Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
File: kfWJGibPpDaiPn4f-XZki-5573c.mft (raw, json)
Hash identifier: qRYQCXhqFNFDWhUmo6KRCtuRCaorJlQIBJh2zhUXT0o=
Subject key identifier: DC:92:37:5E:AE:81:38:66:F2:04:30:7B:A9:DD:A6:97:43:88:33:B2
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 01A0C6A1562CE46663306BCCFD57C1B82FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
Manifest number: 18D6
Signing time: Tue 22 Sep 2026 01:00:57 +0000
Manifest this update: Tue 22 Sep 2026 01:00:57 +0000
Manifest next update: Wed 23 Sep 2026 01:00:57 +0000
Files and hashes: 1: 13pODHcx3eQP7xOkMHNEefG7IIQ.roa (hash: qlJleMO2jwSLSXtFMrN9K1iB2b/o+2MJHkGDE9iSiW4=)
2: kfWJGibPpDaiPn4f-XZki-5573c.crl (hash: lsU96X1ZBscjKbQ1mJG8Wt1PMmHPipW5KeZkCpcNKKg=)
3: n4Dsi3C82jo2ZtBfzJElgZJ-w5k.roa (hash: 3luKXeODer9xKHZYN0At3nnyayOvshr2VqXrwUa+RzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a1:56:2c:e4:66:63:30:6b:cc:fd:57:c1:b8:2f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: Sep 22 01:00:57 2026 GMT
Not After : Sep 23 01:00:57 2026 GMT
Subject: CN=dc92375eae813866f204307ba9dda697438833b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:89:19:73:78:22:ad:12:f4:35:09:28:d9:
dc:5d:57:10:80:4d:93:df:13:21:46:87:cd:0d:82:
1b:66:1b:59:9d:3a:08:0b:b5:fa:ba:01:6a:a0:0c:
27:d6:f6:cb:0b:b6:e2:fa:1b:c1:7d:8f:8a:c6:49:
34:47:d9:db:f1:5e:b8:8e:41:e7:de:30:e1:cf:dc:
9a:6a:1e:68:a4:49:bd:70:6b:79:9e:15:92:e6:af:
a1:d3:4a:6a:cd:dd:8f:0d:3a:3f:46:36:09:89:7e:
09:9e:43:66:f3:78:34:10:25:8a:ff:f0:52:c7:dd:
66:74:70:91:1a:88:b5:eb:e4:0a:97:f5:d3:82:d3:
40:d7:a9:9e:d2:43:d5:16:76:5e:9c:76:5f:fb:7f:
36:77:cf:31:b2:1b:6b:a7:df:f1:0e:df:d9:91:e5:
07:17:f7:c8:55:23:58:66:c3:59:32:9a:68:46:d3:
c7:9c:8e:22:ca:1e:c8:9f:f9:fc:40:6c:4f:6e:47:
75:0d:62:2e:5b:20:a3:08:a3:78:b3:6e:e4:7e:f8:
2a:c9:fc:f0:0f:c9:e5:91:9b:8b:4b:0b:23:47:f5:
2b:7e:2c:cc:fe:86:75:0f:e1:44:b5:80:53:37:7a:
97:7a:09:b8:5e:90:1d:eb:c4:f9:fa:44:73:66:7d:
c2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:92:37:5E:AE:81:38:66:F2:04:30:7B:A9:DD:A6:97:43:88:33:B2
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:34:6b:07:4e:d9:ee:50:59:f5:05:11:b6:2e:cf:bd:2e:1e:
27:bb:d1:0e:a8:b0:21:ac:8f:4f:c5:ae:c7:45:f5:de:b2:f7:
a8:16:8d:d8:98:a5:02:aa:8b:1d:2e:db:40:04:a0:b9:20:c9:
4c:7d:80:ed:1e:93:9d:84:de:c9:39:d4:f1:2d:63:cc:68:bd:
b0:4f:62:4c:f4:be:8f:e9:38:8a:24:af:fb:ce:b7:d0:b7:45:
b5:6c:0e:06:31:7a:e7:0a:ad:23:af:0f:f1:55:b4:9f:ea:22:
93:0a:dd:0f:43:90:14:59:5f:34:81:47:6f:72:da:ce:09:f6:
1e:44:ee:16:78:55:ad:a7:01:70:32:6f:0c:3f:70:62:15:14:
a1:0a:c5:d8:63:5c:74:97:85:a9:dd:89:e6:90:19:26:f3:1f:
5e:e9:84:6a:7f:bb:6a:a2:70:e9:dc:30:4d:dc:53:e2:01:9e:
bb:67:fc:a9:41:1e:33:d7:66:ad:b3:e8:2a:36:9d:4e:4d:26:
42:ee:38:02:1e:6b:08:02:35:dc:d2:9a:57:5f:79:fa:4e:cd:
8b:88:b4:d5:a4:27:28:2b:d5:39:aa:50:81:09:db:a7:7a:38:
91:8f:f3:6c:4f:8a:68:2d:b8:fb:a7:fa:51:a7:ac:f1:b7:92:
76:c6:c8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:41:19 2026 by rpki-client