Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
File: kBZCwNRvjU5MI0wzr771pIOcaiI.mft (raw, json)
Hash identifier: OPsZ23w8aFVr8hb97HWSVnSk8Lpn5xebiN6NFeruIOY=
Subject key identifier: 06:B6:A5:53:86:27:0B:71:2A:D5:FA:B3:06:8F:CA:9E:90:FF:E6:D4
Authority key identifier: 90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22
Certificate issuer: /CN=901642c0d46f8d4e4c234c33afbef5a4839c6a22
Certificate serial: 01A12BB2AEF7A9AC7FEF917141BAF39F16DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
Manifest number: 02D8
Signing time: Sun 11 Oct 2026 16:01:32 +0000
Manifest this update: Sun 11 Oct 2026 16:01:32 +0000
Manifest next update: Mon 12 Oct 2026 16:01:32 +0000
Files and hashes: 1: A9-wOdp_rVCM0ESzhr89kQtrxAk.roa (hash: EEXrwqrXm4OhbrVH1e+ftGoZf1df8IiOvwtrHVI9K44=)
2: kBZCwNRvjU5MI0wzr771pIOcaiI.crl (hash: Xi90HKH8xrS2MeVMqg1C0qno6pIAybadc0S3m5uN01k=)
3: oUxyNiL8a-AOoVb7hvCWizwaEaI.roa (hash: s30Arx9jmVniBQHeZV05te3a62N7rkcg5xppFWIofXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:b2:ae:f7:a9:ac:7f:ef:91:71:41:ba:f3:9f:16:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=901642c0d46f8d4e4c234c33afbef5a4839c6a22
Validity
Not Before: Oct 11 16:01:32 2026 GMT
Not After : Oct 12 16:01:32 2026 GMT
Subject: CN=06b6a55386270b712ad5fab3068fca9e90ffe6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:9a:e1:e8:f2:4d:68:83:81:26:12:0f:6f:
a8:3e:73:b6:97:78:6e:9e:14:66:9b:80:1c:38:2b:
de:b5:36:c3:ee:2b:2c:19:40:7c:12:03:3f:aa:85:
d1:e8:0b:5c:7e:97:9f:a5:e6:06:89:6e:fb:a0:83:
3a:39:24:14:9f:eb:1b:50:c7:9e:bf:2a:dd:6e:c8:
8f:78:5d:d2:f0:21:0c:36:ad:a0:bb:24:d8:dc:d1:
9d:c0:43:9f:d6:b0:9f:f7:4c:bf:24:9f:9e:da:c5:
30:56:48:17:fd:09:05:5d:16:73:45:1c:e3:54:1f:
a9:2d:b2:fe:41:02:31:b9:ea:1f:e6:9b:35:77:19:
15:f9:6e:58:06:eb:16:5f:62:39:52:fe:f5:5f:0c:
8b:6b:06:92:03:4c:f0:23:c6:0f:ca:5d:db:ca:19:
95:9c:94:5d:70:f1:92:53:14:e8:ce:b7:a4:c1:3f:
fb:6b:bc:cc:2a:cb:ac:53:a2:80:06:49:8c:10:9c:
15:d6:04:a3:b3:90:c4:20:0a:c1:15:c5:58:ad:26:
b4:8d:b4:f8:13:bc:97:e3:c4:98:c0:fb:02:9d:cf:
6f:86:bf:07:2b:c9:af:70:73:00:1c:eb:97:15:86:
93:11:a7:ad:33:e8:c2:ee:19:68:f0:44:16:b9:ba:
15:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B6:A5:53:86:27:0B:71:2A:D5:FA:B3:06:8F:CA:9E:90:FF:E6:D4
X509v3 Authority Key Identifier:
keyid:90:16:42:C0:D4:6F:8D:4E:4C:23:4C:33:AF:BE:F5:A4:83:9C:6A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBZCwNRvjU5MI0wzr771pIOcaiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f16b51-5a22-4db4-b890-43125bf096b1/1/kBZCwNRvjU5MI0wzr771pIOcaiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:81:ca:e6:86:d2:56:35:03:b5:97:2d:35:2f:db:2f:c7:8c:
24:40:81:b4:08:4e:5f:f2:e8:b8:be:70:b4:1d:70:4f:de:52:
8e:1b:28:d4:01:45:ef:10:71:5d:7d:a3:be:b7:37:a7:07:b6:
c0:48:d0:ca:c0:b7:04:60:58:2f:d2:e9:e8:99:69:98:1d:0b:
fb:fc:55:d9:58:cb:21:52:f9:af:fd:23:c3:66:4d:33:4a:1b:
e6:8b:62:93:7c:e9:8d:ff:10:58:f1:2d:2d:b4:b3:90:a6:51:
5b:39:5e:de:65:09:4c:38:a5:8c:7c:1e:fb:a8:61:3d:8b:e0:
55:f1:27:1d:b4:e2:67:2b:aa:34:ca:85:c3:6a:af:6e:f6:4f:
3c:05:3d:af:cc:1e:b6:02:43:43:d8:93:8b:77:4b:06:dd:61:
88:14:00:4c:30:c9:b8:79:c4:79:96:19:cf:12:6a:9a:a8:91:
74:70:8f:86:58:1b:71:7c:01:63:5a:b7:4e:ad:7e:fa:f8:a6:
b6:79:04:9b:5d:85:9c:27:2c:b1:0f:f6:48:36:b7:d4:bd:89:
4d:ee:c5:b9:da:b1:60:df:0e:cb:33:7d:79:e1:50:79:87:52:
ec:22:b8:a5:0a:ab:5c:d7:25:85:de:09:5a:15:28:c0:4c:ff:
bd:ac:1b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:38:23 2026 by rpki-client