Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.mft
File: kcmMNQ8lxNaLMN4igMqqEDUdTAg.mft (raw, json)
Hash identifier: IkGP8kehxr0jB4Ei2xjHfHTp1Ck+O6c6uhPtd7gJVwg=
Subject key identifier: BF:11:FC:8B:37:70:37:AC:B5:8E:AF:24:E6:81:E8:AD:9D:C2:13:7F
Authority key identifier: 91:C9:8C:35:0F:25:C4:D6:8B:30:DE:22:80:CA:AA:10:35:1D:4C:08
Certificate issuer: /CN=91c98c350f25c4d68b30de2280caaa10351d4c08
Certificate serial: 01A0D2002CAAF27D5C02246DC2EF07390BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcmMNQ8lxNaLMN4igMqqEDUdTAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.mft
Manifest number: E6
Signing time: Thu 24 Sep 2026 06:00:21 +0000
Manifest this update: Thu 24 Sep 2026 06:00:21 +0000
Manifest next update: Fri 25 Sep 2026 06:00:21 +0000
Files and hashes: 1: dGbLcxcr7X-VuqdNwkxJEVAdoZw.roa (hash: Df8yIA2woKIcIr/lHUrWEZ4NVPdZqkSz50++AQwCXPk=)
2: kcmMNQ8lxNaLMN4igMqqEDUdTAg.crl (hash: xQAaabna/J1Bw7Ntq2nv2GsXKpcl/TwhWWFe0JNho3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcmMNQ8lxNaLMN4igMqqEDUdTAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:2c:aa:f2:7d:5c:02:24:6d:c2:ef:07:39:0b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c98c350f25c4d68b30de2280caaa10351d4c08
Validity
Not Before: Sep 24 06:00:21 2026 GMT
Not After : Sep 25 06:00:21 2026 GMT
Subject: CN=bf11fc8b377037acb58eaf24e681e8ad9dc2137f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:2f:49:40:76:94:d5:df:17:72:b5:7f:a7:
d3:1e:fe:7f:a3:fc:1a:2d:bb:93:fa:5e:d1:79:13:
8a:9d:c8:01:98:bf:81:7f:f2:4d:97:d0:f9:8b:79:
11:cf:db:f8:a2:1f:6b:ec:66:9b:6b:b6:e1:50:57:
7a:82:f8:70:ce:f8:62:76:bb:c5:83:67:15:2e:c7:
b1:bd:2b:bb:2d:ff:a8:2d:d2:55:f8:12:6d:34:40:
eb:82:8d:a7:40:11:c0:bf:d5:9d:35:88:e8:93:f4:
68:44:d2:73:58:42:72:9a:36:9a:83:be:f6:e6:5d:
e8:86:77:dc:f4:dd:2d:ec:88:08:65:40:a8:4d:c7:
27:e9:58:f5:8c:9e:e7:bd:a2:1a:1e:e7:55:b4:d6:
93:98:2a:ba:df:bf:78:bc:99:ad:b9:c8:5b:7a:09:
23:ca:94:57:dd:b1:f9:b2:c3:bd:d9:c3:08:10:d8:
65:13:39:23:b3:69:de:33:2a:78:5b:86:d9:c1:33:
7d:c8:d7:e6:d9:6b:10:ba:ae:f1:36:10:72:94:c0:
9c:90:57:4e:da:54:de:36:c4:24:a9:d6:db:a4:f2:
31:e8:5c:e0:a8:22:2b:43:8a:ef:05:d3:e1:a8:38:
af:15:6c:db:0c:e7:f3:dd:b7:0b:47:b4:5f:95:74:
61:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:11:FC:8B:37:70:37:AC:B5:8E:AF:24:E6:81:E8:AD:9D:C2:13:7F
X509v3 Authority Key Identifier:
keyid:91:C9:8C:35:0F:25:C4:D6:8B:30:DE:22:80:CA:AA:10:35:1D:4C:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcmMNQ8lxNaLMN4igMqqEDUdTAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/kcmMNQ8lxNaLMN4igMqqEDUdTAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ac:b2:8a:1c:4e:c9:a4:e7:fa:c5:29:f4:29:ab:0c:d9:29:
19:2b:96:55:51:d8:f8:7f:1a:6d:45:c5:86:27:12:36:35:2e:
d4:ea:38:fc:72:77:5f:c6:83:23:57:16:b6:d9:f7:8d:62:62:
5b:fe:27:fd:65:2b:bd:01:db:f8:4c:bf:2a:37:6b:5f:b5:07:
0c:e5:81:62:f6:d9:e9:55:37:0b:ea:90:5c:76:85:4d:d8:a1:
2a:6c:a0:d1:15:14:25:0b:44:39:ab:0f:f6:03:ab:12:a5:7c:
3e:27:9d:53:8b:30:54:06:76:fc:04:b3:ac:02:62:ae:a2:cc:
00:ed:54:4c:3d:38:aa:c5:c9:5b:da:91:9e:85:7c:8c:bd:b2:
f1:ab:b3:fb:c0:0a:56:21:c2:6a:73:63:bf:9f:10:c3:af:9c:
38:9a:8a:cf:e2:86:d6:95:3e:75:16:74:e8:ea:27:d2:bf:35:
de:2e:aa:bc:51:14:09:3a:05:11:d3:91:e2:25:1e:43:cd:ca:
e7:01:80:51:a1:59:62:22:8d:4e:d4:cb:b9:14:fc:3d:5b:21:
b3:a0:b8:ab:20:a6:d9:f9:0a:ee:aa:86:f4:57:74:af:53:67:
5f:8d:e8:9b:2c:47:0c:84:72:57:b6:53:10:c6:69:c8:88:54:
f8:6a:38:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:02:03 2026 by rpki-client