Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
File: kMuqazbmzWh0x47UWk-N1xcwMdk.mft (raw, json)
Hash identifier: fzH7Q0qisRk2cWXlWY4QX3SJDdHe0AhgNhqiPLxBCaQ=
Subject key identifier: 1A:D4:6A:B8:9F:56:5C:2F:25:5A:1B:6B:89:63:33:B5:0F:44:7E:D9
Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
Certificate issuer: /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Certificate serial: 01A0D494335602AE8031598F4D6B3728CB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
Manifest number: 0FDF
Signing time: Thu 24 Sep 2026 18:01:17 +0000
Manifest this update: Thu 24 Sep 2026 18:01:17 +0000
Manifest next update: Fri 25 Sep 2026 18:01:17 +0000
Files and hashes: 1: kMuqazbmzWh0x47UWk-N1xcwMdk.crl (hash: Xis/XmbE2SzuHObsNa7eJTl6RctY5Uzg4gKxx9Ijrkg=)
2: pMXoRrm1A-T70xPjALrZ4oMq61E.roa (hash: FsTM7joUHNqdKecmC2zVhM+EhuHDUQROQu4Azrsbbr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:33:56:02:ae:80:31:59:8f:4d:6b:37:28:cb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Validity
Not Before: Sep 24 18:01:17 2026 GMT
Not After : Sep 25 18:01:17 2026 GMT
Subject: CN=1ad46ab89f565c2f255a1b6b896333b50f447ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a8:6f:2f:69:d0:78:4e:c4:44:ee:8c:55:fe:
2a:58:32:84:3c:4c:5c:2e:d7:dd:d5:71:a4:14:43:
1e:0e:39:5c:fb:d9:f4:3d:77:23:f9:4c:b7:19:18:
2b:a9:98:80:d5:a3:6c:b5:6e:fe:84:46:e8:94:a6:
50:e3:31:70:b6:8d:48:9f:45:ea:c2:da:6c:a2:d9:
79:8e:48:c5:6f:1f:4a:68:ff:29:f8:c2:68:7b:e8:
e3:1b:50:d3:ef:d2:86:16:fb:65:ee:f0:14:59:30:
8f:a2:d2:5b:16:a1:13:e1:c7:a0:71:0d:4f:e7:5f:
42:8f:30:05:2b:dc:e4:be:08:a0:59:07:11:82:f3:
e0:f0:23:10:3d:41:fb:fb:84:09:41:cc:85:eb:f8:
86:15:9a:5f:95:91:3c:9c:97:73:d3:9b:18:53:bc:
ba:57:a7:b9:e4:45:7c:46:4d:ae:fc:ba:96:d7:f9:
3b:cd:92:bb:cd:c6:f4:4f:ab:17:14:e6:66:4b:d3:
c8:5d:b6:ee:cb:e6:5d:e9:43:b0:c1:b6:ad:ad:12:
f6:d9:3e:e3:d5:cc:a2:e0:eb:f9:05:ab:3a:79:61:
cd:77:78:02:56:fc:31:c7:d3:30:88:92:53:d3:6b:
b5:b7:72:2f:6d:70:82:2b:8e:18:9f:ff:c6:c6:7f:
3a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D4:6A:B8:9F:56:5C:2F:25:5A:1B:6B:89:63:33:B5:0F:44:7E:D9
X509v3 Authority Key Identifier:
keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:aa:f2:1a:d5:7d:4e:6d:48:a7:be:dd:cd:13:b2:40:f1:1a:
4b:ba:6f:c0:b8:3e:48:cd:17:0b:74:a3:1c:ba:e9:b6:8c:af:
5b:09:cb:f1:1c:96:1b:bf:d4:43:6e:f3:92:94:5f:cd:b6:7f:
e5:8c:4e:27:aa:79:bf:b2:45:c6:64:f9:de:8a:69:42:0c:12:
ef:55:b7:ce:3e:03:66:65:21:38:59:bf:45:0e:65:8c:c8:63:
8d:b9:c6:38:44:42:e5:8b:c4:68:b6:e7:1d:88:48:75:7e:da:
ab:3b:2f:3b:bb:ae:f5:12:51:7e:94:15:a9:77:77:8f:9f:82:
03:a0:6e:de:48:b3:cd:e6:06:bf:17:49:87:a8:90:96:65:ae:
70:59:75:f0:10:3f:1a:0a:89:36:5b:4a:48:1b:47:e2:87:74:
45:f9:4c:b2:9c:cb:c4:e2:11:ca:2f:75:67:0a:39:28:1a:f4:
c3:b5:1c:33:af:47:ec:21:e9:9f:62:52:8d:1d:d0:43:01:84:
93:91:19:20:db:9d:d5:e0:c0:be:e5:e0:be:70:4c:f2:c8:ba:
d1:56:0c:e2:54:23:4d:25:bc:01:18:aa:5f:66:43:ab:c9:42:
0e:f6:8f:81:de:81:88:4a:63:13:0f:59:31:04:71:91:0b:97:
df:e7:3c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:17:37 2026 by rpki-client