Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
File: kBZCwNRvjU5MI0wzr771pIOcaiI.mft (raw, json)
Hash identifier: bNDUCIfW6/e/PBhk9AW2kkUgooFMBDFMEGKdUYLHcxs=
Subject key identifier: 82:DA:DB:E3:27:8F:9E:98:5C:EC:AD:86:4A:9D:E5:D5:38:1B:B6:21
Authority key identifier: 90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22
Certificate issuer: /CN=901642c0d46f8d4e4c234c33afbef5a4839c6a22
Certificate serial: 01A13936F328EC8BD70B4D93436DC03698C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
Manifest number: 02DF
Signing time: Wed 14 Oct 2026 07:01:04 +0000
Manifest this update: Wed 14 Oct 2026 07:01:04 +0000
Manifest next update: Thu 15 Oct 2026 07:01:04 +0000
Files and hashes: 1: A9-wOdp_rVCM0ESzhr89kQtrxAk.roa (hash: EEXrwqrXm4OhbrVH1e+ftGoZf1df8IiOvwtrHVI9K44=)
2: kBZCwNRvjU5MI0wzr771pIOcaiI.crl (hash: h2UtqscW3vGVg7kCiI7S637Pa2aMeaaNUDXKMog6xY8=)
3: oUxyNiL8a-AOoVb7hvCWizwaEaI.roa (hash: s30Arx9jmVniBQHeZV05te3a62N7rkcg5xppFWIofXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:36:f3:28:ec:8b:d7:0b:4d:93:43:6d:c0:36:98:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901642c0d46f8d4e4c234c33afbef5a4839c6a22
Validity
Not Before: Oct 14 07:01:04 2026 GMT
Not After : Oct 15 07:01:04 2026 GMT
Subject: CN=82dadbe3278f9e985cecad864a9de5d5381bb621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:72:9e:92:37:03:ba:be:fa:18:5c:86:74:b9:
9f:1d:d6:cb:cf:5b:47:c0:be:80:07:72:f7:8a:ff:
1c:17:56:88:c6:40:4a:fd:80:7f:55:8e:4a:e6:87:
dc:b8:fc:58:b2:7a:3f:32:f6:2f:46:42:7f:82:25:
e2:c3:49:5f:d4:19:cd:30:6f:8b:94:4f:e3:a2:ab:
52:1b:fc:f4:0b:6d:2b:2f:e1:e7:c8:73:c6:b8:13:
93:12:f1:77:55:20:fd:7d:4b:d7:93:ba:d2:34:72:
53:a4:a8:70:49:dd:3e:08:ab:da:16:7b:8d:5e:4a:
b4:58:9d:c9:f4:cc:5f:2f:ae:aa:0e:78:75:d6:ad:
1a:12:32:7d:b1:2e:fd:14:c5:75:8f:82:5d:5b:e8:
6f:ca:59:c8:7a:7c:e5:a4:8c:77:d2:48:4d:6e:a0:
81:27:cf:c4:e2:3c:01:eb:cf:02:6f:1b:06:62:7b:
70:07:f5:b7:e5:f9:b5:bb:f6:c0:b7:cc:23:66:e9:
47:38:d5:96:7b:76:a7:6f:d5:68:6c:cc:4d:1c:d9:
8a:b3:c4:5d:42:50:79:3f:92:49:69:85:c2:d6:ea:
81:c8:e5:37:bc:e4:d3:50:5f:dc:0c:5d:cb:54:bc:
74:8a:66:72:12:36:e6:49:17:d8:30:c8:64:cf:66:
17:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DA:DB:E3:27:8F:9E:98:5C:EC:AD:86:4A:9D:E5:D5:38:1B:B6:21
X509v3 Authority Key Identifier:
keyid:90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:53:f3:ea:72:74:fc:1a:1f:15:fd:01:23:bc:77:65:b5:03:
84:a4:d5:1e:09:f1:1d:5f:1c:fa:3b:7d:9e:04:9a:f2:a4:95:
68:0e:53:97:8d:8e:e9:c8:3d:4f:b2:96:26:db:f3:57:36:f7:
45:27:aa:12:57:07:97:e8:9e:29:47:d9:2a:5e:cb:b8:11:34:
b8:99:61:89:57:af:36:bf:fe:21:ee:2b:99:f6:a0:e8:a5:45:
ab:8d:b1:0d:ac:5f:37:d0:e8:29:8d:af:ef:18:a7:b5:75:98:
ed:26:99:62:1c:f8:78:26:60:40:10:ae:f7:ab:30:77:3c:ca:
08:99:01:99:b8:ae:9f:8a:b5:51:4e:30:ec:20:b6:20:9e:9a:
30:c4:4f:c4:91:29:e7:6e:9c:1d:50:7f:d8:74:ec:4d:c3:e5:
46:e9:7a:2a:71:c0:a7:35:98:a0:3e:18:2c:19:dc:7f:1f:05:
17:ad:c7:db:21:ac:43:d8:3b:6a:dd:ed:d7:8b:90:71:e3:6f:
36:59:3a:86:34:24:f2:35:89:98:20:d4:c2:93:32:4a:32:c2:
49:58:75:24:ed:08:f1:11:3c:0e:23:4d:56:2d:ee:cc:64:cd:
09:99:da:ff:f8:8f:0e:37:df:ec:47:0b:b0:e6:02:b8:f1:40:
8c:e2:e1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:59:05 2026 by rpki-client