Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier: 1801JnyKZM+Y4OeZsbX71KDwHVs1UW5hfVqHCO7V804=
Subject key identifier: 29:F1:D4:E3:81:02:40:26:56:AE:31:AD:62:E1:A3:51:74:38:A6:C5
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 01A12A3191C4E3CD005ADA3FE28101787F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number: 1A9D
Signing time: Sun 11 Oct 2026 09:00:54 +0000
Manifest this update: Sun 11 Oct 2026 09:00:54 +0000
Manifest next update: Mon 12 Oct 2026 09:00:54 +0000
Files and hashes: 1: ddmt2-uWwkD03hR8f-AnYnhHvEQ.roa (hash: NzfyOsp8qB/kzAypqWkHF3Ue4tcxIJ2yaDyTF4sPpVU=)
2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: vlAjM/DCJ66f58r956Ee/BpjEl0SxJ7PpkjV8VDJIYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:45:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:31:91:c4:e3:cd:00:5a:da:3f:e2:81:01:78:7f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: Oct 11 09:00:54 2026 GMT
Not After : Oct 12 09:00:54 2026 GMT
Subject: CN=29f1d4e38102402656ae31ad62e1a3517438a6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:17:eb:5b:fc:7d:fa:64:89:78:69:c4:e0:12:
58:54:36:48:52:09:e2:49:3f:8a:2c:7d:3a:aa:7f:
02:f7:e2:1d:f0:4c:33:eb:9d:bb:c0:b8:46:d9:f6:
21:84:8b:54:e8:89:f0:58:ca:ec:ce:43:38:07:92:
6b:25:e1:1e:33:6f:b7:5d:16:e4:f6:8f:b0:9c:06:
26:38:81:39:0d:20:0b:b1:06:bb:7f:fc:a3:dc:1d:
2e:95:89:60:95:60:0c:af:8b:52:a8:86:de:fb:19:
cd:62:c4:b3:64:b7:50:2c:1a:ed:51:a7:34:e0:43:
52:10:61:d0:86:9f:39:10:ad:17:dc:c0:05:ce:96:
3c:38:44:f7:b0:8a:73:c5:51:5a:0e:9f:4b:64:f3:
df:e7:4a:49:85:56:e3:1e:c6:4c:09:35:46:51:50:
a8:ad:7c:db:be:05:8a:5d:f5:76:98:1e:f0:f9:26:
da:6a:1b:5c:0f:f0:23:9d:b1:1e:a1:fb:65:1a:ef:
4d:50:3c:24:d9:c5:63:28:f3:b6:f6:e9:03:a4:b7:
10:d5:75:a1:d8:7b:13:9d:9d:ba:3f:d8:ae:d3:f2:
52:82:81:f7:ba:4a:4d:62:c9:b8:c0:fd:a9:75:e7:
0f:02:ae:39:41:30:34:e4:6a:ee:c2:44:32:42:fc:
25:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F1:D4:E3:81:02:40:26:56:AE:31:AD:62:E1:A3:51:74:38:A6:C5
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:de:de:16:f0:38:61:c9:74:7f:5a:ab:31:cd:c6:1d:73:7a:
f0:24:59:c5:3f:2f:fd:88:07:60:7d:a5:22:a7:31:f0:fb:b6:
af:bf:85:9c:d5:11:82:10:ad:a3:d0:85:7e:9b:3d:f3:fd:15:
2d:c8:5b:62:3a:93:38:ea:c9:35:81:5d:54:3b:d3:70:11:e1:
1c:d7:b3:b7:80:25:b0:cc:05:b9:3f:54:78:4b:34:f1:1b:21:
cb:7b:42:2a:be:30:4d:c7:d4:9a:8a:3d:9f:c3:45:66:52:ee:
93:a7:bf:d3:76:22:dc:f3:ab:45:ad:fa:32:c6:5a:be:a2:02:
4c:c3:3a:95:57:96:29:39:e6:b0:60:99:4b:bf:a7:0b:cd:2d:
d9:69:0d:6d:f2:a7:2d:5d:db:1c:83:ac:9d:15:79:3b:59:af:
15:68:86:bc:48:f3:c8:ab:71:80:cf:07:f9:8f:e3:3a:7b:bc:
9c:91:f0:48:f4:80:d6:17:28:dd:70:76:9c:17:a6:ac:a6:96:
1a:94:fd:b6:f4:56:b0:68:1e:8b:f5:1e:41:11:f8:1e:41:a3:
06:a2:84:1f:36:fe:a0:58:60:21:c7:96:f9:f3:82:55:43:b9:
63:4f:c5:3d:ed:b8:b9:33:6f:bb:4f:bc:79:ab:0f:55:8c:8e:
c4:37:9d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 11:32:15 2026 by rpki-client