Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
File: kR2gx6mUBcRrqthMudk-g0WZyOE.mft (raw, json)
Hash identifier: h8V+NswTezkQeaUSSqpFQw3cy/7pqpaJTqNuWaYUuyo=
Subject key identifier: A0:E5:83:2E:B1:CB:80:35:53:FA:A1:BD:02:06:A8:14:54:75:A3:4E
Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Certificate serial: 01A0F30C405DF9FA5A383E19BD479B68E345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
Manifest number: 1A7F
Signing time: Wed 30 Sep 2026 16:01:01 +0000
Manifest this update: Wed 30 Sep 2026 16:01:01 +0000
Manifest next update: Thu 01 Oct 2026 16:01:01 +0000
Files and hashes: 1: 0kE9whcbqDZPFxCT664hh63BKUs.roa (hash: 5C4ga/+QHi4o11rdDpXGfOfWtVfwE8VOC9vvm4vn/b4=)
2: kR2gx6mUBcRrqthMudk-g0WZyOE.crl (hash: 6fCZyirluLiRQCSGrRyvEF20yM5EeZk335nu2vD/HeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:0c:40:5d:f9:fa:5a:38:3e:19:bd:47:9b:68:e3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Validity
Not Before: Sep 30 16:01:01 2026 GMT
Not After : Oct 1 16:01:01 2026 GMT
Subject: CN=a0e5832eb1cb803553faa1bd0206a8145475a34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:03:d2:c4:10:12:01:02:a2:cd:45:76:58:
dc:28:22:c2:83:42:ce:a2:75:cf:76:fb:21:5b:bf:
07:38:33:f4:1e:4f:b7:b3:41:b6:39:01:d3:81:74:
43:c5:05:ff:c3:45:7a:3f:e6:bf:2c:5c:8c:c6:ab:
06:e2:dd:fc:c9:e8:92:95:f0:29:11:51:f4:fc:11:
e9:99:e6:f1:a1:0b:3d:49:51:44:f3:c0:03:a5:64:
8d:0c:16:7b:ba:ca:1b:46:31:55:d8:68:4f:5b:3b:
98:a9:2d:17:8c:1a:9c:d9:a1:2b:a4:5b:a6:7d:43:
3c:10:a4:4b:2c:56:31:c0:e9:4a:d4:10:13:67:c7:
0d:cf:33:6f:a4:a5:09:1c:46:af:29:12:10:c9:1e:
87:98:54:b9:b2:c7:13:0f:9f:80:b7:22:be:5b:f3:
29:09:6c:86:21:71:fa:31:38:c8:ae:a5:16:8c:db:
74:3d:b4:82:4a:f3:2c:d2:b5:d1:6a:78:53:81:4f:
8b:0b:da:78:ee:d9:d7:5b:ea:04:f0:59:d4:84:94:
83:ee:32:9d:c0:f8:08:6d:06:24:f0:6a:71:06:c7:
ce:42:f5:78:ee:54:2b:ce:7a:13:e4:79:ec:89:c4:
80:ed:ab:ad:f0:c4:de:68:00:f2:b2:51:a4:87:ba:
cd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:E5:83:2E:B1:CB:80:35:53:FA:A1:BD:02:06:A8:14:54:75:A3:4E
X509v3 Authority Key Identifier:
keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:28:bd:4e:14:10:da:2d:ad:60:8e:a8:5d:52:f0:d9:c3:e6:
a8:c2:5e:94:7d:c1:37:4c:93:e9:9e:26:2a:13:95:ac:98:5b:
b2:ef:1c:6b:0f:f8:ec:72:49:1f:37:30:e4:58:86:93:c2:d3:
c5:cf:9b:5b:98:29:76:f5:fe:6e:8d:60:f7:11:1f:0c:5c:5d:
89:38:39:ef:f7:06:80:7d:2e:6c:b3:44:8c:6c:5f:a5:15:c9:
d7:7c:47:12:69:6d:13:9e:93:07:ad:73:59:74:9f:39:6a:aa:
f2:2d:67:b4:8d:87:d0:0d:01:29:6a:58:91:7c:a5:37:c6:84:
68:ca:f9:59:d5:d3:93:cc:32:92:1d:98:52:ad:9e:62:e9:be:
c9:53:a0:14:83:96:36:56:ad:ed:8f:e1:1d:af:1e:de:b0:67:
78:a3:1f:86:9b:38:b1:58:1a:d7:14:24:61:7f:df:82:4f:58:
19:1f:b0:d9:1d:55:c9:0f:46:2b:67:52:7e:8e:46:6b:d6:82:
6b:c7:61:ca:db:d7:a9:54:34:ce:a1:d3:79:c9:44:0e:41:a8:
fa:d7:a5:4a:14:cb:a4:fa:85:01:ac:9a:1f:a0:8f:5c:61:5f:
93:e6:77:85:b7:17:17:b9:79:f8:46:0e:6c:7e:5f:91:c4:b6:
86:c2:ae:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:11:40 2026 by rpki-client