Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: yliVU1qeBUOId7qEJob1jdTDeZn6AWxjbgXLUM26iUk=
Subject key identifier: F5:06:DF:A4:D3:66:67:AB:9F:58:2F:46:BB:D8:25:BB:60:C9:62:4D
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 01A0E88903F15332CB72EC804F98574DDA30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 1A79
Signing time: Mon 28 Sep 2026 15:01:28 +0000
Manifest this update: Mon 28 Sep 2026 15:01:28 +0000
Manifest next update: Tue 29 Sep 2026 15:01:28 +0000
Files and hashes: 1: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: 6SshfTvkhXSVy4aza8bAROyUk2jPtSyEsQiMt1OsyUo=)
2: YF8tuWYG1Vw7dIaOMivXHZ0e1pU.roa (hash: oIHlw0teS6yzCF5/spwSi4mwOeeMJuzSTSKfdSl5QBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 15:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:03:f1:53:32:cb:72:ec:80:4f:98:57:4d:da:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: Sep 28 15:01:28 2026 GMT
Not After : Sep 29 15:01:28 2026 GMT
Subject: CN=f506dfa4d36667ab9f582f46bbd825bb60c9624d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:cd:82:ee:0c:a8:b1:d5:d0:30:21:f7:0f:
57:61:91:02:bf:8a:c4:cc:f4:b3:21:9e:d8:04:43:
bf:3b:ce:46:a2:9d:ce:e1:63:3b:29:f1:0c:19:8d:
93:35:f9:71:b5:72:2d:95:1d:bf:30:f0:88:94:9e:
fc:25:30:77:f7:8b:7e:ff:70:cb:46:26:a0:90:fa:
0e:bb:96:90:cd:4a:f6:ce:33:fd:8a:c9:3c:ca:aa:
32:a3:8f:a1:2e:ac:4c:e7:8a:fd:8e:73:8c:2c:ea:
e8:1e:c3:4d:80:de:8e:ce:2c:f7:2e:0b:53:9e:46:
23:2a:4a:a2:b1:20:44:70:0a:48:9d:52:45:cf:cb:
f0:18:fb:f1:91:b6:ca:25:c8:4e:f4:6a:66:81:06:
b5:80:1b:a4:16:fe:bb:79:5a:52:54:5d:11:0d:52:
41:c7:4a:e8:6f:70:1a:5e:2c:17:52:b6:70:d8:ae:
b2:eb:0d:04:8a:88:9f:ed:93:56:2a:01:ec:c8:11:
d6:0f:e7:ed:c4:e6:c1:10:e4:46:66:d1:50:43:bd:
82:9a:5f:39:90:7e:7d:d3:0a:75:fd:86:cb:b9:9a:
26:31:de:fb:5f:83:4d:92:35:b7:20:48:30:a5:8e:
79:84:72:6a:b5:fb:dc:82:73:c2:70:ee:0c:39:18:
09:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:06:DF:A4:D3:66:67:AB:9F:58:2F:46:BB:D8:25:BB:60:C9:62:4D
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:aa:04:b8:19:68:69:79:7b:12:cb:6b:91:00:f7:dd:36:b7:
2f:ca:08:c8:3a:68:e1:d6:00:7d:9a:da:27:5d:52:1f:46:32:
1f:a6:32:93:4a:6f:2b:45:bd:7f:a9:24:ed:7c:cc:4b:e3:5d:
f6:cc:e6:c7:a5:d5:d8:c4:01:cc:a6:0d:21:bc:91:7a:2d:42:
89:79:cf:7d:8e:40:86:0c:d9:ec:91:34:a3:0f:26:d8:d0:a3:
bc:26:d3:a8:d3:74:0f:97:03:ad:d8:30:25:c6:44:63:81:36:
11:15:87:9f:7e:e4:b4:b7:f7:12:7c:8e:94:cf:cb:66:dd:06:
58:4d:18:39:c7:b2:c8:b9:ce:7c:f5:d6:df:54:7c:31:af:63:
cd:f4:93:3c:96:a7:08:dd:5b:da:81:2d:99:62:1b:fe:8f:b7:
34:c6:a9:72:36:65:43:8e:69:a8:91:ba:a9:88:34:b7:ec:85:
9b:1e:0a:31:90:a4:e0:8b:40:97:d7:b2:b6:2d:a9:dd:26:c1:
77:af:b9:6b:31:fa:6f:72:bf:ac:d7:17:ea:53:21:e4:aa:81:
54:04:65:ee:c1:1e:84:08:c8:1c:2a:db:a1:05:56:b3:d6:57:
4f:e3:02:07:83:b5:0a:2b:ab:3a:6c:8c:14:62:e0:f4:32:35:
e6:5a:75:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoiQPxUzLLcuyAT5hXTdowMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZjI5ZDJiZDE1ZTAyNGJiOTdlNzJiMjEyNDJiNTIzZGM5
MTUxODEwHhcNMjYwOTI4MTUwMTI4WhcNMjYwOTI5MTUwMTI4WjAzMTEwLwYDVQQD
EyhmNTA2ZGZhNGQzNjY2N2FiOWY1ODJmNDZiYmQ4MjViYjYwYzk2MjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugzNgu4MqLHV0DAh9w9XYZECv4rE
zPSzIZ7YBEO/O85Gop3O4WM7KfEMGY2TNflxtXItlR2/MPCIlJ78JTB394t+/3DL
RiagkPoOu5aQzUr2zjP9isk8yqoyo4+hLqxM54r9jnOMLOroHsNNgN6Oziz3LgtT
nkYjKkqisSBEcApInVJFz8vwGPvxkbbKJchO9GpmgQa1gBukFv67eVpSVF0RDVJB
x0rob3AaXiwXUrZw2K6y6w0Eioif7ZNWKgHsyBHWD+ftxObBEORGZtFQQ72Cml85
kH590wp1/YbLuZomMd77X4NNkjW3IEgwpY55hHJqtfvcgnPCcO4MORgJvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPUG36TTZmern1gvRrvYJbtgyWJNMB8GA1UdIwQY
MBaAFEfynSvRXgJLuX5yshJCtSPckVGBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEt
MDE2NjUzMmRhYzU2LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9jMzI1OTgtMmE5NS00M2M0LTliNmEtMDE2NjUzMmRhYzU2
LzEvUl9LZEs5RmVBa3U1Zm5LeUVrSzFJOXlSVVlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqoEuBlo
aXl7EstrkQD33Ta3L8oIyDpo4dYAfZraJ11SH0YyH6Yyk0pvK0W9f6kk7XzMS+Nd
9szmx6XV2MQBzKYNIbyRei1CiXnPfY5AhgzZ7JE0ow8m2NCjvCbTqNN0D5cDrdgw
JcZEY4E2ERWHn37ktLf3EnyOlM/LZt0GWE0YOceyyLnOfPXW31R8Ma9jzfSTPJan
CN1b2oEtmWIb/o+3NMapcjZlQ45pqJG6qYg0t+yFmx4KMZCk4ItAl9eyti2p3SbB
d6+5azH6b3K/rNcX6lMh5KqBVARl7sEehAjIHCrboQVWs9ZXT+MCB4O1CiurOmyM
FGLg9DI15lp1hQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 02:02:07 2026 by rpki-client