Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier: xXd4Lo7Zqod+fEeWwmN5j4Wc1kwa7YhQKJzSra8FxVQ=
Subject key identifier: 2F:71:4A:64:16:45:9B:C6:95:E9:E1:63:56:E8:1C:EE:4E:0C:5E:86
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial: 01A0E1E250EE5C0710CF09D90AEFF448DFF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number: 0986
Signing time: Sun 27 Sep 2026 08:01:40 +0000
Manifest this update: Sun 27 Sep 2026 08:01:40 +0000
Manifest next update: Mon 28 Sep 2026 08:01:40 +0000
Files and hashes: 1: S_Jp9m9blIUps0OicsJ0YR9eOvE.roa (hash: Be16CYxyexdW5EkOG7OmNRTbUwOGD3q//e7OhhleAMQ=)
2: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: t9jz+ExEhJLQ59LYzqqsNQ1RVO/UWTctgIKTawA7R70=)
3: yIOWYvs8zmXxlBajX3odsYxOM8Y.roa (hash: d8ux5xGWiDuWJb9M/rhcfhWw34lH4Et949GrjMpaIAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:50:ee:5c:07:10:cf:09:d9:0a:ef:f4:48:df:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
Validity
Not Before: Sep 27 08:01:40 2026 GMT
Not After : Sep 28 08:01:40 2026 GMT
Subject: CN=2f714a6416459bc695e9e16356e81cee4e0c5e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:7a:67:67:4a:73:ca:8f:57:fa:69:94:3f:
a2:59:f6:99:a3:15:f1:a5:ee:ac:04:4e:1b:19:20:
2d:e5:42:94:07:67:82:1b:a4:a0:50:4a:52:57:d1:
4f:09:01:02:af:69:88:27:0d:04:a6:09:3b:65:ca:
68:aa:21:a6:5e:81:97:63:4d:cf:c3:9b:50:1e:1b:
67:d0:9f:d2:43:d7:1b:ff:30:4c:e0:90:66:07:de:
d0:42:91:01:a0:e5:b8:bd:44:1c:f9:74:6b:5d:ca:
06:f9:17:97:55:64:f5:74:ec:3d:10:ad:0f:65:05:
c7:fd:9b:d4:7c:23:8e:9b:6a:17:ab:8d:e3:c9:6c:
14:25:5c:39:3c:cc:e7:56:f8:c3:e3:fa:cf:4e:b2:
d7:be:7b:bf:af:4c:7e:9d:ed:47:94:bb:da:43:6e:
eb:d6:87:41:b1:40:17:2d:62:fe:22:7d:d3:88:b9:
e6:7d:16:56:be:86:e2:d8:a2:f4:36:5b:0b:81:51:
18:29:2a:8c:d5:b0:15:32:75:39:50:be:4d:21:46:
16:8a:b5:3e:f6:6b:39:a1:74:31:8e:4c:f3:98:eb:
76:2d:4f:20:5f:f8:a8:b6:fb:43:2e:85:18:fa:70:
65:9d:1f:a8:b9:a4:e2:13:33:a6:2d:ef:d9:fe:78:
d4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:71:4A:64:16:45:9B:C6:95:E9:E1:63:56:E8:1C:EE:4E:0C:5E:86
X509v3 Authority Key Identifier:
keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ab:d9:ea:1d:11:3e:04:d3:5b:c4:a7:a9:cd:7d:13:bd:61:
29:ec:cc:3b:0b:26:04:1f:fd:34:bd:60:60:54:48:3f:91:79:
d8:18:3c:e1:40:dd:37:a0:ed:ac:71:ff:1a:97:fa:e9:0b:67:
1a:dc:f7:4c:76:6f:4e:2e:6e:02:e1:44:59:d5:6c:6a:16:96:
dd:6f:1b:50:70:4f:00:17:72:58:a8:bd:17:4c:ff:73:53:a7:
b1:a8:db:72:12:63:08:b8:8f:c8:ad:07:7e:4f:78:94:6d:ec:
f1:8e:b9:5c:53:73:52:1b:54:c8:4f:23:0a:84:5a:1f:0b:07:
13:3e:10:f6:9c:3e:1c:f1:5a:b2:45:59:16:68:8a:b5:f1:26:
94:20:20:cc:23:4b:f1:06:21:95:7f:c6:6f:0d:85:ed:b7:d4:
34:c0:47:5a:7f:ca:ea:c3:4c:3d:b9:00:74:f8:30:64:57:d3:
8c:9a:d4:73:3c:46:ee:70:e4:d7:b3:31:da:fc:90:55:06:b9:
d1:bc:0d:39:98:07:4f:05:cf:54:bb:5c:40:49:05:71:ac:69:
10:43:a5:05:e6:35:ce:6c:be:5a:f1:44:0e:38:12:a5:aa:62:
39:d2:18:94:e7:ed:07:b3:ea:35:a4:04:e4:44:0d:4e:be:29:
3d:f5:5c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:34:33 2026 by rpki-client