Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: 2kIsYbZYa+zjlQfYOe7+pmKsk/7yr8TbEHe/ts8j0Dk=
Subject key identifier: D8:9A:09:6D:16:65:CF:FF:64:3F:82:3B:BB:A5:CC:25:57:B3:77:D9
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 01A0BDD4AECF1BDCA70780CFEB9D7477C80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 1A67
Signing time: Sun 20 Sep 2026 08:00:27 +0000
Manifest this update: Sun 20 Sep 2026 08:00:27 +0000
Manifest next update: Mon 21 Sep 2026 08:00:27 +0000
Files and hashes: 1: Ym3zwZvIklwn7so4hL0dv1aKBW8.roa (hash: qOJfCzveyraO0OeXrlle0Smp5KbGhvlylearMNdgHnk=)
2: YxY1BNqNntb9_rMbUTeJ_0YPx2Y.asa (hash: 9EJbKH7qVFxDEjq7ju1hKcNKpr3FzmvX6YfOfaFcrXE=)
3: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: GgvJgnkwcF1rAzPQMre/qR6wN+jarqQTlfVr9U3FD6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:ae:cf:1b:dc:a7:07:80:cf:eb:9d:74:77:c8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Sep 20 08:00:27 2026 GMT
Not After : Sep 21 08:00:27 2026 GMT
Subject: CN=d89a096d1665cfff643f823bbba5cc2557b377d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:67:6d:02:f4:fa:dd:2e:b0:35:12:fd:c4:03:
a6:df:15:7a:b2:d4:f0:78:95:55:de:de:1c:9b:b0:
a2:2c:0c:5c:72:e8:2b:d5:1b:5c:26:2a:84:44:1f:
a5:95:4f:76:f1:c8:1d:8e:6f:cb:a9:a4:1a:c6:1e:
a4:ce:f5:f9:23:b8:d5:e0:bc:10:29:62:ce:73:00:
cd:a9:cf:d4:ff:0e:92:e2:06:c4:df:a8:a4:7e:56:
ec:05:5c:2a:31:c8:17:b5:60:4d:aa:f5:19:44:8c:
0f:62:e6:bb:32:99:d7:33:2a:d0:4a:12:f0:55:7c:
d0:22:b3:56:f3:16:e4:f1:06:0e:1c:d7:f0:99:0e:
21:a1:a8:35:1f:c2:f2:34:f9:53:f7:f7:17:f3:98:
55:1d:e2:f4:00:bb:b1:f6:43:e8:b4:3d:6b:a8:84:
bc:11:71:1c:1c:ce:26:25:a2:de:1d:e4:92:e3:ed:
51:8f:45:af:dc:9d:cb:4e:db:d7:92:e3:9e:9f:25:
b2:a0:87:54:2d:f8:76:be:d9:5b:47:13:76:9e:e0:
88:8a:52:77:8a:21:ab:fe:39:9e:4d:8a:ed:4e:f7:
67:58:26:39:7e:29:b6:39:1d:69:9e:26:ae:38:56:
cf:b8:4c:4b:20:06:45:1c:a2:8c:d3:d0:98:bb:fb:
e5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9A:09:6D:16:65:CF:FF:64:3F:82:3B:BB:A5:CC:25:57:B3:77:D9
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3a:82:3a:51:ec:f1:b3:5c:dd:f4:b2:de:cf:0d:62:8a:fa:
6e:cd:1a:38:0d:2e:36:2e:bb:6c:7c:ff:d6:9f:59:b8:94:90:
b3:bb:b1:2d:c0:86:90:97:e6:7d:b2:08:0e:1a:8e:79:a6:25:
c1:f7:5c:5e:73:32:a8:48:94:6b:e0:f7:5d:41:7a:7e:a5:b2:
4f:70:f9:97:e9:72:53:78:30:67:60:15:d0:0a:d3:58:15:c9:
33:e4:5e:bf:dd:d1:9e:ba:a8:2f:57:d0:92:6f:28:00:76:19:
7f:82:69:5c:8f:c4:6a:11:99:9c:ea:66:df:dd:6a:20:60:6d:
b9:c5:16:98:23:37:fd:6e:11:85:34:80:d7:f8:c8:d8:5d:51:
20:3d:cd:0e:1a:20:08:fe:43:3c:6c:60:85:db:c1:fb:fe:a8:
f8:16:e9:69:27:ec:bb:f3:2a:ed:aa:4b:f4:27:61:b7:30:c7:
c2:85:62:fd:2f:03:37:da:29:fe:47:43:f3:7b:e9:f4:9c:46:
10:ce:31:9a:72:a4:ba:58:44:33:2d:d1:a4:6d:68:99:af:15:
90:66:08:9c:6a:a3:71:4a:4d:3d:ac:89:fd:6f:c0:f7:52:1f:
79:c7:13:e2:d0:c9:af:b2:a0:bb:d2:a4:05:78:e0:b1:96:69:
ca:02:af:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:47:30 2026 by rpki-client