Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
File: K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json)
Hash identifier: NGHRLr7x6Gpk3H7tsICK2ZGN9crNwwQLoPyPKrsvIJQ=
Subject key identifier: 4E:92:2F:0F:2C:72:B9:BA:38:53:5F:BD:9B:F0:C5:01:78:94:8D:45
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 01A0C821CA8002C7E8E52806A0348E520A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
Manifest number: 1A76
Signing time: Tue 22 Sep 2026 08:00:52 +0000
Manifest this update: Tue 22 Sep 2026 08:00:52 +0000
Manifest next update: Wed 23 Sep 2026 08:00:52 +0000
Files and hashes: 1: H8kw6Sg_EEFlV4WiqGHQYPzK8jI.roa (hash: vA9KgFsuau17xYabkQq0t4vvihSWAC35OyURHBxCae8=)
2: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: PhG4VkbFSwd0cITpsQV7ePoIsagftxzWtiJfjaistug=)
3: euy-jk1gO1wrAYZN4p50UuYsEPs.roa (hash: KSckesEUkDLC/vCF7oLNqmhTklvyJBTosAv+lpvioKk=)
4: saXncTu8Jyn9wHWn8gtxElcn7uk.roa (hash: IsO7tvAcqIRqvr9qvI5jdboB3g/FW6hvUsM1vnYO7yQ=)
5: t7vrOp3nsycdnJxMZ5NoWiSkRSY.roa (hash: b9S+rL7jAdeW6E9Q/4UXcld20c94fuGo0soey73m5u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:ca:80:02:c7:e8:e5:28:06:a0:34:8e:52:0a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Sep 22 08:00:52 2026 GMT
Not After : Sep 23 08:00:52 2026 GMT
Subject: CN=4e922f0f2c72b9ba38535fbd9bf0c50178948d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:f8:7b:5d:c2:c8:3b:94:3a:74:3f:55:7f:
03:ca:9e:01:09:83:dd:19:2c:d2:f2:c8:5a:19:20:
a6:be:1d:1b:97:f0:09:9a:af:18:55:88:a0:30:53:
e4:72:cb:b9:f4:32:27:60:9a:1b:f2:4f:74:3a:14:
77:8e:27:54:ac:e1:f0:25:a5:98:6c:6a:d2:03:e7:
b2:0f:bc:45:e2:ed:0b:43:39:ea:ad:5b:53:c9:7e:
79:98:56:52:fc:15:09:90:d0:b7:3b:23:f0:d3:0d:
d7:18:fc:3c:94:97:0f:57:57:1a:f3:f0:7e:b0:3e:
f5:14:03:ed:91:8d:44:85:c5:af:f2:49:e5:e6:15:
38:c3:9a:aa:43:6b:5c:55:aa:e7:f2:17:8e:78:0e:
d5:db:92:6a:02:5f:d3:80:37:b0:91:77:4a:b6:3c:
14:46:04:ea:8d:f3:8b:fe:a1:85:2a:47:8b:80:56:
75:db:88:7d:3e:5e:82:be:b0:ce:e2:e2:9f:0c:c6:
a0:e5:50:f0:e2:8c:bf:57:0b:6a:7c:f2:32:87:c4:
61:6e:cd:20:e0:32:bc:b2:35:28:39:5f:0e:b5:53:
52:9a:c9:79:d9:6b:ba:f8:95:3e:09:39:87:49:da:
bc:dd:86:28:86:47:ad:07:b9:f6:ea:62:2e:2c:a2:
8d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:92:2F:0F:2C:72:B9:BA:38:53:5F:BD:9B:F0:C5:01:78:94:8D:45
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:cb:c0:e2:40:4e:46:81:09:5f:94:c0:75:ba:42:c9:81:46:
30:ec:12:2a:48:b6:d7:08:b4:1c:58:c7:95:5a:fa:0f:fd:dc:
33:af:0d:0b:11:5f:55:25:61:64:fd:38:d8:ad:cb:74:27:1e:
4d:32:38:7d:e7:63:84:41:18:64:a2:3d:26:48:0d:7d:02:59:
4f:68:d5:c0:b7:d5:51:a4:66:1c:36:ee:fb:95:72:7e:9a:f2:
7c:83:3b:a2:8e:57:4e:76:69:5a:eb:6b:d5:d8:cd:da:52:73:
c1:2b:51:08:f8:d6:02:65:2c:70:0c:aa:d6:30:01:b2:a0:68:
9b:fc:6c:3f:44:27:c1:75:e7:e9:d7:07:ac:64:d4:bc:c3:c2:
45:c2:d4:b4:7b:b1:03:9b:a8:86:61:cb:f6:7f:1e:af:74:ad:
7f:73:29:14:ff:12:c7:ce:09:77:fd:7d:b9:de:cf:ad:3d:40:
b3:2d:48:bc:0d:eb:a6:23:12:f8:08:07:89:2c:db:98:84:97:
95:ea:cf:56:8d:56:50:b7:3d:c4:50:36:82:5a:69:b3:08:24:
d5:d4:ba:d9:4c:fe:5f:ac:50:73:a8:90:2b:9b:8f:bb:fe:b8:
ad:3d:13:39:b8:ee:be:19:08:1d:84:1d:fb:82:f8:06:eb:fe:
72:50:31:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:09:39 2026 by rpki-client