Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
File: kPwsEuoXAhuorOBiGJfwhW2sJVk.mft (raw, json)
Hash identifier: CKj/97lnOoTNF+2RFnK6dRA7P3eicb1jz9CbOmOr3fA=
Subject key identifier: AC:D6:FD:1D:2C:43:42:5C:23:6F:D1:FE:66:53:93:AF:CA:2A:8B:28
Authority key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
Certificate issuer: /CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Certificate serial: 01A0DCBBE98A8F21A1F7EBF0A95A127C1FA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
Manifest number: 09EC
Signing time: Sat 26 Sep 2026 08:01:37 +0000
Manifest this update: Sat 26 Sep 2026 08:01:37 +0000
Manifest next update: Sun 27 Sep 2026 08:01:37 +0000
Files and hashes: 1: 41FDoFH6M2is1lsICkgfh5ITDqc.roa (hash: EewgyLxSVnO+QoRL7ntY20ccJSFgs1pW1bzWTclj1yE=)
2: BRDlyqeJrmrBAcGjXwsME96B8FA.roa (hash: jjDNz/Y1cZhGq2xfdDGq/oEMuXVbmPo8+lz5IqqCETc=)
3: kPwsEuoXAhuorOBiGJfwhW2sJVk.crl (hash: 1TmLe97uR3Z+FZILO+Qxsq58Mb4CmKW9AkoOKhbfBA4=)
4: nXsgPSU5eo-g-H5HVGkbUxzs-M0.roa (hash: bHUY+9ATlshHA4NGy9V8O1pXq9p6uilZoEQtRA9DmuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:e9:8a:8f:21:a1:f7:eb:f0:a9:5a:12:7c:1f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Validity
Not Before: Sep 26 08:01:37 2026 GMT
Not After : Sep 27 08:01:37 2026 GMT
Subject: CN=acd6fd1d2c43425c236fd1fe665393afca2a8b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:98:f6:4a:f4:58:f1:35:1f:24:8b:4d:b3:
e0:ae:59:fe:81:9e:e3:85:be:e9:84:b9:6b:6c:88:
50:da:28:58:3b:a4:53:6f:63:dd:96:02:33:05:b6:
cb:7b:92:b7:ec:b2:0c:cd:55:21:53:20:51:13:0c:
52:36:6e:bf:6a:ff:3b:12:4e:b6:18:c9:3b:e2:91:
2e:93:67:45:e5:90:d8:31:a6:f2:9e:43:d4:cc:ad:
b2:ee:2e:3c:5b:06:c2:17:8a:0b:d1:c4:e0:14:a6:
7d:7f:16:a7:c4:19:cc:47:14:2b:56:e9:9f:79:c6:
53:ab:03:57:55:84:34:42:5d:51:33:ba:f3:fd:ec:
6e:4a:63:27:d0:ee:cb:6b:57:45:19:e3:c6:1e:f9:
e2:fd:85:40:19:49:c8:ea:30:40:51:ca:97:b6:85:
cd:ba:46:bc:12:b6:07:f3:4a:92:28:8e:b8:7b:be:
71:fb:ef:98:6e:c9:d5:2f:7a:2a:46:37:da:16:9f:
9e:6c:ee:c9:ed:c9:81:d1:eb:23:9b:8d:af:1a:72:
e9:82:eb:d3:73:a3:f2:1d:71:db:83:af:80:c6:43:
e0:c9:24:92:d6:d7:26:19:bc:6b:db:c4:d3:b6:6a:
94:29:10:4e:f3:e0:ff:28:13:10:3f:c1:08:53:26:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D6:FD:1D:2C:43:42:5C:23:6F:D1:FE:66:53:93:AF:CA:2A:8B:28
X509v3 Authority Key Identifier:
keyid:90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b4:dd:dd:32:95:03:17:82:56:6f:9a:ae:bb:14:ea:b6:fd:
c4:21:0c:f1:f9:79:ee:61:f4:21:2a:ff:c0:83:39:9d:49:a4:
ca:1f:fb:7a:c9:7a:b1:68:88:a1:c3:52:9e:ba:7d:f7:21:01:
40:2e:b9:3e:34:16:1c:79:6c:b6:15:ae:57:7f:30:46:cc:67:
4d:31:55:06:e9:af:12:27:38:78:81:15:68:ed:e3:54:65:43:
c8:7f:87:02:cb:76:91:1f:b0:a7:67:41:3a:5b:5c:11:f9:02:
22:73:d5:bf:41:99:9d:66:fe:b7:64:40:69:61:2f:31:2f:ff:
ee:fc:f2:fc:67:09:36:cc:00:f2:17:b4:96:84:ac:44:f5:1f:
96:25:14:c6:a4:5e:85:ec:67:44:74:17:0e:fd:7a:2b:df:c6:
e3:38:e6:f6:7b:bd:3a:60:fa:76:a2:0f:24:5c:3e:4b:dd:cc:
50:af:2d:c5:6b:16:13:17:bb:6c:76:f2:d5:f2:64:c6:d5:33:
fc:c5:b1:0b:89:a8:0f:a4:84:dd:a7:1e:6d:31:ac:99:bb:82:
8f:d8:85:37:97:94:aa:7b:ea:7c:98:8e:be:39:5d:1f:08:2a:
b2:85:e8:f8:28:06:5c:b7:81:db:a8:5f:a9:a2:9b:fc:5e:f4:
2d:df:57:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:54:54 2026 by rpki-client