Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
File: kioaZ-LacRLUVZzY29gUH48yd-g.mft (raw, json)
Hash identifier: QkQRDZ7K5V/UxT4iI0QhvCxs7f10r9GdxVNYrm2guyw=
Subject key identifier: B7:AA:BF:88:1A:96:77:BA:51:1F:7F:9F:41:32:92:EA:77:FA:29:EB
Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Certificate serial: 01A0DB04B78B00E80449B867D52C855882F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
Manifest number: 1A77
Signing time: Sat 26 Sep 2026 00:01:54 +0000
Manifest this update: Sat 26 Sep 2026 00:01:54 +0000
Manifest next update: Sun 27 Sep 2026 00:01:54 +0000
Files and hashes: 1: M0wDu78r7xywtOeR44tzruZSaEQ.roa (hash: cLW1VEF1mpLQc7A3cpxalSV9oIYlVU2vXmo5FUgnCVs=)
2: kioaZ-LacRLUVZzY29gUH48yd-g.crl (hash: TOsatKLbo0PTocgxax/RqlT2RSWKQz9K5eC0iZi0y5k=)
3: mUHJF4mGLNcVm-1iZRq7sRrciKA.roa (hash: v1v9ELWgCV5IQ8NqhHOZPn5bOHfjyDlgKXQdmPVfuM8=)
4: vG7UQUChYLey5nR_Sv-0wx1TNeg.roa (hash: S15AVBuDsdwRGeDBytez+VIQASsm2pW1hwEeubDp1fA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:b7:8b:00:e8:04:49:b8:67:d5:2c:85:58:82:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Validity
Not Before: Sep 26 00:01:54 2026 GMT
Not After : Sep 27 00:01:54 2026 GMT
Subject: CN=b7aabf881a9677ba511f7f9f413292ea77fa29eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:00:14:71:ed:49:3a:39:83:c1:a7:98:06:54:
0e:3e:77:58:c5:92:87:37:cc:65:9b:17:6b:da:4b:
f6:4f:4d:47:1f:b4:6c:ac:2d:a2:f4:c5:94:75:ab:
79:58:a9:49:a5:57:00:74:92:f0:02:a3:41:e1:bf:
e0:b4:a5:9a:37:9b:1c:f0:b2:ab:de:8b:74:44:dd:
fb:99:c3:21:d3:59:b0:6e:15:54:6d:8a:44:49:24:
db:62:c8:5e:c7:b2:d8:f6:37:c7:9e:2f:91:eb:59:
76:83:f9:3e:f1:53:7f:7c:c3:e8:f9:43:3b:bd:94:
f3:a1:60:6f:e2:31:d5:66:0d:df:db:e9:65:53:69:
97:61:87:d7:ac:a9:13:68:d9:0f:e3:a7:ff:65:29:
b2:d7:18:35:f6:24:c1:c4:d8:ed:5a:96:2a:0d:28:
b0:19:02:be:8b:6d:bb:b8:2c:7b:b9:3c:94:65:59:
09:7e:ef:76:ea:3b:d4:f8:74:a6:bb:9f:98:e3:c1:
23:b3:87:57:e0:78:32:a3:d2:0b:84:03:27:06:1c:
f9:09:85:e5:d2:04:a1:bc:60:58:cf:b5:a4:a1:4b:
13:6b:72:43:f9:7a:7b:d4:5c:53:92:70:97:b7:f8:
48:78:17:be:f6:9e:88:be:1e:d0:11:2e:08:b7:7a:
90:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AA:BF:88:1A:96:77:BA:51:1F:7F:9F:41:32:92:EA:77:FA:29:EB
X509v3 Authority Key Identifier:
keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:4d:3a:d4:c7:37:ae:f5:a5:6c:51:cd:d6:a0:ab:b1:14:31:
cd:07:b4:a2:e9:2b:e9:60:23:38:73:f1:d1:c1:51:fd:39:85:
ba:c0:a7:7b:aa:bb:69:64:21:ce:d3:89:f6:71:cb:05:93:61:
04:b5:5b:2c:6f:f2:a0:82:10:f3:85:7b:f6:a3:41:4d:e4:69:
0a:c0:07:5c:91:4b:07:8b:ed:0d:cf:d3:49:9d:40:7e:3a:96:
24:2f:34:3f:74:60:53:5b:12:28:8c:81:d9:64:f9:89:14:87:
51:01:72:2f:6b:6b:f1:d4:06:5b:d1:2e:39:39:15:b0:be:b4:
91:18:59:46:d0:2e:d1:93:86:dd:f9:84:06:79:a7:99:c3:be:
b0:d7:ec:1a:d1:a7:6f:b2:bc:5a:8e:76:a5:54:94:ef:35:08:
5e:49:c7:b2:d2:b1:18:fd:04:15:e0:66:ec:77:45:d1:54:95:
b8:93:12:e2:6b:d8:ee:32:d8:a7:de:f7:84:f4:67:97:51:eb:
56:64:25:06:7a:03:01:e5:98:77:57:62:9b:a6:74:86:5a:8b:
78:10:9e:cb:bc:f2:c0:0d:52:d5:76:d1:53:99:e6:9c:25:bc:
2d:22:ee:9d:6f:2e:bf:d0:da:5b:59:e4:c7:2c:4d:7c:58:28:
7f:c8:56:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:09:24 2026 by rpki-client