Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json)
Hash identifier: v9vtRMCjvRw57FARIx83Jx/6gs4RtHv+d0+Sarv1IoU=
Subject key identifier: 56:C0:53:33:74:4F:B1:A3:AE:B7:7F:40:A4:B1:F7:E8:BF:DC:96:D7
Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109
Certificate serial: 01A0C6A0AC81632ED7D8FA7F35D88C637B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
Manifest number: 16FC
Signing time: Tue 22 Sep 2026 01:00:13 +0000
Manifest this update: Tue 22 Sep 2026 01:00:13 +0000
Manifest next update: Wed 23 Sep 2026 01:00:13 +0000
Files and hashes: 1: B6o8w4JwncV5UpdSgcO7ItJ2vOY.roa (hash: fNh1jUU0AZ9h8EIANivzzlh97Xsidf9NN1/ISCBJySU=)
2: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: xTvh3AdN8xl/K9OgogrBkyU+dgcxEQ186w4y02l0++A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a0:ac:81:63:2e:d7:d8:fa:7f:35:d8:8c:63:7b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109
Validity
Not Before: Sep 22 01:00:13 2026 GMT
Not After : Sep 23 01:00:13 2026 GMT
Subject: CN=56c05333744fb1a3aeb77f40a4b1f7e8bfdc96d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:20:87:f8:aa:2b:bc:7d:43:f1:02:7c:e5:
56:fe:82:05:ff:ac:12:88:0b:8b:9f:eb:ee:cf:42:
7c:8c:15:41:d4:0e:f8:40:94:e1:0b:32:03:47:64:
f6:d7:a1:2d:c0:29:58:15:b6:2e:f1:19:88:99:54:
64:e5:3a:bb:f3:64:f3:a2:24:11:e0:35:27:b7:6d:
f7:9a:2c:f3:1d:41:2d:ce:fa:5c:96:35:bc:27:88:
29:26:94:10:5f:e1:21:b9:81:e9:32:a2:f2:05:9e:
1a:84:aa:89:47:e0:13:d6:10:58:bb:0c:66:e2:63:
6b:65:30:30:c5:99:79:30:5d:8a:a9:04:55:6f:2d:
75:05:99:2a:e6:3c:39:fd:e6:73:cc:b3:a6:2b:d4:
db:b8:f1:1b:df:cf:6b:b6:e6:76:4e:56:5c:f3:06:
1e:f8:77:a9:58:53:76:37:19:95:98:73:a1:26:c4:
ce:f3:12:71:9e:0f:7b:3e:f0:3b:9c:d9:c4:bb:72:
83:49:be:db:d5:d0:ac:de:13:dd:62:d6:69:cb:34:
bb:c1:92:de:e8:2d:42:0d:d7:cc:59:c7:b4:4e:87:
82:23:d2:ef:db:b4:8e:2e:96:34:6b:1d:d9:e3:d5:
37:88:49:92:31:df:43:ff:27:9d:73:8b:1b:ed:6a:
1f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C0:53:33:74:4F:B1:A3:AE:B7:7F:40:A4:B1:F7:E8:BF:DC:96:D7
X509v3 Authority Key Identifier:
keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:88:1c:d7:6a:97:62:c1:76:fa:34:07:02:d8:d7:83:96:14:
1b:6b:d7:f5:14:62:b2:cb:89:26:e0:8f:52:dd:1c:6f:2a:1c:
90:33:9d:e0:72:41:b4:02:cf:2a:79:7f:e4:23:3a:03:31:dc:
ff:55:ae:bf:7c:28:4c:b9:93:ee:0c:7b:87:f1:6c:4a:a1:ef:
95:a2:49:0d:6d:11:7d:86:ec:ee:06:be:0b:6e:6d:9d:e7:6e:
9e:4b:2c:20:72:cc:64:4a:31:8c:b3:46:48:eb:17:66:a1:f7:
64:33:ed:2d:6f:72:1b:a3:92:6e:1f:00:82:6e:41:44:28:0b:
42:17:4d:7a:b9:c0:28:f9:23:34:3f:2b:10:6e:28:e4:e5:11:
e1:b0:33:3d:03:85:5e:1d:cd:22:c9:b8:78:26:ec:e4:80:ef:
67:60:25:13:95:b6:3b:e4:40:c6:c6:c7:0d:de:32:2f:2e:36:
ed:a7:0a:65:85:32:57:e8:e9:9c:6f:d4:26:f9:cf:1b:bf:c9:
5d:28:d1:7d:b3:25:67:20:1c:d7:62:a3:f6:e4:d5:bc:00:80:
f9:30:78:0b:24:da:e2:fd:2c:09:c2:01:ab:e9:e8:55:7e:f9:
1b:af:05:c5:0b:a1:85:ec:74:bc:d8:b4:5d:67:e6:94:1d:86:
b0:19:cb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:49:50 2026 by rpki-client