Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
File: kR2gx6mUBcRrqthMudk-g0WZyOE.mft (raw, json)
Hash identifier: fcu3SxaAKUxUsPVe/R6OULZATDYvFL3S2O+m7xaPrzs=
Subject key identifier: 54:5E:0F:73:D1:2C:1B:A1:61:13:19:4A:A0:0F:39:8E:CE:13:63:DA
Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Certificate serial: 01A0F6E99827485B2432C8BBCBEE442FBE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
Manifest number: 1A81
Signing time: Thu 01 Oct 2026 10:01:38 +0000
Manifest this update: Thu 01 Oct 2026 10:01:38 +0000
Manifest next update: Fri 02 Oct 2026 10:01:38 +0000
Files and hashes: 1: 0kE9whcbqDZPFxCT664hh63BKUs.roa (hash: 5C4ga/+QHi4o11rdDpXGfOfWtVfwE8VOC9vvm4vn/b4=)
2: kR2gx6mUBcRrqthMudk-g0WZyOE.crl (hash: SlO2DKaFvoJEaUYsvGofxlOeOD06DemM5HmC2iBVE3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:e9:98:27:48:5b:24:32:c8:bb:cb:ee:44:2f:be:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Validity
Not Before: Oct 1 10:01:38 2026 GMT
Not After : Oct 2 10:01:38 2026 GMT
Subject: CN=545e0f73d12c1ba16113194aa00f398ece1363da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7e:0f:f7:11:f8:4b:2e:20:be:05:70:0a:48:
88:0c:8a:cf:6e:96:36:39:ab:e7:a2:13:25:99:5f:
a6:dc:5e:81:fd:43:0c:30:e1:f5:95:fe:f1:22:23:
1a:aa:ee:44:9d:5f:f2:d6:4e:9e:3d:f0:49:0b:b7:
57:bf:c6:40:d5:df:51:11:46:8b:0b:6e:08:55:c6:
db:75:69:06:a1:50:ab:62:be:46:9b:e9:41:26:a7:
a7:a7:e8:12:9d:4f:ab:e3:ab:fd:4d:bc:f7:a3:35:
37:9e:f2:7f:39:f4:27:7f:1c:0e:56:3a:83:bd:b0:
be:71:23:d8:30:e3:0a:a3:48:74:b8:ea:06:ba:f6:
40:88:64:0f:b2:05:14:66:07:3e:87:6c:56:5c:d2:
2a:2a:1d:ce:bc:1f:7f:13:f5:3e:ff:40:45:2c:03:
d7:d0:05:25:75:a4:78:a6:60:92:e5:1f:4b:33:f0:
cc:dc:ff:11:a0:26:49:cb:b4:40:2f:4c:55:ea:c5:
1f:27:78:0b:f5:00:5f:a3:4b:1a:11:31:e1:f3:7e:
b4:27:6a:89:72:bb:40:73:1f:6a:5d:c7:48:77:5b:
5c:6f:80:5d:c1:18:b8:c3:c3:ce:6f:d4:88:7d:e3:
11:87:b8:61:dd:54:56:a0:44:46:a7:0d:91:78:5b:
2b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5E:0F:73:D1:2C:1B:A1:61:13:19:4A:A0:0F:39:8E:CE:13:63:DA
X509v3 Authority Key Identifier:
keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:db:af:6e:c1:09:f6:d9:e9:42:34:bf:35:99:de:25:2f:9e:
2e:66:b5:1a:37:dc:0d:7b:ed:03:f0:7b:53:15:1b:73:d3:87:
7b:5c:86:12:53:49:9b:95:49:d9:73:4b:27:8d:ef:ab:db:83:
d9:01:e4:ce:06:8a:e6:51:e8:0b:80:c7:97:d1:c8:1b:19:6c:
db:8e:67:6d:c4:9d:15:66:5d:43:eb:3e:60:13:15:82:e3:51:
7b:e9:ca:ab:36:df:85:c8:8f:90:9c:83:99:7f:a5:2e:4a:45:
a2:9f:bb:1b:a0:cd:85:8d:ed:09:1a:7b:4f:9f:85:2c:da:95:
46:de:de:59:5c:72:cb:c3:a9:95:fc:60:c0:9c:84:e1:76:2d:
f5:4b:d0:ba:58:a2:44:ca:95:19:f4:0f:88:51:58:2d:68:08:
42:73:60:c4:ec:8f:cc:81:ac:08:f9:d3:2c:8c:72:4f:ba:7a:
87:17:ba:6d:c2:5a:fe:b3:bf:29:a0:e5:17:1e:5a:8b:88:66:
d7:59:6f:fa:c7:24:e5:14:f6:73:97:7e:a5:09:3f:f5:59:ca:
09:58:6d:56:37:2e:02:05:f2:fa:47:7e:3d:3e:ea:81:76:12:
79:d9:9e:04:66:0a:ad:f2:d3:1b:e1:b4:03:a4:99:b1:34:38:
b1:cc:bf:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:27:31 2026 by rpki-client