Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
File: kdfs8XFCs7CTX443uPfZwlPw7hk.mft (raw, json)
Hash identifier: CB9OAST+ANV7LlaOEIJRoVuvSt7cc2c0EXV2O8xx5Lc=
Subject key identifier: 07:C3:2C:92:D6:D5:BD:69:E3:81:F4:53:52:E3:F1:61:76:87:E7:EA
Authority key identifier: 91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
Certificate issuer: /CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Certificate serial: 01A1261DABA56C3F8620B6FFF4FBC10EB0BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
Manifest number: 1A9D
Signing time: Sat 10 Oct 2026 14:00:40 +0000
Manifest this update: Sat 10 Oct 2026 14:00:40 +0000
Manifest next update: Sun 11 Oct 2026 14:00:40 +0000
Files and hashes: 1: JL_bv1rE4SOiwiRn1jc2s_87lQQ.roa (hash: dWOsdKuE7dNLYI4NP8+n+WEeun5in1SyaWv26Okq8QI=)
2: kdfs8XFCs7CTX443uPfZwlPw7hk.crl (hash: KDKDDNPw8dLt3Ca+nPom5YjBa5foEbcOniXMZLrvRTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:1d:ab:a5:6c:3f:86:20:b6:ff:f4:fb:c1:0e:b0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Validity
Not Before: Oct 10 14:00:40 2026 GMT
Not After : Oct 11 14:00:40 2026 GMT
Subject: CN=07c32c92d6d5bd69e381f45352e3f1617687e7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:35:3a:09:fc:9b:63:d1:83:f3:e8:43:2f:ea:
8e:cb:61:43:9f:f3:b0:4b:1e:f2:1c:bc:2f:6a:66:
71:44:25:0b:47:10:e4:90:7c:50:db:8e:90:2c:b7:
6e:a6:f3:f3:9c:2f:d7:4d:b0:c2:e8:1e:d0:3c:f9:
a3:e0:63:e6:60:4d:2a:8d:c4:91:d3:da:48:0e:74:
44:56:c6:e9:cc:37:fc:b0:fe:45:a5:be:6f:93:d8:
53:82:3e:db:30:2d:70:de:97:87:e2:9e:df:d1:4c:
ab:68:03:0a:24:ea:ef:f5:4a:f6:63:db:ba:4b:d3:
0a:cd:a4:8a:64:4c:22:5d:35:d9:56:e5:b7:ae:00:
ae:eb:de:54:9a:d5:0d:20:47:ae:e1:17:08:95:c0:
72:67:cc:83:a8:de:83:1f:00:fd:d4:3f:ba:50:b8:
b2:c9:94:76:a2:e4:ac:e2:74:4c:b9:2f:8b:79:85:
fc:ac:c4:96:ca:da:4d:74:30:d8:23:71:0c:cf:aa:
40:19:7f:75:f0:aa:d0:c3:82:df:1c:2d:3a:7d:2f:
cd:53:b6:58:02:0f:76:8c:64:ec:9b:a4:2f:79:dc:
86:66:35:62:f3:af:91:7e:5d:c6:1c:ca:2f:fe:4e:
f3:3c:44:a4:dc:35:63:f3:05:f0:30:43:df:c2:e8:
ae:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C3:2C:92:D6:D5:BD:69:E3:81:F4:53:52:E3:F1:61:76:87:E7:EA
X509v3 Authority Key Identifier:
keyid:91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:b7:10:c7:80:da:86:86:c7:6e:50:e9:2b:0c:92:ef:1e:9d:
7b:7b:36:92:83:cc:08:a5:d3:3a:e6:25:24:cb:99:ba:b0:cb:
20:b6:2d:53:b8:67:cb:27:e6:03:ed:d3:4f:e3:bf:b0:5e:6a:
05:54:27:e2:03:23:c1:3b:ab:ed:16:29:89:74:f7:91:a0:18:
db:12:54:b3:5b:b5:94:fc:9c:f3:94:d9:cd:53:78:30:ef:9f:
ed:56:8f:83:df:a0:76:f7:c5:f0:0f:58:7e:ae:53:29:bc:3b:
b6:e4:3f:78:dc:ee:d1:19:14:04:2b:0d:34:2b:c5:08:db:2a:
5b:14:9e:2b:50:90:49:7e:d0:41:15:76:25:76:0f:e9:2c:47:
da:d1:c9:b0:1a:41:33:0b:24:78:b8:5e:ab:9c:c2:d2:48:e2:
1f:6e:64:57:0c:da:15:06:ef:69:35:c3:9f:0e:d9:d7:fc:42:
ed:7e:6f:f9:85:f8:0b:33:f0:36:d2:3e:8c:0f:c4:21:cb:04:
5a:d8:16:2c:56:50:88:4b:08:84:15:88:f8:a1:b1:bc:4d:ad:
08:45:4f:e9:75:3d:9f:cb:d7:d7:35:89:a0:6d:a8:47:c9:9d:
23:23:43:df:42:2f:6d:61:3d:ac:73:4b:4d:aa:1a:93:bc:9a:
2d:f5:9f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:47:07 2026 by rpki-client