Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: gncfzndJ097ryU69Gdxtt3rrIhiXxzNvy+VBCpK4CIU=
Subject key identifier: 81:33:E1:BC:03:B1:1D:24:B7:E8:AD:6F:CF:F8:AE:24:D5:A1:BE:0F
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 01A1242F56A1EBEF9813F91F5C17DE77C60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 08F2
Signing time: Sat 10 Oct 2026 05:00:44 +0000
Manifest this update: Sat 10 Oct 2026 05:00:44 +0000
Manifest next update: Sun 11 Oct 2026 05:00:44 +0000
Files and hashes: 1: CiBYmXE-RogiK1Rw18kHHSv6Lc0.roa (hash: tKtvxHVgjyX0+ghMhYs0J9woVAdgsT0NzRRsOsmIW4c=)
2: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: EWBXSFyhPySTWSpXEs7dO7SUv4Ut1a9qmtijA6spsjI=)
3: qFCsaANcR70aOKdL9jcGSnp3Nd0.roa (hash: ru6fgoLPFWNbB/rS7n0ntPU242iXsQuLTOqT36UGbKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:2f:56:a1:eb:ef:98:13:f9:1f:5c:17:de:77:c6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: Oct 10 05:00:44 2026 GMT
Not After : Oct 11 05:00:44 2026 GMT
Subject: CN=8133e1bc03b11d24b7e8ad6fcff8ae24d5a1be0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cc:d4:7f:7c:10:81:6e:84:8e:a4:7b:c1:16:
57:91:e8:61:03:40:69:c2:e5:d9:e6:ba:c4:e8:15:
e8:5d:25:ab:58:df:f9:1b:09:35:89:42:62:2c:de:
16:a9:6f:12:37:8b:83:40:28:93:2b:a5:bf:20:2b:
89:75:b7:59:b2:13:0e:15:1b:0b:2e:72:8a:bb:af:
0b:8b:64:87:9b:b4:fc:0f:60:c7:7a:2d:18:70:a4:
ad:e3:b4:77:64:c7:6e:1b:a4:84:63:c5:71:1c:52:
1a:8e:1b:af:67:08:8b:b6:38:d7:71:07:88:10:e1:
94:2c:ce:3b:19:29:58:6d:d2:ad:b4:74:93:21:64:
86:60:c6:2e:ae:b9:6f:68:a1:7e:7b:bd:9a:49:85:
23:67:83:ee:d4:28:6e:b2:67:d3:bb:64:9d:f3:49:
5c:44:e3:f8:db:f2:c6:d7:91:9b:67:f0:9c:40:89:
65:3f:da:e1:02:95:f4:2c:f0:42:b0:78:01:af:a0:
9b:7f:aa:4a:66:40:2c:38:7a:8e:7b:3b:b9:c6:8f:
36:a9:11:07:4e:af:ca:74:8e:96:df:11:ef:78:e4:
5b:46:0b:0e:77:d1:10:bc:36:e6:16:f6:e3:c8:ad:
63:d7:ea:73:89:af:fc:08:c8:d4:52:44:14:3f:d9:
ea:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:33:E1:BC:03:B1:1D:24:B7:E8:AD:6F:CF:F8:AE:24:D5:A1:BE:0F
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:0f:59:c0:9f:b8:c6:69:00:45:b2:86:14:3c:e8:18:10:3a:
5a:ef:74:1f:01:c5:71:82:6b:5e:0f:5c:d6:26:c8:f4:a7:cd:
4e:7a:28:99:db:5a:49:97:3a:1c:e1:b0:4f:1f:e2:18:bf:5a:
30:2e:f9:ef:fd:82:a3:f9:7b:e7:f0:d6:29:52:ac:64:64:bf:
e9:e4:1b:dd:d1:2b:f9:02:17:ee:47:70:7b:24:c5:d3:47:b3:
a6:e0:1a:b5:86:0e:f1:0e:20:c9:a3:01:7b:af:c8:fd:94:36:
a6:2a:56:c1:1b:29:86:dc:e7:b9:fc:ff:ff:49:6d:77:89:d4:
8a:1a:df:ed:11:68:3f:7b:12:78:7e:6b:ed:b5:25:e0:c2:c9:
2a:52:9c:36:7f:f5:c4:96:59:70:c0:f4:96:12:e3:3f:50:a4:
56:40:8d:bd:e5:a3:70:1a:5f:bb:14:6c:d9:4a:e4:6a:71:19:
d3:4a:c0:0d:79:59:d4:f5:f4:72:43:5d:74:b4:6a:34:f2:f5:
eb:ef:93:f7:8d:2d:21:73:a0:4e:86:f7:a9:45:52:09:dd:0a:
c2:9d:11:82:63:21:56:f4:aa:6b:b8:9b:f5:4c:be:5c:ad:e6:
94:c5:96:03:ce:80:c6:70:09:a8:d9:0f:e0:54:e1:9e:74:0d:
25:69:4b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:04:35 2026 by rpki-client