:9f:30:d7:34:
ac:34:f3:0a:e4:b4:85:17:1a:b3:f1:96:cb:0f:75:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:CB:21:28:DF:14:68:01:B0:F3:CA:5A:2D:16:C4:5F:FC:33:64:76
X509v3 Authority Key Identifier:
keyid:91:C2:C2:91:2E:10:58:15:87:05:2A:5C:A7:70:91:0B:26:17:4F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b30b57-e7e9-4b2f-99b6-90f97f746676/1/kcLCkS4QWBWHBSpcp3CRCyYXTxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:dc:11:d7:6a:3e:9f:f0:03:7e:30:b9:4f:47:3f:e8:2e:28:
29:0c:d4:6d:73:72:b2:88:6a:2d:0f:8a:9d:85:19:ba:54:8e:
5f:13:1e:d4:9b:ea:e6:e9:6d:4d:86:f5:0c:50:52:62:d3:b5:
ce:c8:a8:e8:03:07:ad:63:63:88:1e:19:4a:b8:a2:dc:72:83:
14:60:43:12:f2:6a:62:64:ba:23:12:97:c8:31:7d:d1:da:f8:
e2:e6:ae:b6:6a:fd:aa:33:c1:79:f9:ef:0f:8b:37:f8:a0:6e:
df:a1:79:42:a1:72:ea:ea:96:2a:a2:36:dd:5d:c5:2b:c2:63:
7d:c9:02:4b:fd:b9:42:44:64:15:55:e9:c0:e2:83:37:94:5b:
ef:71:3e:de:8f:cd:e1:18:43:a1:e4:a1:b4:72:de:70:dd:c1:
d2:f8:26:9c:ff:ad:4f:12:32:e1:cd:c2:ac:d3:36:c9:11:bd:
ad:77:4a:a5:53:d0:89:c0:52:c9:fc:c4:87:20:5f:12:a0:7e:
06:b9:0b:0a:56:be:e5:2f:35:81:b0:22:6c:cf:00:f0:40:32:
04:d7:8b:85:3d:d8:1b:37:64:5d:31:fd:43:2e:e3:fa:30:b4:
8a:4f:b4:af:7e:23:34:99:47:84:47:4e:54:e8:50:b1:cb:df:
89:5d:f7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:52:07 2026 by rpki-client