Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
File: kNdTolR-A6Sw0vkccOnOTkRoBBg.mft (raw, json)
Hash identifier: e1N//Upi2guP2MbiF4lWzMouKQ19/bA0Bk2zb/zXrm0=
Subject key identifier: 1F:08:C9:EC:E2:96:8F:E9:C4:26:77:D0:F7:53:27:B9:78:5C:CA:F6
Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
Certificate issuer: /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Certificate serial: 01A0EB89DFA15A3C853521CFDD8EDE40D98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
Manifest number: 0F1E
Signing time: Tue 29 Sep 2026 05:01:16 +0000
Manifest this update: Tue 29 Sep 2026 05:01:16 +0000
Manifest next update: Wed 30 Sep 2026 05:01:16 +0000
Files and hashes: 1: Mk7_Zq9Rpk43_vAbKxyUcFK-u8s.roa (hash: VGCcTcxG7jSWPwlxbtqAn1nYTHEFZWiZCyYyw1eM6QU=)
2: kNdTolR-A6Sw0vkccOnOTkRoBBg.crl (hash: NNLHPEKxwg4vtRnWnmt8EVn69+CoKTJ/zXsg9kf+3NA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:89:df:a1:5a:3c:85:35:21:cf:dd:8e:de:40:d9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Validity
Not Before: Sep 29 05:01:16 2026 GMT
Not After : Sep 30 05:01:16 2026 GMT
Subject: CN=1f08c9ece2968fe9c42677d0f75327b9785ccaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:09:8f:34:70:ec:88:bd:bb:4d:0b:dc:68:88:
82:96:e5:7f:79:e0:51:5d:04:57:53:2a:d7:e4:d4:
e1:22:20:c7:73:fc:9e:91:9f:b5:b3:8b:fc:f8:0a:
45:94:9a:af:a6:76:81:8d:80:15:b0:39:eb:d3:7b:
8e:ce:d0:60:7d:6b:04:72:5b:7d:79:10:c3:4e:e7:
fc:84:a9:13:ff:58:86:b2:49:e7:df:ae:60:98:e7:
ee:45:f4:cf:98:fe:52:0a:4a:63:a9:36:16:3b:f3:
3f:cc:6e:a1:52:45:4a:b2:c0:f8:1d:10:0f:d6:bd:
99:a1:61:d4:ed:7a:a2:81:36:bb:be:2c:0b:b8:5c:
d6:7f:a4:19:e0:47:d1:14:49:6d:74:a3:f3:0f:2e:
90:26:82:ea:3a:1c:5d:60:11:5a:be:7f:69:5f:2f:
71:c1:ce:61:23:38:97:56:c7:42:80:90:7e:ef:b5:
38:7a:21:60:fb:d5:92:43:2e:84:6b:fd:1f:f7:3e:
e6:a7:82:99:de:54:aa:c1:9e:42:60:17:18:66:fa:
34:ad:e9:6d:02:33:2d:70:1c:74:d2:3d:b3:15:12:
7d:0a:3f:01:a1:81:28:91:33:c3:1c:97:07:62:42:
76:76:07:f0:c8:58:ed:44:b0:87:20:9b:09:c8:d0:
c2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:08:C9:EC:E2:96:8F:E9:C4:26:77:D0:F7:53:27:B9:78:5C:CA:F6
X509v3 Authority Key Identifier:
keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:19:22:4c:e1:00:92:dd:c0:61:46:35:a1:37:38:61:f4:53:
