Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
File: kuDCRw6wpptO-lhbnLLAZ2ErN54.mft (raw, json)
Hash identifier: +LpjQuqfEbWkCVXZ5HG7SBLwBWaE9qi+KeJqPuSFxSg=
Subject key identifier: AE:C6:70:1A:AF:B1:48:46:AE:CA:BD:34:DB:D2:27:3E:51:38:EE:49
Authority key identifier: 92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
Certificate issuer: /CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Certificate serial: 01A0C7B3DDF559961AE0E25555DBC2D9F855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
Manifest number: 1A6B
Signing time: Tue 22 Sep 2026 06:00:48 +0000
Manifest this update: Tue 22 Sep 2026 06:00:48 +0000
Manifest next update: Wed 23 Sep 2026 06:00:48 +0000
Files and hashes: 1: C2qg2Q6lbBzdlBnvS6yqtgeY3uk.roa (hash: ijJYNodWqQV5uQq7Q5J14Dvs1Q1uxMUsTbwAGiSXPAc=)
2: Ptq95uhMbMRV3wAcH1JO0MsySQU.asa (hash: X5wo7l/IsXDPTJJiO2prPaJNo3fg+PfsZU7kiiBt/b8=)
3: kuDCRw6wpptO-lhbnLLAZ2ErN54.crl (hash: bc42qUhhxM6DNVVnq+BigNLPpEQespAEiL1DPixmhc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:dd:f5:59:96:1a:e0:e2:55:55:db:c2:d9:f8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Validity
Not Before: Sep 22 06:00:48 2026 GMT
Not After : Sep 23 06:00:48 2026 GMT
Subject: CN=aec6701aafb14846aecabd34dbd2273e5138ee49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:96:f2:1e:6f:a6:17:3e:9a:f2:56:7f:b3:c2:
c4:0a:9c:89:0a:6f:71:e9:81:ed:09:db:a3:1d:e5:
74:10:e8:5e:26:c8:d4:9c:da:61:ad:49:a7:63:7e:
98:7c:69:6e:b5:22:fb:20:9c:32:74:e9:04:d9:b6:
4c:97:10:d4:1f:bb:75:0e:b0:53:50:8c:bd:e4:a9:
a6:71:fe:c9:8c:8a:59:3c:2d:93:5e:c2:eb:fd:b4:
b0:a8:79:27:ee:80:1c:f1:f6:25:d2:a5:41:fe:1a:
19:b4:76:ab:78:5e:db:80:3e:e5:a1:42:5d:c3:40:
c8:f4:f5:87:ad:a2:c1:dd:6e:d9:c0:c1:11:35:87:
6b:b4:58:f3:57:91:fc:f1:02:52:a5:30:a7:d8:cf:
6f:d5:f6:3a:08:f8:cd:e2:75:5e:63:a0:15:3a:e1:
c3:e6:22:cd:59:38:bf:f2:51:12:53:e1:b1:b4:d6:
f9:71:68:89:3f:72:26:05:a2:cc:fb:bd:9f:d8:2d:
a9:78:7e:75:40:8f:88:4d:f7:16:f9:5d:88:29:95:
8f:6d:7c:fe:5e:cf:cf:2a:30:4a:6d:54:fa:cc:a5:
cd:11:0d:05:29:63:9c:37:0a:a3:b8:82:0d:09:c7:
43:8e:ab:41:43:f9:8e:aa:1e:03:fa:91:f3:95:4d:
6f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C6:70:1A:AF:B1:48:46:AE:CA:BD:34:DB:D2:27:3E:51:38:EE:49
X509v3 Authority Key Identifier:
keyid:92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b6:9d:9c:f4:db:96:ee:68:07:19:b6:64:92:33:d7:7b:4d:
