Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
File: Kf8VWBu5BPG5BTh0IRiwH576pmI.mft (raw, json)
Hash identifier: gqNaiw1DqcDhidgTbkVMor0rPcN884XpoS1OmIlH4sw=
Subject key identifier: C1:4D:6D:6E:6E:90:35:64:B3:53:47:69:C8:11:FE:12:FF:C6:61:2D
Authority key identifier: 29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
Certificate issuer: /CN=29ff15581bb904f1b90538742118b01f9efaa662
Certificate serial: 01A1317D55EDA4716692211C8F3FD163086B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
Manifest number: 1A9F
Signing time: Mon 12 Oct 2026 19:00:59 +0000
Manifest this update: Mon 12 Oct 2026 19:00:59 +0000
Manifest next update: Tue 13 Oct 2026 19:00:59 +0000
Files and hashes: 1: Kf8VWBu5BPG5BTh0IRiwH576pmI.crl (hash: pT00SOP/mswjgwwyV0pw5zvVjHAoRzyTk/FkOlHp1ik=)
2: Mg9CIEP-XkNK3HjRwB4U97AixZM.roa (hash: QNXNP032rfC9FKERXA++HNZyYYvFs9+9TJ5FNJnFvfQ=)
3: WFvPF_8VC-S0qgsTBdvqpE6pWug.roa (hash: hC9en9kRQ4ZgWYQeZCnrellhiIJNeme26ezCh3FsZRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:7d:55:ed:a4:71:66:92:21:1c:8f:3f:d1:63:08:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ff15581bb904f1b90538742118b01f9efaa662
Validity
Not Before: Oct 12 19:00:59 2026 GMT
Not After : Oct 13 19:00:59 2026 GMT
Subject: CN=c14d6d6e6e903564b3534769c811fe12ffc6612d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ed:1b:91:b5:15:7f:64:22:cb:14:b2:e6:aa:
ae:e6:fe:71:d0:77:41:1a:b6:7c:b8:e8:d6:92:41:
01:a9:6d:3b:aa:47:40:2b:d8:a2:67:8d:a5:e7:1d:
d8:f7:4d:b9:be:d4:57:ba:6a:90:ce:1e:40:e2:df:
42:08:14:20:46:80:8d:75:1a:6e:08:5c:22:61:af:
16:b9:39:6a:ca:bd:8a:17:f3:f1:01:8e:a6:75:da:
b7:ec:1f:04:ca:f0:7a:80:9a:2f:fd:2b:b9:bd:d0:
3b:3c:2e:9f:71:65:78:12:12:1f:1c:51:4f:d5:00:
01:d5:f9:62:96:02:f4:a0:a4:e9:8a:d6:3c:40:d4:
e5:13:6a:72:08:20:9b:ea:5b:de:bc:e4:4b:6c:e4:
7b:7a:fa:dd:d2:ec:ac:50:7a:7b:21:4c:42:53:ca:
69:17:56:1e:84:ed:34:3b:15:e6:e9:1a:17:95:83:
8d:d0:61:e2:8a:43:83:17:8e:7d:73:f4:e5:71:9a:
79:34:8c:2d:70:8b:f8:1b:56:0b:b6:75:d0:92:22:
06:55:0d:a6:2f:5f:9f:f9:9c:f7:fd:1c:47:16:aa:
4f:ad:07:fa:f3:a9:aa:3f:d1:55:6b:16:b7:e7:05:
07:9f:b7:4d:e6:5e:79:2f:b2:8b:1a:f9:46:bf:ef:
7a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4D:6D:6E:6E:90:35:64:B3:53:47:69:C8:11:FE:12:FF:C6:61:2D
X509v3 Authority Key Identifier:
keyid:29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:da:9f:bc:1e:19:0a:ed:39:30:6e:cf:d9:c7:67:b4:d1:3f:
82:88:7e:6e:e1:05:fe:3e:75:76:96:4f:f9:df:ee:cc:75:0a:
e9:9c:78:0c:f0:a2:46:64:29:66:cc:81:50:69:ee:2b:32:11:
51:a1:c5:a4:e6:be:fc:84:0e:7d:fc:ef:d9:60:ab:1f:f6:44:
07:d1:c3:5b:84:da:b3:e9:ea:b3:3d:8e:65:f1:6d:f3:ab:ab:
70:b9:13:74:d6:59:41:3e:30:80:d4:85:f3:ac:a8:4a:f0:62:
29:a8:06:99:2a:c7:63:1e:ec:69:91:8f:b0:33:44:4a:75:82:
4d:ce:d4:87:36:26:70:e5:04:cf:ce:96:76:10:f3:32:2d:ff:
9c:49:0d:b5:ab:5f:e4:81:8f:e0:5c:37:14:21:d2:fb:52:5e:
92:9f:0f:a6:03:43:9a:79:59:00:10:81:39:9b:f8:ef:d1:9d:
9e:f4:88:20:18:75:f9:aa:24:a3:c0:1d:e8:f5:d9:63:de:60:
b4:dd:ea:96:4f:5d:1a:fc:3c:64:5d:94:b3:53:b4:c3:14:08:
45:8d:e9:5e:d7:32:9d:fd:28:cf:72:43:d7:4c:a0:6d:7b:30:
11:5f:da:bc:74:22:35:de:45:26:56:50:66:75:f0:25:b8:5b:
28:ae:c1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:14:13 2026 by rpki-client