Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: cr6h+ZR0T18oXCpNfUquqziN1cjayVrp3JuCw42d9Rk=
Subject key identifier: 1E:E5:EC:E0:F2:93:49:BE:7A:D6:6D:2A:B4:F0:7B:36:3C:42:01:20
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 01A0E2190F7E9A26C4221A41621E23EAC693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 09:01:28 +0000
Manifest this update: Sun 27 Sep 2026 09:01:28 +0000
Manifest next update: Mon 28 Sep 2026 09:01:28 +0000
Files and hashes: 1: gmcTjO0RV1Up_jbIfk_CZHi4V2A.roa (hash: Gqp9iA7OYQl9mvBvIysw6E+42GR1MiVOzZC/chm6YUU=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: 74TLpKNjVR5NOPkoEN/5AcFur3xWX3jpKm4tsn0aw+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:19:0f:7e:9a:26:c4:22:1a:41:62:1e:23:ea:c6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: Sep 27 09:01:28 2026 GMT
Not After : Sep 28 09:01:28 2026 GMT
Subject: CN=1ee5ece0f29349be7ad66d2ab4f07b363c420120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e8:3c:16:a0:3e:1f:9d:78:44:4e:d8:0e:56:
91:e2:4c:9c:0c:9e:c8:30:c4:ca:2a:e4:c7:fe:31:
5e:9a:ed:dc:d6:16:5a:f2:5c:1b:01:81:67:e5:a1:
fa:da:e3:03:04:ff:17:c4:52:ba:bf:a2:46:bf:9f:
1e:64:70:50:37:70:28:8b:ed:66:ed:39:5c:be:7d:
22:86:d7:34:9a:82:88:56:68:19:2b:9f:ef:bb:bd:
7a:3e:20:97:35:0f:3b:34:a7:2a:fc:96:9c:26:64:
96:d9:bb:ed:e2:4c:5d:7d:aa:3f:ed:17:d1:4e:93:
a1:91:8f:3e:ca:4f:d4:a6:d0:7a:e4:e0:97:12:4c:
3a:33:b3:ba:29:72:cd:5e:04:ec:db:60:1e:ff:fd:
e5:42:11:db:f8:4e:a9:ec:13:08:c8:c9:78:de:32:
ef:e1:ce:37:5a:f7:83:dc:6b:7c:10:44:6c:72:b8:
ef:f9:00:0b:fa:be:2e:2b:06:df:9f:44:e9:1b:03:
67:ab:20:b6:a1:ea:bd:f6:5c:d0:e3:c3:b7:d3:5c:
be:5e:83:98:61:4c:da:b8:3f:a8:ce:d8:45:72:8f:
15:4b:1f:f4:a8:17:e1:4c:76:97:92:94:ca:0f:e8:
19:c1:a5:d2:a5:c2:99:c3:ee:0e:aa:c3:e1:91:ac:
bc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E5:EC:E0:F2:93:49:BE:7A:D6:6D:2A:B4:F0:7B:36:3C:42:01:20
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c6:ab:bf:37:84:a1:04:c8:74:73:22:1f:23:ae:ef:8a:9b:
3e:41:2c:8b:38:f9:e9:ab:22:86:25:ec:7b:7f:20:d5:46:b2:
a5:2d:93:4f:fa:f1:a2:6f:59:bf:80:69:a2:dd:a4:33:08:6c:
46:28:47:d8:b9:8a:2a:a3:de:7f:e5:35:58:da:da:7b:1d:59:
42:dd:ac:56:94:04:1f:1b:f4:71:5a:af:b9:d4:6f:01:ae:80:
73:c9:4c:1b:8b:82:b1:8a:f2:7f:16:60:e4:4d:a8:f0:d9:8f:
be:95:d2:e8:d1:6a:a9:87:93:78:71:dd:a0:49:9d:24:34:5b:
6e:c8:d8:4c:87:d2:67:8f:eb:73:fd:72:e7:a1:05:c5:32:74:
ee:ee:96:5f:f8:53:cc:15:cd:ca:96:2f:05:34:fb:c8:d1:5c:
f3:3d:f4:f6:62:d9:4b:70:fa:f8:f7:1c:fd:4c:e2:22:13:44:
6d:8d:b5:0f:16:64:2f:f0:92:b3:f1:b5:8c:0a:ea:40:dc:d4:
e1:5e:e5:77:7f:f1:76:c5:e4:92:98:bf:68:8e:a3:66:08:f9:
5c:0f:ca:3b:a4:0c:5d:2a:ea:94:de:2d:5d:22:a7:a5:f7:d3:
6a:33:40:67:a8:24:1f:03:09:76:f8:5f:99:b3:1f:0e:7b:25:
ba:bd:53:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:21:56 2026 by rpki-client