Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
File: rs1kyXg317-sBmN92VK97eDCXYU.mft (raw, json)
Hash identifier: AHV5Qe/+crkV8ofuhGLrrp2qvOdAXRdi8GfetGsp2fc=
Subject key identifier: 74:99:CA:86:7B:7A:80:58:C0:01:35:60:EB:94:D0:6E:E3:31:61:5C
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 01A0DA96429964E2AB0BA7721C0D5851B750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
Manifest number: 138F
Signing time: Fri 25 Sep 2026 22:01:15 +0000
Manifest this update: Fri 25 Sep 2026 22:01:15 +0000
Manifest next update: Sat 26 Sep 2026 22:01:15 +0000
Files and hashes: 1: AQy-kY2cHFUJdvCu8RaXSm0u9OQ.roa (hash: RBQiu9sWWqL4vqKsGVfSX3sl/SJ1Xr1YL1xHQKrA3HM=)
2: K-RSBEB1ZNkw3BDgpDKvXT-jHFk.roa (hash: Ek8U88NKRYg8I4QyXUu+1m6S0Vw3QVig3cYX4BA41DY=)
3: WL2FEa958Kjqled1nJg_T9tBeoM.roa (hash: JqTb5QBDeJhpoV0bTkZHjnWe5k2iGZ6/9FsmESELmIY=)
4: eeigoSZvhxriUU8uVwc0KC2ZNqg.roa (hash: BVqjzzOba75rz4RwKPXup3anTRy7Y0r6aHlcT5afx7Q=)
5: gDEbtn2Bm22RWVusEqJbEgaueu4.roa (hash: xXuFvRKXUrwVjGE6wkVPHC4STPuoOyCxY+cA2kJF334=)
6: gqcIGF4cnQ7Zo-s6vBQeyMRZ3Kw.roa (hash: 5WHbZVFPJqF6d7sQt81f3HSwNWk6p/6vqblB7r2uSB0=)
7: rs1kyXg317-sBmN92VK97eDCXYU.crl (hash: e9a06CFsJ8wFbbl2RGOShl24OVYEEySqC2dTyY12Xjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:42:99:64:e2:ab:0b:a7:72:1c:0d:58:51:b7:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Sep 25 22:01:15 2026 GMT
Not After : Sep 26 22:01:15 2026 GMT
Subject: CN=7499ca867b7a8058c0013560eb94d06ee331615c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:68:28:d8:c8:80:ff:08:7e:d8:b4:c7:d2:
fd:16:a5:b5:16:5e:1a:da:68:31:e7:84:3f:7d:a2:
d5:57:7a:27:81:4c:42:ee:6b:7b:9c:ce:f8:59:e4:
85:b2:7b:1a:7e:8a:e5:5c:2e:3b:e8:0a:db:f6:cd:
6f:d3:c8:5f:99:68:c6:df:d8:a3:f6:77:17:57:17:
6e:76:d5:4a:b2:4b:0e:5c:7d:8a:1a:b6:d7:6c:6b:
c8:5d:df:15:8f:22:31:09:ab:d4:d4:72:e8:91:46:
21:35:37:e9:c4:74:c2:93:8a:bd:2d:e3:86:5b:99:
0d:0c:fa:7a:3c:74:c8:48:74:65:3a:60:c9:a8:80:
d5:65:07:8f:18:dc:37:82:d3:81:42:ac:38:e8:4a:
90:e4:40:92:78:95:0e:d0:2b:4c:3b:0f:b1:28:89:
be:a6:37:c1:f4:a2:8d:d6:d6:ae:e3:94:82:ee:d2:
47:12:ee:99:39:0b:86:4e:3f:6e:0a:ef:67:f4:66:
46:a9:88:f9:ef:59:fe:fb:82:81:ee:fb:76:c4:06:
01:02:23:67:de:6f:1c:cc:da:db:c6:cc:69:e7:48:
69:f0:31:36:59:58:10:76:fe:64:06:7e:7c:c1:f7:
a4:0a:88:92:5e:ab:3b:ea:df:4a:3c:67:b7:4e:3b:
bb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:99:CA:86:7B:7A:80:58:C0:01:35:60:EB:94:D0:6E:E3:31:61:5C
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:cc:57:80:12:de:ac:51:e2:70:70:a8:7a:8a:3c:86:f9:44:
7f:f2:58:22:89:65:f6:05:1f:08:d5:1b:c1:e5:08:b6:01:4c:
8e:7e:24:7b:50:ec:13:83:bc:dd:4f:66:cb:3e:28:19:d6:b6:
c2:ca:75:25:e3:02:04:de:6f:3c:d0:96:33:47:70:7d:85:90:
41:9f:bd:a8:c2:ac:55:b8:e0:b6:67:d9:5b:1f:e3:4d:7f:3e:
87:9d:f5:f1:46:6e:b7:54:44:5a:32:d7:78:c1:23:ce:81:e7:
60:7d:88:30:1d:96:41:d8:3e:c1:e9:2b:8b:78:3d:81:ce:22:
f2:42:89:03:96:40:a6:45:cd:98:16:8c:0c:e2:a0:8b:9c:f8:
c9:61:28:d1:ad:b3:db:d2:03:99:0b:4f:8c:19:be:b2:4d:f0:
22:03:30:d1:c7:5a:e8:a1:ac:03:cd:4c:42:10:52:87:4a:d0:
47:f2:95:d1:84:cb:ff:92:e5:d6:d1:82:c2:e9:32:0e:97:ab:
1c:15:d1:b0:4a:3f:44:37:cd:c9:78:48:48:7b:8d:78:86:e0:
b8:02:0b:99:5b:7f:34:a3:ac:e4:85:ce:24:05:5b:c3:84:e9:
b0:d9:c0:d9:c6:f9:8f:16:16:75:60:5e:e5:ea:e5:6f:a9:ce:
47:98:52:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:55:53 2026 by rpki-client