Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
File: kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft (raw, json)
Hash identifier: w1prwxENWc6Sn4BtsVmEVI0dIaI+DZd87TAFFgH4jbA=
Subject key identifier: 47:B3:76:40:B7:32:F5:4A:18:B1:C3:F1:C5:8F:6A:91:ED:F5:A7:88
Authority key identifier: 91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
Certificate issuer: /CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Certificate serial: 01A0D0494A93044A0221209BA22EDAB764BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
Manifest number: 1A78
Signing time: Wed 23 Sep 2026 22:00:59 +0000
Manifest this update: Wed 23 Sep 2026 22:00:59 +0000
Manifest next update: Thu 24 Sep 2026 22:00:59 +0000
Files and hashes: 1: kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl (hash: Jds6iemkf+sPZweBytIbnfn/AldF7Bu+K5MSMvFOIwo=)
2: oPGWWYaAX9Sd9i7DrFXYN9EHrLY.roa (hash: gWn6/oluANX78L0hnctxoTZX7zawfsnjM4XEj/gL06s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:4a:93:04:4a:02:21:20:9b:a2:2e:da:b7:64:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c1c85bf5c53471a997ef9fa999d0c16be85444
Validity
Not Before: Sep 23 22:00:59 2026 GMT
Not After : Sep 24 22:00:59 2026 GMT
Subject: CN=47b37640b732f54a18b1c3f1c58f6a91edf5a788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:69:54:94:ca:da:76:6a:d6:48:4e:75:7c:8f:
22:34:e3:5f:4a:f1:2b:c1:34:2f:02:a8:04:cd:dc:
13:dc:74:26:30:45:d7:10:a3:6c:bd:a9:8d:1b:e0:
49:42:d7:37:0f:62:af:ad:3b:b7:c5:96:12:f4:02:
10:0e:18:06:2a:c1:96:d8:e5:d0:83:68:1a:89:36:
40:e6:3c:92:13:63:e7:9c:71:9a:ff:dd:43:20:4b:
12:a5:94:1a:68:4c:6c:5b:be:09:79:95:b9:91:64:
56:ec:c8:15:87:df:72:7a:0a:7a:55:66:9c:b1:8f:
b5:12:bf:7c:de:7e:37:0c:ee:16:02:43:3d:e4:7e:
42:51:6e:ef:7f:ec:df:5a:2d:6a:af:5f:ba:82:b9:
38:f7:b1:62:b8:50:77:0a:4e:17:c8:78:32:8c:ac:
9b:39:3e:2c:cd:f0:8b:c0:62:f7:3f:25:01:fc:5e:
01:71:3c:ce:42:07:e0:7a:7d:bf:5b:0c:e4:46:bd:
1a:c5:0b:0e:ff:18:58:6d:1f:ca:92:f5:5d:f1:ab:
a0:ca:0a:31:46:6b:f0:f1:d4:aa:ea:6b:31:15:7d:
21:56:3e:2e:d0:8f:28:e6:60:c9:12:74:e2:a7:32:
c4:f8:6a:bf:44:7d:4b:64:fa:95:d1:8a:08:1f:d9:
ea:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B3:76:40:B7:32:F5:4A:18:B1:C3:F1:C5:8F:6A:91:ED:F5:A7:88
X509v3 Authority Key Identifier:
keyid:91:C1:C8:5B:F5:C5:34:71:A9:97:EF:9F:A9:99:D0:C1:6B:E8:54:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcHIW_XFNHGpl--fqZnQwWvoVEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0347d3-e54c-44c0-8f7a-4514374e6ffa/1/kcHIW_XFNHGpl--fqZnQwWvoVEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ab:25:28:53:37:a7:7f:52:70:9f:44:fa:4a:5f:61:79:59:
a1:ed:c4:74:2b:ba:fd:36:32:e1:97:db:55:20:6d:2b:b1:aa:
d5:b5:31:d2:c8:41:eb:85:c6:9a:ce:c0:35:b3:b6:13:95:13:
e6:44:26:d7:7f:e7:dd:f0:01:4e:a5:ba:a9:26:f3:ed:48:09:
96:f2:65:d3:2b:da:08:b7:ae:f8:ef:9d:68:43:77:6c:93:b6:
de:49:25:cb:37:7b:ed:a2:2d:8f:01:ed:50:bc:0c:12:fc:3a:
09:01:82:0d:0e:9b:02:98:c6:86:36:2e:1e:2a:03:95:e4:41:
46:5a:12:36:62:83:c2:78:14:ce:39:cf:7a:ea:98:e5:0e:88:
eb:4b:a2:4c:7d:57:1c:4c:7d:19:7e:b8:75:f9:62:a4:21:0a:
1e:18:7c:39:52:29:fc:7b:e6:15:f9:b6:7d:a9:28:27:6e:ef:
73:44:04:9f:5f:5f:c3:47:52:86:68:6a:64:cd:1a:d6:c5:6d:
0f:81:89:cf:c3:a7:5a:39:95:9a:fd:21:24:7e:aa:ac:17:62:
b4:7c:db:c4:45:1f:fa:d0:cf:8f:35:37:a7:8d:e1:61:22:c7:
3e:fb:1d:41:01:a4:14:21:b8:c0:00:e2:3b:e6:18:6c:b2:cb:
86:45:5b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:37:55 2026 by rpki-client