Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: 1gMh8d8lh3ZnG7iuKKMV0qnp+a3av9sJeaNY2awyqYo=
Subject key identifier: 4A:DE:D9:1B:51:82:88:3A:20:63:D8:DF:C6:3C:2F:20:FA:1A:EE:A3
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 01A0CA4768D6581C1A1E26D74CA0EEBC2220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 16D7
Signing time: Tue 22 Sep 2026 18:01:12 +0000
Manifest this update: Tue 22 Sep 2026 18:01:12 +0000
Manifest next update: Wed 23 Sep 2026 18:01:12 +0000
Files and hashes: 1: 1AaGajGK39FJ1DfqM02pviOUgxE.roa (hash: REcEZv2mwfjfjwH6vxcx0ox6WJ+EFSfiMB5BRMtnFng=)
2: P52Z19ZFS5PcHmr747_30HPjt0A.roa (hash: Q+07EEoc98NoCKMiauQ6zERb9JXZfHA9LGDMQqCoPfo=)
3: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: lEFZriG/P/xuuE/tkKzzvqcVQNvCWb8Y9S2yMYw8C+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:68:d6:58:1c:1a:1e:26:d7:4c:a0:ee:bc:22:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: Sep 22 18:01:12 2026 GMT
Not After : Sep 23 18:01:12 2026 GMT
Subject: CN=4aded91b5182883a2063d8dfc63c2f20fa1aeea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:04:27:82:3f:c2:37:c9:fa:f0:1a:71:89:
fb:3c:91:e9:07:67:2f:ef:a2:cd:67:08:2c:e6:c2:
60:38:3e:18:04:93:c5:de:1c:e7:f0:2c:e7:99:b4:
39:fc:ef:d2:8c:83:61:96:33:3a:14:e4:14:82:33:
08:cb:e6:05:0e:2b:3e:2e:e4:cd:39:b2:72:b9:01:
de:82:bf:8d:63:50:a8:12:d2:ee:f4:bd:9c:d1:7d:
b3:1c:cc:ea:6e:29:73:1b:fa:eb:05:e1:98:20:7f:
8d:4b:37:9d:fd:71:fc:ec:fa:61:3b:ab:7e:11:01:
79:98:07:1d:5e:2e:98:dc:a8:9f:ca:d6:1e:39:aa:
89:c7:29:0e:4e:39:4e:64:fb:49:c3:49:a5:a6:7b:
44:3b:36:11:85:91:8a:9b:b8:38:e5:1e:79:02:dd:
7b:f1:e5:da:c4:0b:26:c2:a6:7e:1d:3b:e8:bf:ae:
a6:11:30:c1:aa:0b:09:80:ae:fe:4c:ff:3e:3a:74:
5b:19:89:34:0f:ca:db:3c:44:a3:05:f2:8f:c7:f4:
c6:5b:ad:96:42:b3:9c:ec:16:81:e0:4b:c1:17:44:
5d:e8:57:cd:cc:5b:cc:73:f7:f1:9a:a3:2b:3b:49:
a0:af:52:12:a2:5e:29:7f:b9:df:3c:1c:90:8e:0c:
75:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DE:D9:1B:51:82:88:3A:20:63:D8:DF:C6:3C:2F:20:FA:1A:EE:A3
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1e:69:97:c1:f2:b2:fb:af:25:d2:ff:8b:f1:41:68:ee:34:
cd:87:3a:00:28:bd:1a:57:9f:eb:c2:5b:ba:b3:da:05:da:25:
9e:2f:b6:3e:51:22:e6:79:1d:11:14:34:b6:30:9e:94:fb:8b:
18:c4:3c:78:e7:62:2e:4c:eb:4a:f4:d0:40:ff:05:e1:19:0a:
17:6f:40:b2:12:31:0c:e8:bb:11:49:cd:eb:a5:0d:75:58:ae:
c7:f9:b6:c7:51:05:b0:02:ad:f4:a5:99:86:c6:0c:a5:d3:f9:
ef:2f:dd:89:fd:30:dc:23:67:a9:50:14:36:89:01:49:0a:88:
f5:ae:bf:de:2d:fc:2d:ad:c9:7e:d3:84:43:ea:9e:ea:8d:f4:
63:a5:31:6c:ea:2a:ff:e1:5f:3f:6d:a9:59:64:5a:74:32:db:
86:6e:1f:f2:df:90:77:25:f0:00:ac:75:be:da:d5:d4:3a:f1:
0a:c0:ac:e5:28:14:12:a8:6e:3d:f9:56:8d:42:32:06:96:8b:
3d:55:18:07:a9:bf:40:1a:b6:e5:52:7a:45:5d:37:ad:92:ff:
5a:e1:7b:c9:3b:39:05:4c:b7:81:66:30:cb:ae:35:1e:a0:e7:
15:6f:0e:d4:75:27:86:e6:92:49:86:64:65:7a:90:45:1e:dc:
1e:38:4a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:45:36 2026 by rpki-client