Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
File: Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft (raw, json)
Hash identifier: eDQmVYPNn71aMA4KVD4fBpZToQQECAtDrcufOEsroXY=
Subject key identifier: 90:E5:35:0E:7D:B2:EB:16:D0:82:E6:D5:88:65:17:FF:B2:37:5E:95
Authority key identifier: 2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
Certificate issuer: /CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Certificate serial: 01A127D5A561DE736A426F5EE9DAC0F79CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
Manifest number: 068C
Signing time: Sat 10 Oct 2026 22:01:15 +0000
Manifest this update: Sat 10 Oct 2026 22:01:15 +0000
Manifest next update: Sun 11 Oct 2026 22:01:15 +0000
Files and hashes: 1: Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl (hash: kpVB/CnPA7q0Mf41IRM5P9ZO8dtpjNenMtquco8T0fc=)
2: bHxNQUrJC8Eh62QodMXQrjbnmgg.roa (hash: 1d3ZqMZQAbRLtC6TZNo/vpwZQcPk90gTwtcmQgBCgII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:d5:a5:61:de:73:6a:42:6f:5e:e9:da:c0:f7:9c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Validity
Not Before: Oct 10 22:01:15 2026 GMT
Not After : Oct 11 22:01:15 2026 GMT
Subject: CN=90e5350e7db2eb16d082e6d5886517ffb2375e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:e7:e4:f3:64:a3:2f:5b:49:24:0f:9a:d6:
f5:c4:dd:69:a0:dd:f9:d0:5b:08:48:73:44:33:d3:
86:82:3c:18:60:60:4f:ac:7b:03:57:19:6b:cc:d0:
5e:5b:e0:34:e5:14:e6:73:fa:e4:d3:e4:8c:0e:27:
f0:d9:90:8f:7a:6b:35:33:39:d1:6f:e1:9c:82:71:
07:a0:c7:7f:ae:cc:72:c9:79:9d:59:cd:ed:1c:28:
05:94:25:e4:6a:c5:bd:7d:1a:47:7f:1b:da:e2:07:
46:bc:0f:ce:a9:db:e1:05:09:43:fe:e0:af:c7:8f:
c4:d8:f7:06:05:e3:67:21:de:cb:3f:37:7a:76:71:
8f:e3:d5:94:92:a4:7e:05:12:2d:e7:74:e9:20:89:
ee:b1:17:1c:be:50:b5:8a:7d:e1:59:27:3f:e2:ac:
75:48:43:8d:d6:d3:6c:9f:11:d0:bf:bb:f3:d8:59:
1f:4c:11:21:c3:df:0c:22:e1:8f:b2:6d:81:3b:cf:
a6:f5:b0:1f:3c:d3:3e:6c:38:12:1e:2b:3d:46:c8:
03:88:7e:13:38:41:ef:8f:cd:5b:23:99:ba:5d:a4:
0f:55:b9:aa:70:31:90:f6:93:8b:0e:cf:e9:72:c7:
15:f5:d8:57:dd:d8:af:62:2c:ec:69:52:43:d1:e8:
20:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E5:35:0E:7D:B2:EB:16:D0:82:E6:D5:88:65:17:FF:B2:37:5E:95
X509v3 Authority Key Identifier:
keyid:2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:5c:0c:3f:33:bc:43:4d:29:5c:f2:92:c1:6a:ef:0b:9e:af:
5e:ce:33:05:43:68:a7:84:02:2e:9a:a7:05:9f:f7:67:17:60:
82:c4:71:8e:65:c0:2d:93:d6:e1:e6:2b:32:07:0e:e9:2f:a5:
90:6f:37:84:45:29:f0:3d:8e:59:83:6d:5e:b1:03:c3:c1:04:
5d:9d:0b:21:4e:dd:19:84:61:3e:ba:ca:0d:e5:9d:e5:f4:dc:
52:41:8e:b7:ea:af:4f:cf:35:61:88:ed:5d:31:15:8e:a7:dc:
52:ef:5c:5b:5b:68:f1:7f:90:30:d8:1d:7e:6b:70:55:93:f8:
5c:c4:9a:a8:30:bb:99:c3:9f:44:87:9f:13:18:ad:04:21:46:
cb:b7:a0:8e:b0:a3:5d:0e:df:0d:30:fe:98:5c:8f:86:1d:9d:
a3:d3:0a:7b:75:d5:52:e2:89:7d:9b:f2:1a:55:1f:29:d1:49:
0d:31:0a:ae:13:49:78:ac:48:aa:38:f3:53:14:7b:6c:f9:e0:
c9:a1:1e:3c:0a:e4:9d:ae:cd:86:30:a7:c4:be:09:e5:8e:10:
6e:2c:44:8f:e6:f1:58:b7:cf:61:e5:2c:87:47:5d:f2:da:5a:
67:49:d2:9c:53:0c:10:ea:aa:27:4f:62:92:04:73:b4:dd:b5:
d8:7d:2d:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEn1aVh3nNqQm9e6drA95zFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiM2Y2ZmE5ZjAzNzc2NWU3NGJkZjJhYzgyY2NiYWJjN2U0
ZmM4ZWQwHhcNMjYxMDEwMjIwMTE1WhcNMjYxMDExMjIwMTE1WjAzMTEwLwYDVQQD
Eyg5MGU1MzUwZTdkYjJlYjE2ZDA4MmU2ZDU4ODY1MTdmZmIyMzc1ZTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApc7n5PNkoy9bSSQPmtb1xN1poN35
0FsISHNEM9OGgjwYYGBPrHsDVxlrzNBeW+A05RTmc/rk0+SMDifw2ZCPems1MznR
b+GcgnEHoMd/rsxyyXmdWc3tHCgFlCXkasW9fRpHfxva4gdGvA/OqdvhBQlD/uCv
x4/E2PcGBeNnId7LPzd6dnGP49WUkqR+BRIt53TpIInusRccvlC1in3hWSc/4qx1
SEON1tNsnxHQv7vz2FkfTBEhw98MIuGPsm2BO8+m9bAfPNM+bDgSHis9RsgDiH4T
OEHvj81bI5m6XaQPVbmqcDGQ9pOLDs/pcscV9dhX3divYizsaVJD0eggTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDlNQ59susW0ILm1YhlF/+yN16VMB8GA1UdIwQY
MBaAFCs/b6nwN3ZedL3yrILMurx+T8jtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jNTRmNDItOTEyZi00YjgxLThiMDAt
NWMwMGZjZDczNjE5LzEvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jNTRmNDItOTEyZi00YjgxLThiMDAtNWMwMGZjZDczNjE5
LzEvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALlwMPzO8
Q00pXPKSwWrvC56vXs4zBUNop4QCLpqnBZ/3ZxdggsRxjmXALZPW4eYrMgcO6S+l
kG83hEUp8D2OWYNtXrEDw8EEXZ0LIU7dGYRhPrrKDeWd5fTcUkGOt+qvT881YYjt
XTEVjqfcUu9cW1to8X+QMNgdfmtwVZP4XMSaqDC7mcOfRIefExitBCFGy7egjrCj
XQ7fDTD+mFyPhh2do9MKe3XVUuKJfZvyGlUfKdFJDTEKrhNJeKxIqjjzUxR7bPng
yaEePArkna7NhjCnxL4J5Y4QbixEj+bxWLfPYeUsh0dd8tpaZ0nSnFMMEOqqJ09i
kgRztN212H0tig==
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:22:47 2026 by rpki-client