Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: FUrDzaU7CBVTnFVHROWjWMhuMJ6V/GyLbkP7g/e1y94=
Subject key identifier: 9C:00:90:0A:B5:39:B5:2F:61:27:FA:8A:B2:0E:45:C5:75:8F:04:21
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 01A0E73EF2508E4A4D0E45A6CC7C1BF76390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 163B
Signing time: Mon 28 Sep 2026 09:00:57 +0000
Manifest this update: Mon 28 Sep 2026 09:00:57 +0000
Manifest next update: Tue 29 Sep 2026 09:00:57 +0000
Files and hashes: 1: LASCfdMWoE20CF7WDK1PIh4LaTI.roa (hash: rIpKOSzr2MEm9EPCffOjAkuNKQPPOYskeo9lWvqTyOo=)
2: W7FoM9P8V95TjMG5CxF-kXC2djY.roa (hash: cqNL2j3ndLF7zdz8pZtr2cRhV6k7abA3ZyK4595EJ/s=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: 3eaJFaTh0rDyg1lc8GcdEVAPT/rFX+NuWxH+0f6ldhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:3e:f2:50:8e:4a:4d:0e:45:a6:cc:7c:1b:f7:63:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Sep 28 09:00:57 2026 GMT
Not After : Sep 29 09:00:57 2026 GMT
Subject: CN=9c00900ab539b52f6127fa8ab20e45c5758f0421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:ee:b4:a8:b9:89:b3:31:41:ef:f3:53:68:
75:16:ef:e2:9b:d0:74:2d:de:21:dc:55:a8:e9:b8:
ab:f7:bb:31:a7:04:6e:98:93:d7:f6:b5:fd:01:ee:
c2:5b:e2:4b:29:d1:06:34:42:79:f7:5a:1c:0c:ee:
65:ec:ff:75:83:59:88:eb:2b:67:f9:3b:23:c1:99:
b5:f6:37:9a:a1:35:84:16:cb:1c:3d:ae:ee:6e:c7:
09:35:f2:bf:af:c9:d3:45:62:80:9a:88:14:19:2c:
32:e7:f1:cf:53:f0:0c:44:1d:7d:7a:73:f5:fa:5d:
35:f3:d5:a4:39:a1:ad:67:65:99:e9:9d:b4:f8:cb:
ec:b8:47:92:c3:4c:34:57:c6:ee:40:83:40:af:04:
27:2a:5a:a5:8f:76:c4:e3:70:c8:97:fd:6c:e0:a9:
3b:5f:b7:df:e2:44:c0:52:12:4d:c3:57:8c:fd:d6:
f3:c0:83:39:02:6c:97:71:80:08:10:a7:11:a3:95:
d7:3e:21:89:2e:90:28:40:ed:c2:0e:99:2f:94:40:
0b:73:7d:4a:5e:ae:0b:55:bc:22:dc:43:51:c1:19:
4c:0c:b2:30:9b:df:83:1a:c1:55:5f:3c:f6:24:e0:
c5:ab:2d:4c:58:70:46:99:26:4e:0f:9b:c6:04:5e:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:00:90:0A:B5:39:B5:2F:61:27:FA:8A:B2:0E:45:C5:75:8F:04:21
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:74:5f:70:03:69:53:d2:83:b4:60:bb:3b:51:86:16:12:67:
24:d2:5e:80:6c:5a:b4:33:0a:6c:d6:3e:e9:99:09:8a:85:8c:
ae:62:46:82:74:c4:77:4f:0a:61:11:55:ce:3b:97:03:bf:65:
a6:5c:d0:f2:3c:af:54:f8:0c:45:9f:b6:5c:e2:c4:cb:25:b9:
33:f8:50:8f:75:f0:71:b3:2b:2d:25:ff:b7:55:02:1e:22:f2:
46:48:06:c7:34:7a:4b:85:7b:87:df:de:a1:90:08:f2:12:05:
77:e5:bf:28:29:7f:48:2f:db:b4:4d:42:d6:70:48:ee:42:9f:
cf:b6:16:b9:bb:52:1a:f7:fa:7b:2d:81:e5:58:e9:b4:f3:0d:
fa:a2:db:8d:9a:f9:ef:1a:06:5a:be:84:9c:88:ee:c1:f7:c6:
69:b0:08:83:f4:a2:9e:2b:a5:8b:20:9b:d4:74:5c:1b:e8:4c:
2d:a6:8e:ef:92:32:ca:f8:44:1a:a2:cd:d5:f3:16:bb:43:f3:
b1:8a:2f:90:70:66:3d:f9:84:82:93:b0:85:2d:15:c2:3c:41:
1a:44:4a:59:16:e5:22:7a:8d:a7:f3:3a:e3:16:75:02:80:50:
b3:6e:2c:48:75:40:65:8f:28:d9:0e:1e:e1:c4:f5:5e:d1:4d:
de:1a:0a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:49:10 2026 by rpki-client