Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.mft
File: kN2X5P39zztPGp92Hs2Fs2hifow.mft (raw, json)
Hash identifier: 3dbrSWf087Px1mMD0iIZ6fACRK0UOFYyCsAHz/qUgOM=
Subject key identifier: A4:B7:EA:B1:8E:94:F7:DF:7E:EC:1B:6B:AA:7C:7B:22:AC:7A:45:2D
Authority key identifier: 90:DD:97:E4:FD:FD:CF:3B:4F:1A:9F:76:1E:CD:85:B3:68:62:7E:8C
Certificate issuer: /CN=90dd97e4fdfdcf3b4f1a9f761ecd85b368627e8c
Certificate serial: 01A0C47BB70A2B01DF3FE4DFE3AACD4B2B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kN2X5P39zztPGp92Hs2Fs2hifow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 15:00:37 +0000
Manifest this update: Mon 21 Sep 2026 15:00:37 +0000
Manifest next update: Tue 22 Sep 2026 15:00:37 +0000
Files and hashes: 1: ZX7UqmpLWLaXZLHD_MHGYcq7tkw.roa (hash: lqjZMySa9xhu39DtKLF68f4mxjxAFpfXuyRlMIxaWIo=)
2: kN2X5P39zztPGp92Hs2Fs2hifow.crl (hash: RyZ1Xlf6665rML1SP8PgvqB9wOPYvzd2xABkSfFJUrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.mft
rsync://rpki.ripe.net/repository/DEFAULT/kN2X5P39zztPGp92Hs2Fs2hifow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:b7:0a:2b:01:df:3f:e4:df:e3:aa:cd:4b:2b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dd97e4fdfdcf3b4f1a9f761ecd85b368627e8c
Validity
Not Before: Sep 21 15:00:37 2026 GMT
Not After : Sep 22 15:00:37 2026 GMT
Subject: CN=a4b7eab18e94f7df7eec1b6baa7c7b22ac7a452d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:39:f0:f6:81:3a:b4:53:94:b9:4e:60:c0:
f6:e3:d0:26:17:b2:d4:b4:c8:49:57:3b:2a:bb:70:
c8:25:86:3b:c4:eb:d6:3a:7a:70:cf:e3:a0:e9:df:
4b:ce:2a:15:5b:8d:5d:a7:90:64:b9:0b:be:0f:3d:
c3:81:e0:6c:fe:92:6d:e3:31:fc:32:87:17:80:c6:
65:43:93:92:f0:a3:08:fb:f7:58:09:30:28:6f:38:
6d:fd:ec:19:7a:9b:12:a4:3f:9d:36:c4:3d:cd:4b:
08:20:d2:eb:fb:43:69:ef:8e:62:46:bc:ac:97:0e:
39:75:bf:4d:8e:0e:f2:3e:a0:02:da:2b:a1:79:4a:
70:c4:4a:e0:9e:b4:9d:ee:d4:dd:73:1b:d7:fd:f7:
af:47:7e:fa:a8:7d:c9:58:e1:32:03:c9:1b:29:a7:
ac:cc:a5:28:21:5d:a3:74:65:9c:35:1d:ab:2e:5d:
d3:01:3c:a5:03:43:69:62:5a:c9:73:79:81:9f:81:
19:60:3e:0d:62:e8:82:9c:15:63:16:5f:ed:76:a7:
a4:b0:a8:d0:f5:3e:2b:45:e7:26:a7:73:26:0b:f0:
2f:23:89:48:36:19:dc:98:b7:c7:b5:5d:ed:9d:41:
93:80:68:f1:7b:65:79:e9:f8:9c:5a:2a:19:77:db:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B7:EA:B1:8E:94:F7:DF:7E:EC:1B:6B:AA:7C:7B:22:AC:7A:45:2D
X509v3 Authority Key Identifier:
keyid:90:DD:97:E4:FD:FD:CF:3B:4F:1A:9F:76:1E:CD:85:B3:68:62:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kN2X5P39zztPGp92Hs2Fs2hifow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:24:da:03:d7:d0:6e:65:f1:85:ac:ba:b7:81:e1:89:4f:50:
d6:35:87:25:ac:82:f7:5d:b5:2b:97:d8:93:34:41:bd:17:09:
f3:d4:27:31:8d:f2:a7:58:34:3e:31:c8:43:7a:f6:74:c5:2b:
c0:3c:94:dc:dc:c3:7b:14:f6:9c:46:d0:1b:24:3c:89:4f:c9:
25:9f:7b:4f:00:92:c6:2b:f6:be:a0:f7:12:71:e3:50:29:c7:
b8:7a:77:a8:47:3d:6d:f5:6b:73:85:2a:b1:df:4e:73:c0:9e:
e2:84:3e:b8:14:29:f2:5e:59:8a:d7:8e:30:b9:15:f8:ad:ab:
79:91:57:cd:ff:41:e3:48:3c:c4:98:d1:e3:aa:d4:73:8b:1a:
31:4c:18:2a:a5:79:6a:64:71:b8:e1:bd:2a:cc:cd:87:f0:4c:
1f:e3:f9:2f:4a:8b:2e:a5:06:bb:ba:2b:ca:5d:72:54:c5:35:
a7:1f:17:b7:f7:01:44:d6:fc:80:25:bf:0c:e8:3c:7f:35:1d:
8c:b5:08:20:99:f4:f3:5d:8d:a4:e0:86:5d:bf:94:af:f1:7b:
e0:99:8f:a1:3b:28:53:5d:c2:c4:35:db:f1:b5:39:9d:84:c6:
23:a0:c9:ab:c0:a2:95:ed:d1:95:cb:20:31:b8:4c:ea:da:6c:
8c:4e:35:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:56:46 2026 by rpki-client