Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: U5Y+Nf7xm1e2tZvSBiGCH5pUxeQ/cXirJxVfrXQD3sg=
Subject key identifier: 5A:46:93:D4:64:19:50:08:FC:5C:02:F4:1D:21:52:A0:3D:9C:3F:79
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 01A0C7B3EAE894AF1EF896B0685E6D6964A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 06:00:51 +0000
Manifest this update: Tue 22 Sep 2026 06:00:51 +0000
Manifest next update: Wed 23 Sep 2026 06:00:51 +0000
Files and hashes: 1: fqnqgR-axVnKnA0P1MNMOEPlOKQ.roa (hash: dS17jdz8caEPLRuaszV/W/bAD/gLlYgn1NNbi4+I3kM=)
2: gRgykk6dz_IwqNNOBfkFkQce2pk.roa (hash: PzJ5ETV1AGTHV0gxW4EKMy3jivHWboSvAxQ7aMFFRFY=)
3: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: QWsDXtD1vxQuKaqujo/5A+GdzGCuwIjiSuvX0q1K6Z4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:b3:ea:e8:94:af:1e:f8:96:b0:68:5e:6d:69:64:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: Sep 22 06:00:51 2026 GMT
Not After : Sep 23 06:00:51 2026 GMT
Subject: CN=5a4693d464195008fc5c02f41d2152a03d9c3f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:85:34:64:fa:ed:43:af:c5:51:58:a3:50:e3:
2b:7e:0d:28:c8:c4:82:03:b8:25:46:44:74:f2:36:
48:50:35:2a:cd:58:38:9a:84:f0:3a:95:a3:b9:82:
3c:1d:ad:00:89:36:8b:2c:ef:7f:1c:2b:2a:4a:8e:
2c:ee:81:ad:8d:0b:e1:65:ba:ed:e6:10:3d:dc:44:
e5:60:30:ff:a1:46:cf:82:eb:65:25:d3:dd:87:e4:
41:bc:19:74:6e:dc:95:f8:b6:cc:6d:d7:fd:36:9e:
65:fb:24:17:d3:11:67:ad:6e:f8:b4:67:2d:b3:8c:
f4:e7:4a:66:39:2c:02:f9:13:01:86:7b:75:52:d7:
ad:ef:e2:ec:34:ff:f1:bd:f4:2b:00:34:c6:19:65:
c8:bc:80:09:d7:bb:63:d0:8b:8f:44:8d:e3:a8:a1:
45:5f:c9:50:80:bd:43:c6:da:5c:45:82:02:4d:77:
05:c5:3b:ab:39:ad:a5:a0:e9:b0:84:0f:d2:1a:59:
a1:f5:7a:23:7d:35:bd:a1:6f:86:31:a0:90:7e:13:
45:ad:dc:e2:79:ee:72:85:a4:7d:f8:24:dc:b6:42:
c7:17:0b:9e:98:17:a1:31:ac:ae:05:f9:35:ce:5a:
bc:3f:b3:b7:1b:e5:60:6b:71:e3:f3:b1:55:8c:5e:
c9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:46:93:D4:64:19:50:08:FC:5C:02:F4:1D:21:52:A0:3D:9C:3F:79
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:84:6f:f8:53:07:b5:1f:94:4e:2a:06:68:c3:25:69:de:f7:
c8:d6:08:7b:6a:9f:06:8e:18:d6:74:f1:47:b1:51:9f:cd:36:
b3:f9:43:35:94:39:88:76:96:4f:f4:7f:e8:0b:f3:ad:0f:29:
de:20:2b:f9:62:84:10:76:a0:3c:1f:dc:25:dc:4e:1c:93:0f:
40:2d:da:ec:00:ef:6f:da:65:85:32:e5:aa:7d:78:86:9f:9e:
c0:40:b0:cc:aa:60:c4:85:2c:a1:31:80:54:50:40:e3:9c:1f:
31:f0:12:1f:dc:65:29:cb:b3:8e:3a:98:6c:1a:52:b9:b8:e1:
11:a8:03:3c:91:7a:b7:06:81:f8:3d:46:2f:32:bc:41:5c:c2:
9c:56:39:28:41:12:28:a9:19:bd:10:04:00:e2:b1:c6:86:74:
e3:34:9b:48:57:f3:4a:09:48:16:59:88:02:09:42:96:4d:ae:
1c:49:e4:99:17:79:2a:5f:0d:30:80:8f:17:5a:90:5f:70:13:
f0:aa:b2:87:6f:dd:e7:d8:59:13:c7:7e:23:55:f5:9e:51:97:
3c:42:e3:e3:8c:a7:6d:73:8a:c6:40:1b:4c:b9:4a:ef:4f:70:
d3:20:50:dd:11:ff:ca:d5:91:da:f2:c0:8b:9f:90:4f:ea:f6:
c4:14:12:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHs+rolK8e+JawaF5taWSoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZDhjMzJhNzAzOTcyYWFlYTA5M2EwMWY4ZGVkZjU3Zjk2
NzU1NzUwHhcNMjYwOTIyMDYwMDUxWhcNMjYwOTIzMDYwMDUxWjAzMTEwLwYDVQQD
Eyg1YTQ2OTNkNDY0MTk1MDA4ZmM1YzAyZjQxZDIxNTJhMDNkOWMzZjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IU0ZPrtQ6/FUVijUOMrfg0oyMSC
A7glRkR08jZIUDUqzVg4moTwOpWjuYI8Ha0AiTaLLO9/HCsqSo4s7oGtjQvhZbrt
5hA93ETlYDD/oUbPgutlJdPdh+RBvBl0btyV+LbMbdf9Np5l+yQX0xFnrW74tGct
s4z050pmOSwC+RMBhnt1Utet7+LsNP/xvfQrADTGGWXIvIAJ17tj0IuPRI3jqKFF
X8lQgL1DxtpcRYICTXcFxTurOa2loOmwhA/SGlmh9XojfTW9oW+GMaCQfhNFrdzi
ee5yhaR9+CTctkLHFwuemBehMayuBfk1zlq8P7O3G+Vga3Hj87FVjF7JjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpGk9RkGVAI/FwC9B0hUqA9nD95MB8GA1UdIwQY
MBaAFJHYwypwOXKq6gk6Afje31f5Z1V1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEt
M2MxMjc4MWUyMDJkLzEva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80ZTgxNmQtZDhlYy00MzdjLTk4NmEtM2MxMjc4MWUyMDJk
LzEva2RqREtuQTVjcXJxQ1RvQi1ON2ZWX2xuVlhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaIRv+FMH
tR+UTioGaMMlad73yNYIe2qfBo4Y1nTxR7FRn802s/lDNZQ5iHaWT/R/6AvzrQ8p
3iAr+WKEEHagPB/cJdxOHJMPQC3a7ADvb9plhTLlqn14hp+ewECwzKpgxIUsoTGA
VFBA45wfMfASH9xlKcuzjjqYbBpSubjhEagDPJF6twaB+D1GLzK8QVzCnFY5KEES
KKkZvRAEAOKxxoZ04zSbSFfzSglIFlmIAglClk2uHEnkmRd5Kl8NMICPF1qQX3AT
8Kqyh2/d59hZE8d+I1X1nlGXPELj44ynbXOKxkAbTLlK709w0yBQ3RH/ytWR2vLA
i5+QT+r2xBQSYQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:30:51 2026 by rpki-client