Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: zakTquyuiMKwAnHUnADTUPJRuB4ELneYmfJBNyo79xg=
Subject key identifier: 30:A8:A9:20:3B:17:74:15:54:ED:AD:46:DC:F3:AE:5E:9A:C8:C7:EB
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 01A0E09813EBB0538D4B620D68FBC70E80CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 02:00:57 +0000
Manifest this update: Sun 27 Sep 2026 02:00:57 +0000
Manifest next update: Mon 28 Sep 2026 02:00:57 +0000
Files and hashes: 1: 8JbX4W9CpZR4sp8oXbshsMu3qhg.roa (hash: hCHQyL16C72+1THFmVb/zaNecTBJgYxVKSF0WwCJuaU=)
2: AVx1s96DRHZcCwdlQg5COsBPl7g.asa (hash: wYwV0iDMhs5FKfv+LLpy2aNRbVxO/Y+rGm83NlQ+S24=)
3: BiY8FkJ6QhxFh-KpB3NsT2LpAnQ.roa (hash: ube55hCllmSHhMFruM84ELj1ZKtITmMvONboq60emvo=)
4: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: /DbZUKTGglBm45hvD45FzcgON2LTJGLk+lcFqrlaXuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:13:eb:b0:53:8d:4b:62:0d:68:fb:c7:0e:80:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Sep 27 02:00:57 2026 GMT
Not After : Sep 28 02:00:57 2026 GMT
Subject: CN=30a8a9203b17741554edad46dcf3ae5e9ac8c7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d1:73:7b:d4:35:26:ca:46:cb:91:13:8c:77:
67:c3:6a:0d:44:7b:84:1e:34:00:f1:36:d8:56:8b:
74:83:16:0a:11:77:47:fd:00:39:1d:47:01:e8:dd:
9e:82:7e:76:ca:3d:49:43:17:aa:66:07:31:f5:d0:
51:aa:ff:06:99:6e:a9:49:97:a7:42:82:3f:6a:0b:
bf:ef:38:55:ba:f0:d5:0d:a6:36:bf:0f:54:ea:91:
b3:40:0c:d5:98:2b:2f:4e:60:0a:5a:4d:f1:c3:59:
03:26:92:2f:16:25:5f:81:00:69:f0:64:bb:e7:c8:
ad:9a:6e:87:69:46:16:8f:15:18:a5:c6:c6:73:82:
a5:7a:2e:3f:97:66:ad:93:c5:d5:ec:9b:e2:9e:03:
1d:14:46:1b:c3:f0:1c:70:6c:89:e4:4f:e1:48:9b:
af:1d:69:5f:a3:df:e7:e5:3e:d8:bf:bf:85:93:4e:
1d:6f:0a:3b:55:a2:da:16:46:1c:74:87:4e:80:78:
00:bc:a5:db:6c:38:69:5f:41:1e:9d:b5:d9:d3:a8:
09:3e:29:a2:ff:15:50:b4:48:c2:f2:0a:01:ae:01:
64:19:a0:3f:44:38:70:5f:e6:a3:65:ea:6d:aa:ca:
4d:2d:0d:d7:1b:76:18:39:65:67:f5:e1:3f:96:52:
83:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A8:A9:20:3B:17:74:15:54:ED:AD:46:DC:F3:AE:5E:9A:C8:C7:EB
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fc:bf:f4:a2:ec:cc:52:84:93:db:5f:fa:99:8f:af:9d:cf:
4b:1c:91:c7:eb:b6:a1:5f:63:d3:2c:b4:48:41:60:a5:0f:eb:
5f:1b:00:d8:c4:d2:f0:26:f3:2d:60:7e:6d:9d:ca:b4:67:e6:
3a:41:37:2d:29:75:1c:fb:12:d8:b0:92:09:99:36:af:ba:75:
02:16:e0:1f:9d:83:aa:0e:8c:31:ce:ee:b8:e4:f9:fb:bb:86:
18:9e:28:b3:b0:a1:eb:94:3d:14:1a:61:e6:65:32:0b:fd:7b:
5f:35:8e:1c:d8:08:36:d4:32:84:74:e0:2a:c8:e6:ba:de:c1:
72:a7:10:44:8b:90:59:65:46:25:16:cc:a8:d8:1d:e4:e1:1c:
25:ec:35:5b:60:76:71:37:fe:f9:88:90:98:6c:47:e6:05:53:
60:09:46:6f:6a:6b:06:f6:68:96:96:06:28:d5:cc:ca:d4:99:
e1:44:35:62:62:10:9a:b6:4a:d0:57:78:be:11:55:85:7f:f9:
74:7a:40:a8:bd:d0:b5:39:94:f8:00:47:a1:64:81:c6:d1:b7:
e8:13:5c:97:44:3c:e1:0e:a4:1d:a9:d4:14:ba:b4:2c:00:09:
15:de:d7:03:5c:cc:d5:04:a6:9e:99:26:fd:9a:7b:b0:04:f2:
b4:28:70:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:37:52 2026 by rpki-client