42:a2:6c:36:31:0e:a1:d7:ea:9a:15:2c:52:81:98:1c:30:bb:
db:72:f0:f6:0a:e1:29:62:63:a2:85:70:75:d0:59:2e:5c:0e:
4b:8e:f9:7e:c2:83:bb:f2:78:04:35:8e:20:a3:5b:c0:39:31:
bc:93:75:77:47:10:12:51:30:fc:76:b1:ac:8c:46:4f:6e:9c:
8a:fc:ba:af:0b:57:f1:b8:36:ad:0f:24:7d:85:ec:27:4f:b3:
5d:59:1c:23:ee:eb:56:7f:05:eb:76:b1:fd:d8:37:10:f5:f9:
b4:77:1f:98:69:a0:a6:59:04:13:d1:99:10:f5:f8:d0:3f:f9:
99:e6:59:c9:79:31:c1:88:21:c4:88:d1:1a:18:33:89:b2:a6:
da:c9:f7:4b:e5:74:1c:34:ed:b6:72:7d:e6:8e:e4:c1:6b:7a:
2b:04:54:f4:09:a8:b7:53:a2:a4:b7:cb:4d:9d:fc:01:9c:68:
23:c6:21:b4:6c:90:6b:ea:a6:d8:ea:5c:b6:75:9e:c6:a0:aa:
f4:58:5f:a4:40:24:23:62:7f:5f:c9:24:5b:50:3d:c3:cf:3e:
b3:d3:16:e9:49:24:cf:05:7c:02:d4:3f:56:6a:cc:54:70:66:
fe:d5:f7:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrid+hWjyFNSHP3Y7eQNmMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZDc1M2EyNTQ3ZTAzYTRiMGQyZjkxYzcwZTljZTRlNDQ2
ODA0MTgwHhcNMjYwOTI5MDUwMTE2WhcNMjYwOTMwMDUwMTE2WjAzMTEwLwYDVQQD
EygxZjA4YzllY2UyOTY4ZmU5YzQyNjc3ZDBmNzUzMjdiOTc4NWNjYWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwmPNHDsiL27TQvcaIiCluV/eeBR
XQRXUyrX5NThIiDHc/yekZ+1s4v8+ApFlJqvpnaBjYAVsDnr03uOztBgfWsEclt9
eRDDTuf8hKkT/1iGsknn365gmOfuRfTPmP5SCkpjqTYWO/M/zG6hUkVKssD4HRAP
1r2ZoWHU7XqigTa7viwLuFzWf6QZ4EfRFEltdKPzDy6QJoLqOhxdYBFavn9pXy9x
wc5hIziXVsdCgJB+77U4eiFg+9WSQy6Ea/0f9z7mp4KZ3lSqwZ5CYBcYZvo0relt
AjMtcBx00j2zFRJ9Cj8BoYEokTPDHJcHYkJ2dgfwyFjtRLCHIJsJyNDC3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8Iyezilo/pxCZ30PdTJ7l4XMr2MB8GA1UdIwQY
MBaAFJDXU6JUfgOksNL5HHDpzk5EaAQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jYzkwOTktNzEwMS00NzJlLWFlZmMt
NWViNjZiY2UzMThkLzEva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9jYzkwOTktNzEwMS00NzJlLWFlZmMtNWViNjZiY2UzMThk
LzEva05kVG9sUi1BNlN3MHZrY2NPbk9Ua1JvQkJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxkiTOEA
kt3AYUY1oTc4YfRTQqJsNjEOodfqmhUsUoGYHDC723Lw9grhKWJjooVwddBZLlwO
S475fsKDu/J4BDWOIKNbwDkxvJN1d0cQElEw/HaxrIxGT26civy6rwtX8bg2rQ8k
fYXsJ0+zXVkcI+7rVn8F63ax/dg3EPX5tHcfmGmgplkEE9GZEPX40D/5meZZyXkx
wYghxIjRGhgzibKm2sn3S+V0HDTttnJ95o7kwWt6KwRU9Amot1OipLfLTZ38AZxo
I8YhtGyQa+qm2OpctnWexqCq9FhfpEAkI2J/X8kkW1A9w88+s9MW6UkkzwV8AtQ/
VmrMVHBm/tX3ow==
-----END CERTIFICATE-----
Generated at Tue Sep 29 11:25:51 2026 by rpki-client