Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
File: kHb3fahBt7lCFbb6wtQaccIVFgE.mft (raw, json)
Hash identifier: V/dLd6yAkWqSUlKw2+ISE9sueqRkgze2v3sMMOcdzC4=
Subject key identifier: DA:7B:5C:55:9F:BD:8B:82:AA:F6:A1:09:83:E7:E3:A4:FA:43:36:71
Authority key identifier: 90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
Certificate issuer: /CN=9076f77da841b7b94215b6fac2d41a71c2151601
Certificate serial: 01A0C9A26E960B95928B6EA6A585E7953C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
Manifest number: 13F8
Signing time: Tue 22 Sep 2026 15:01:00 +0000
Manifest this update: Tue 22 Sep 2026 15:01:00 +0000
Manifest next update: Wed 23 Sep 2026 15:01:00 +0000
Files and hashes: 1: G6JTgK9c0CWNOmQ8QvDityy_X10.roa (hash: 9vVxC4L/PjyVKOIEKo3Aptt5+zq+QCcL31nKvvorwHs=)
2: kHb3fahBt7lCFbb6wtQaccIVFgE.crl (hash: OVbp2K0jDeYgAYM4xjMWq0W+VCqd2iovGjntvsXz87s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:6e:96:0b:95:92:8b:6e:a6:a5:85:e7:95:3c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9076f77da841b7b94215b6fac2d41a71c2151601
Validity
Not Before: Sep 22 15:01:00 2026 GMT
Not After : Sep 23 15:01:00 2026 GMT
Subject: CN=da7b5c559fbd8b82aaf6a10983e7e3a4fa433671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:da:6b:4c:2b:b5:b0:88:f2:35:d3:37:73:
29:fa:9b:12:48:8b:e4:e8:c0:c1:bd:49:a1:dd:d6:
0d:d5:93:60:55:84:e8:93:4b:ed:c1:bd:0a:f9:fd:
40:a1:55:17:c5:52:23:72:37:3a:88:5c:56:3c:2f:
bf:ae:71:5c:8a:ec:36:b4:74:c1:68:e3:01:3c:f5:
f9:da:e7:07:7d:27:6b:87:2c:86:21:30:5b:32:3c:
4d:82:d8:a5:d4:8a:40:a7:51:08:5f:53:40:d2:39:
04:ac:30:65:5d:28:67:66:db:48:5c:90:56:50:c3:
cc:32:e8:d8:18:70:9d:44:d4:7b:a7:cb:bf:1f:74:
95:b8:b2:66:d4:23:37:96:99:04:68:9e:10:47:7d:
92:5d:fa:a0:ba:a7:b0:cb:fa:75:13:59:48:0e:63:
53:dd:10:41:02:60:5c:32:53:d9:4b:61:7c:93:f7:
81:7e:a2:99:b1:3a:94:8c:35:e9:d8:80:e3:15:85:
35:54:07:7a:00:17:5c:17:c3:8b:0f:60:b0:39:cf:
28:72:93:0b:86:95:cf:81:64:c5:a4:e4:f6:26:e1:
4a:98:ea:6f:0e:e7:f3:6a:78:fc:7d:f7:23:2f:ae:
9d:f4:3e:dd:a1:90:2c:b4:ae:91:70:1a:ca:96:5d:
57:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:7B:5C:55:9F:BD:8B:82:AA:F6:A1:09:83:E7:E3:A4:FA:43:36:71
X509v3 Authority Key Identifier:
keyid:90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:e3:79:53:62:93:5e:a9:32:fd:5d:dc:e2:f4:f5:b3:98:a1:
9a:83:e7:03:3b:6a:3d:44:4e:15:55:53:74:14:1d:80:cb:46:
ba:0d:55:eb:29:a7:94:cb:28:53:b8:56:97:3b:5c:e0:69:be:
9d:93:b1:31:f2:76:bb:e1:ce:32:bb:b0:4b:c3:fa:3f:47:61:
66:09:fc:12:f2:84:b1:42:e6:6f:88:ae:52:a1:5d:e6:a5:c5:
b0:7f:91:27:ce:d7:72:48:12:09:52:b8:84:96:e0:18:26:d3:
10:8a:83:9f:64:20:9f:3f:bb:e1:a0:36:a3:ab:1f:fd:52:5a:
24:cb:43:c6:38:59:79:cd:f7:68:de:67:93:16:1f:dc:eb:8d:
14:2a:2f:e8:e7:80:e4:08:51:4c:70:e3:02:92:72:48:6c:35:
e7:2e:5e:a5:01:f5:3c:14:63:08:ad:39:38:0e:b8:9e:1b:65:
f2:b7:78:28:e8:1f:f1:f6:f7:a7:df:f8:ab:19:a9:f3:0a:e6:
79:2b:b4:7b:a3:8a:e2:06:05:5d:cd:70:84:30:b6:b8:8e:a6:
ab:be:59:57:05:39:2e:5e:6f:c7:93:81:ea:1a:7a:f7:e2:9b:
20:04:fa:55:c1:e7:17:05:8a:e5:84:2a:5d:f2:b0:b8:55:13:
fd:f0:d4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:41:54 2026 by rpki-client