Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.mft
File: kN2X5P39zztPGp92Hs2Fs2hifow.mft (raw, json)
Hash identifier: C/p/sRsoGPhyzEfYEz3wYvUhg2SVWPvwXx0LczZDXqE=
Subject key identifier: 3F:9B:92:71:A8:74:FB:37:B1:0F:E8:A2:4F:B6:6C:03:26:CE:EC:88
Authority key identifier: 90:DD:97:E4:FD:FD:CF:3B:4F:1A:9F:76:1E:CD:85:B3:68:62:7E:8C
Certificate issuer: /CN=90dd97e4fdfdcf3b4f1a9f761ecd85b368627e8c
Certificate serial: 01A1C3675214D9D13F214B2ABBA762C41BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kN2X5P39zztPGp92Hs2Fs2hifow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.mft
Manifest number: 0163
Signing time: Tue 10 Nov 2026 03:01:30 +0000
Manifest this update: Tue 10 Nov 2026 03:01:30 +0000
Manifest next update: Wed 11 Nov 2026 03:01:30 +0000
Files and hashes: 1: ZX7UqmpLWLaXZLHD_MHGYcq7tkw.roa (hash: lqjZMySa9xhu39DtKLF68f4mxjxAFpfXuyRlMIxaWIo=)
2: kN2X5P39zztPGp92Hs2Fs2hifow.crl (hash: UJiIwKQI7eIr49QZuPwyCtT2K5xUm/GuApwBV8LrtPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.mft
rsync://rpki.ripe.net/repository/DEFAULT/kN2X5P39zztPGp92Hs2Fs2hifow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 22:05:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c3:67:52:14:d9:d1:3f:21:4b:2a:bb:a7:62:c4:1b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dd97e4fdfdcf3b4f1a9f761ecd85b368627e8c
Validity
Not Before: Nov 10 03:01:30 2026 GMT
Not After : Nov 11 03:01:30 2026 GMT
Subject: CN=3f9b9271a874fb37b10fe8a24fb66c0326ceec88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:62:22:1e:62:46:3d:da:ba:7d:95:74:3e:
ec:43:94:2d:cf:5c:c7:52:3d:90:4e:b2:4c:f1:d5:
4a:56:63:c2:38:75:83:2a:d4:22:d9:cd:14:b0:6b:
b2:18:a0:a3:4f:0c:fc:96:1a:a8:3f:0a:cf:38:ad:
53:8e:29:5c:de:68:23:2d:12:ff:26:4d:ab:62:fc:
ff:a7:5e:49:58:35:17:a8:7f:2b:f4:71:a2:61:f8:
de:16:c7:ba:1a:b5:1b:48:2e:54:11:ab:b6:43:4a:
20:4b:14:ea:d6:08:85:af:ba:56:46:5a:63:ea:1f:
cd:3e:7d:97:a3:8c:15:36:2e:15:fe:09:1e:f6:b5:
76:d5:8f:2b:26:d9:24:1a:b9:a3:a8:fe:1c:2d:84:
c8:bd:7a:73:d8:93:67:10:71:2d:f0:81:07:37:dd:
dc:7c:5c:ea:b5:77:3d:a7:d3:32:5e:e0:e5:f0:7d:
a9:f0:30:ad:ea:1b:00:a0:4b:bf:74:c9:a1:b9:14:
cd:4b:f9:22:7a:83:e4:9d:46:34:75:7b:df:bb:78:
2a:b3:f9:a7:3d:61:f3:ee:ef:ab:f2:e0:e5:5d:94:
ca:11:55:c8:bd:d2:4f:58:dc:16:a4:13:f0:b2:5c:
c7:e9:c5:6c:da:01:cd:50:3b:7f:e1:ae:c2:c3:43:
c6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9B:92:71:A8:74:FB:37:B1:0F:E8:A2:4F:B6:6C:03:26:CE:EC:88
X509v3 Authority Key Identifier:
keyid:90:DD:97:E4:FD:FD:CF:3B:4F:1A:9F:76:1E:CD:85:B3:68:62:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kN2X5P39zztPGp92Hs2Fs2hifow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/dabacb-e6f5-4065-86b6-8e0d83c5edfe/1/kN2X5P39zztPGp92Hs2Fs2hifow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:6d:a7:5b:ab:d8:23:d1:3a:fb:24:93:22:1a:fa:3e:8a:fe:
b0:65:9f:b0:f3:58:34:01:23:13:e3:e9:ed:b3:a7:dd:9e:da:
37:9d:f4:94:d3:7f:1e:c0:b4:b6:dd:a8:db:ef:01:e2:e2:44:
e0:10:0a:c5:7c:3d:48:e4:dd:2a:6f:d2:ae:a7:56:0f:a2:99:
27:22:ba:13:3f:f0:44:59:b1:43:6d:5e:d7:f5:96:ca:cf:69:
3c:d9:7e:80:14:eb:94:60:22:26:2f:62:37:fd:fa:d8:b7:ad:
7e:db:3d:bb:00:ac:99:dd:c4:1e:08:c3:02:a4:f5:df:45:db:
18:7a:94:6f:c1:f1:74:c2:bc:de:67:0a:27:68:a4:5b:e6:19:
4c:c1:cf:8a:96:58:c2:4d:e5:df:e6:5c:60:00:da:28:cb:ba:
cb:77:3b:99:15:e5:0b:fc:3e:78:53:d0:a9:b2:b1:d6:ae:d4:
da:98:40:4e:d7:81:f5:74:f2:9b:74:48:33:aa:01:27:dc:26:
9b:e7:f9:0c:fc:bd:ae:78:ea:46:1d:62:30:b6:97:01:6c:d2:
25:c1:68:9e:a2:d1:4b:ce:c6:12:f3:eb:20:1c:ac:91:83:98:
92:56:44:13:aa:5a:52:3c:ea:21:10:dd:21:68:e1:7d:0b:e0:
55:6a:88:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 07:57:36 2026 by rpki-client