Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
File: _KmLHQ7MzE9v8afn24S0uy9VsI0.mft (raw, json)
Hash identifier: 9BloECOyz1KvQtlzRQhUcwFop7Tvf7rQr8qWgvaWjS0=
Subject key identifier: 09:7F:46:CD:40:97:94:97:14:F5:BA:F1:B3:B7:16:47:78:3C:74:A5
Authority key identifier: FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
Certificate issuer: /CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Certificate serial: 01A0D5392A1B14EC8E6AD46201FB38FDB696
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
Manifest number: 1A36
Signing time: Thu 24 Sep 2026 21:01:28 +0000
Manifest this update: Thu 24 Sep 2026 21:01:28 +0000
Manifest next update: Fri 25 Sep 2026 21:01:28 +0000
Files and hashes: 1: AhIhHW2MibgaDu_QaZSY4Wn14lA.roa (hash: xbB2zeoDRQ7gNZ/Ox/bptd6ot/c5+mbp2c7ngkO2m1M=)
2: _KmLHQ7MzE9v8afn24S0uy9VsI0.crl (hash: ZWFZbfucxyA/qfFYNnyGfJ+NFMecyjefxvxSrFCbupk=)
3: cunetuj50zVdetbLOO7PDcDuLxQ.roa (hash: CwPj/a3y+H12p6L10ZWScjrKIYWmCx+U7Hr8zx98Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:2a:1b:14:ec:8e:6a:d4:62:01:fb:38:fd:b6:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca98b1d0ecccc4f6ff1a7e7db84b4bb2f55b08d
Validity
Not Before: Sep 24 21:01:28 2026 GMT
Not After : Sep 25 21:01:28 2026 GMT
Subject: CN=097f46cd4097949714f5baf1b3b71647783c74a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:be:c2:0c:5a:e3:60:1f:35:61:7a:8e:29:
49:8a:85:8a:4b:87:8f:1c:fd:4c:f4:ec:19:13:ce:
f3:63:14:a4:f7:9a:0e:ce:10:a9:9c:ae:1b:20:8f:
c5:24:30:1c:c7:02:4a:5c:8e:d4:24:7b:76:9a:ad:
e9:ee:46:b5:1f:0f:56:16:0d:a2:b0:04:64:c1:31:
40:07:52:e9:da:51:1c:ac:5f:54:89:fb:cc:9e:cb:
44:c3:bf:42:c1:8f:ae:0b:1c:8a:16:36:67:c3:6e:
5f:3a:87:19:49:0d:1d:49:08:09:34:8f:eb:4e:5a:
ed:d2:1f:d2:53:ab:28:52:49:93:9d:bf:c9:e5:36:
f5:0e:51:d6:e1:93:85:fe:9b:d2:51:1e:c4:d0:32:
61:16:a9:0a:e5:93:71:83:55:9d:05:1d:f4:8f:ee:
89:31:e7:dd:8f:52:a9:c9:22:0b:62:10:99:b9:6a:
54:46:31:5c:63:92:9c:e5:67:30:ce:d2:df:46:ca:
e5:59:73:e9:94:f8:fc:94:6b:e7:87:0f:02:87:30:
80:fb:9c:41:95:6c:a2:4e:bc:74:5e:e3:c6:b4:bb:
07:ee:5e:1f:c6:26:ef:f2:91:78:15:5a:c8:a4:31:
c1:d2:e3:1f:aa:e2:05:ca:67:eb:68:d4:89:ec:34:
7a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7F:46:CD:40:97:94:97:14:F5:BA:F1:B3:B7:16:47:78:3C:74:A5
X509v3 Authority Key Identifier:
keyid:FC:A9:8B:1D:0E:CC:CC:4F:6F:F1:A7:E7:DB:84:B4:BB:2F:55:B0:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KmLHQ7MzE9v8afn24S0uy9VsI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/971e73-fa83-4579-8532-58f0f325c2b8/1/_KmLHQ7MzE9v8afn24S0uy9VsI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:22:eb:26:ad:af:a1:e5:19:c2:63:95:2f:62:25:c0:1f:5e:
4f:34:37:91:b2:08:ff:ef:f6:df:f6:18:3c:52:d2:f7:0c:d6:
e6:45:3b:46:b1:ae:9a:c5:19:59:54:ea:5a:cb:f3:5c:9e:10:
88:7a:32:c5:32:8e:e0:94:f0:1e:06:97:28:13:9c:62:a2:4d:
62:0c:8f:bd:9a:05:7e:cb:af:4d:1e:24:39:6c:e3:aa:40:3d:
92:ac:3c:bc:25:05:4d:89:1b:92:2c:21:f8:d8:a6:d6:f1:96:
94:0b:d6:ca:67:93:d1:49:e7:2b:b8:1c:d9:03:a8:bc:ce:7c:
f7:e7:3a:cf:6b:d5:ef:80:00:07:37:33:9e:22:47:7c:8a:f6:
ec:f7:f4:64:4f:bc:cd:3b:d0:05:a7:6c:d0:28:bf:9f:60:fe:
f4:1f:95:65:04:86:ec:67:c9:12:06:91:c8:46:e0:9c:b7:17:
af:62:dd:6f:af:34:7f:10:e7:95:2c:09:66:ba:7e:16:e2:71:
51:dc:1d:3e:93:5d:e0:cc:fa:d1:b3:0f:83:62:d2:db:17:60:
31:52:16:15:27:03:d6:7d:6e:6d:e7:d2:de:ff:c7:76:7c:36:
ad:66:64:4c:0a:5c:bb:e8:04:23:51:de:1a:4b:bb:d7:23:ba:
9f:1b:32:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:53:51 2026 by rpki-client