Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier: Oe0SJHafUs7u7sVMMbNSdVk3r2mMXnA6dX8ggaTwBzA=
Subject key identifier: 26:21:0E:98:EB:2C:BD:98:99:F4:DF:CE:C8:D4:ED:62:44:04:29:18
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial: 01A0C09EEA11D881DB9C633A0BBF6FC9F6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number: 0ABE
Signing time: Sun 20 Sep 2026 21:00:35 +0000
Manifest this update: Sun 20 Sep 2026 21:00:35 +0000
Manifest next update: Mon 21 Sep 2026 21:00:35 +0000
Files and hashes: 1: HrGcgBvg4DY29ekAPoOs0k_ceU8.roa (hash: Zi9LIDXSmXdYftVe/mbJqu9FZB8L69cv5MK/RNZAW5k=)
2: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: cmkV8jmVU/S2KD9IZkX23aKzGHcieJrMAffGKcpQSpk=)
3: RxNLLXxR-CzB0lCNzFXnXse6o58.asa (hash: +bxHDoutbQA8pq/ltILKkfOw9KUe0ujPJE9JrTsk4Fw=)
4: YVLbsPphUzr0gk62ZWqr-AU_xYs.roa (hash: 40/VqOwzeKbDNYjqt9gFE2PfKWEcwlXPJGHdZ1QMGtM=)
5: xhu-0mZ6I_dG18XDHBeHb4pHzuI.asa (hash: Ckg17sZrLC7ovu4WHIS5uCgsXOtfqzHSeiiwzrs9BRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9e:ea:11:d8:81:db:9c:63:3a:0b:bf:6f:c9:f6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Validity
Not Before: Sep 20 21:00:35 2026 GMT
Not After : Sep 21 21:00:35 2026 GMT
Subject: CN=26210e98eb2cbd9899f4dfcec8d4ed6244042918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2d:15:e2:69:06:8f:5d:33:20:b1:d0:b1:77:
a5:df:33:f4:57:67:08:a2:0b:ad:59:22:da:dd:41:
87:ca:85:3b:2a:0c:d8:4f:13:e4:a2:4c:77:6f:a9:
3f:1f:d1:7c:de:d5:29:94:71:4f:81:20:25:0e:7d:
8e:07:34:04:4f:65:27:33:0c:ff:65:80:fe:60:01:
9a:21:c1:64:55:e9:b7:cf:6b:e6:26:73:a7:d6:c0:
1e:48:bc:11:f7:98:b5:8c:16:fc:ae:ed:0a:7a:33:
7c:74:f4:10:55:d9:f0:ac:73:13:81:34:32:7b:1a:
54:dd:c8:6a:66:e2:b7:05:d1:16:00:c6:ed:c0:9d:
52:8b:0b:62:4e:98:84:ce:ec:ef:a4:99:e5:4d:73:
06:24:3c:01:44:88:87:17:8f:7b:cc:84:64:7a:5a:
b4:21:77:20:0f:88:e3:bf:1e:22:15:6f:a7:78:72:
67:9b:f4:22:7f:d1:71:84:1d:28:04:2d:56:de:7b:
c9:a9:0b:96:30:f6:21:df:d5:a2:56:6e:ef:a6:94:
4f:95:61:99:64:00:7b:29:5b:86:2f:7d:f4:4d:48:
20:bb:b8:bc:00:20:14:9b:2f:1d:07:cf:e2:91:59:
1e:da:cb:4f:7c:40:bc:f2:b7:1b:4c:b4:a5:83:77:
b9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:21:0E:98:EB:2C:BD:98:99:F4:DF:CE:C8:D4:ED:62:44:04:29:18
X509v3 Authority Key Identifier:
keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:88:59:07:89:b2:d2:82:87:91:49:b1:5b:e8:28:5a:69:27:
cf:9d:36:35:84:6a:33:88:fb:b1:4a:42:cc:62:63:b9:15:ce:
21:47:06:7a:12:ac:80:df:a5:4a:91:32:2f:b3:0a:5c:17:50:
9f:23:59:a6:7c:55:19:6a:aa:a9:90:c8:5d:56:79:83:df:79:
15:f0:8c:7b:ee:d5:98:94:d9:4b:dd:da:9d:e4:a2:6f:ae:0c:
52:41:75:94:83:a0:30:e1:1b:31:15:25:66:04:b2:82:0f:9f:
f5:c5:4e:7b:cb:fe:30:d9:7e:ba:60:e1:30:f6:9b:3a:be:d5:
41:83:08:64:ea:35:ea:5d:8b:4f:c9:13:e2:3c:a1:51:42:bb:
51:17:04:4e:0e:e2:75:9e:57:4b:18:e2:1d:97:2d:55:29:2e:
05:35:f8:39:3a:05:bb:b9:9c:ce:37:48:86:90:3c:db:03:7c:
d7:ab:c5:a0:0e:ef:36:3c:7c:d8:a5:06:47:28:22:90:6e:90:
66:ae:ae:e7:10:87:3a:ac:85:37:09:28:0b:c8:db:37:c3:c7:
b9:ee:25:b4:e0:48:2d:b0:51:d7:88:cc:33:5b:86:ec:39:7d:
e8:b4:3c:b9:0c:0b:72:b5:ce:91:5d:ec:7a:0f:41:35:36:ff:
8c:67:25:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:07:06 2026 by rpki-client