87:83:b9:a4:7a:66:eb:84:01:18:8a:eb:15:f1:10:70:7f:85:
9b:84:6c:2c:99:d4:22:dd:d7:bd:13:ac:09:32:b7:7e:cd:8b:
86:87:1e:10:92:d5:db:1b:0e:6d:e5:9c:41:85:5e:ee:38:01:
44:c0:0f:11:95:0c:fb:c9:58:5f:5e:b5:0f:1f:09:58:65:fc:
37:00:c8:f4:49:fd:20:9e:8c:3c:a7:2f:04:a8:34:61:bb:08:
d8:90:6f:2d:77:18:ea:c7:b7:8d:ac:89:b7:75:2d:4d:00:fa:
06:64:ad:b3:f2:ba:f0:08:c1:be:b4:ad:05:57:33:a3:e1:a3:
c7:de:00:9e:b8:c7:f7:60:cc:b5:64:eb:53:e8:49:33:20:f5:
e3:64:f5:7d:7d:2b:f4:57:89:d8:d0:61:71:b2:1b:15:9f:29:
91:f9:7d:3b:5b:2d:2a:68:fc:be:25:c0:cb:c7:4c:8c:fc:51:
61:bb:76:a0:dc:d9:51:0d:8a:43:ac:bb:99:1c:cd:b4:cc:27:
8a:ac:6c:e8:f2:34:f5:d6:b7:6e:74:b3:97:5e:53:03:ff:03:
b1:6b:5a:3a:bb:ef:a9:78:42:3f:8e:4f:e1:56:95:1e:5a:29:
43:5a:81:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHs931WZYa4OJVVdvC2fhVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZTBjMjQ3MGViMGE2OWI0ZWZhNTg1YjljYjJjMDY3NjEy
YjM3OWUwHhcNMjYwOTIyMDYwMDQ4WhcNMjYwOTIzMDYwMDQ4WjAzMTEwLwYDVQQD
EyhhZWM2NzAxYWFmYjE0ODQ2YWVjYWJkMzRkYmQyMjczZTUxMzhlZTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JbyHm+mFz6a8lZ/s8LECpyJCm9x
6YHtCdujHeV0EOheJsjUnNphrUmnY36YfGlutSL7IJwydOkE2bZMlxDUH7t1DrBT
UIy95Kmmcf7JjIpZPC2TXsLr/bSwqHkn7oAc8fYl0qVB/hoZtHareF7bgD7loUJd
w0DI9PWHraLB3W7ZwMERNYdrtFjzV5H88QJSpTCn2M9v1fY6CPjN4nVeY6AVOuHD
5iLNWTi/8lESU+GxtNb5cWiJP3ImBaLM+72f2C2peH51QI+ITfcW+V2IKZWPbXz+
Xs/PKjBKbVT6zKXNEQ0FKWOcNwqjuIINCcdDjqtBQ/mOqh4D+pHzlU1vFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7GcBqvsUhGrsq9NNvSJz5ROO5JMB8GA1UdIwQY
MBaAFJLgwkcOsKabTvpYW5yywGdhKzeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xM2IwY2QtNTk5Mi00NTYxLTk3Mjkt
YjMwZmUwNThkMTYyLzEva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xM2IwY2QtNTk5Mi00NTYxLTk3MjktYjMwZmUwNThkMTYy
LzEva3VEQ1J3NndwcHRPLWxoYm5MTEFaMkVyTjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7adnPTb
lu5oBxm2ZJIz13tNh4O5pHpm64QBGIrrFfEQcH+Fm4RsLJnUIt3XvROsCTK3fs2L
hoceEJLV2xsObeWcQYVe7jgBRMAPEZUM+8lYX161Dx8JWGX8NwDI9En9IJ6MPKcv
BKg0YbsI2JBvLXcY6se3jayJt3UtTQD6BmSts/K68AjBvrStBVczo+Gjx94AnrjH
92DMtWTrU+hJMyD142T1fX0r9FeJ2NBhcbIbFZ8pkfl9O1stKmj8viXAy8dMjPxR
Ybt2oNzZUQ2KQ6y7mRzNtMwniqxs6PI09da3bnSzl15TA/8DsWtaOrvvqXhCP45P
4VaVHlopQ1qBvA==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:05:14 2026 by rpki-client