Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: M+955CNcAQuZJQiau70KgP8GW1fWSHbP70XZo5xIWJ4=
Subject key identifier: 98:89:E8:79:CA:06:CB:FC:BC:5F:4A:D5:49:A1:96:36:49:FC:4A:75
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 01A0C6336EE740FA91470CD8CA9F22C295D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 1439
Signing time: Mon 21 Sep 2026 23:00:54 +0000
Manifest this update: Mon 21 Sep 2026 23:00:54 +0000
Manifest next update: Tue 22 Sep 2026 23:00:54 +0000
Files and hashes: 1: 9JiBhWSFTpZG4uWkY6bZHLtEy8E.roa (hash: xBA6Wqol2nOd0+Q4qs7TkzktF5SaUyh8B1lRNcW7BRY=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: Mx5j8v1IKZRjplcalX9UVBxF6XApbV+Uyy0KatIElSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:6e:e7:40:fa:91:47:0c:d8:ca:9f:22:c2:95:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Sep 21 23:00:54 2026 GMT
Not After : Sep 22 23:00:54 2026 GMT
Subject: CN=9889e879ca06cbfcbc5f4ad549a1963649fc4a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:37:41:0a:9e:c3:ff:4b:0b:9c:8b:c4:28:da:
35:ab:65:3a:74:1e:17:40:06:66:3f:55:5f:e0:a6:
c5:d6:74:db:a8:37:3d:bb:a3:49:91:a2:85:38:32:
2f:04:14:92:c8:1e:18:2c:ef:90:66:a6:42:00:df:
ff:95:3a:b9:10:50:6a:ae:38:90:46:14:95:86:a2:
4a:85:df:37:45:14:e3:8e:fc:ab:e4:5d:41:48:b2:
f5:23:fa:5f:9c:75:e1:7d:ba:ff:9c:25:a3:46:50:
fd:d0:b8:13:6b:94:b8:5d:4e:ad:0b:33:59:a3:f7:
86:3c:c7:a8:6a:c2:dc:6a:cb:d2:5d:d9:1d:5d:31:
07:6a:38:df:bb:3e:51:42:4c:13:89:3d:5c:35:4f:
b1:39:43:b2:83:e4:06:ea:a3:6a:bf:ed:a7:8d:1a:
ec:66:33:be:e0:02:38:f1:a0:01:e4:75:be:f5:d3:
45:4a:cf:f0:ef:a7:ce:ec:3a:0f:b3:d0:da:5f:a7:
a0:12:03:95:50:a9:34:f0:a1:37:29:e9:9e:c4:01:
db:57:84:85:ce:66:89:40:b8:f5:c5:68:6d:42:90:
3f:e4:cf:f0:2e:87:e8:85:41:f8:a2:df:88:8d:d9:
be:54:75:b3:c2:39:74:9a:2b:4c:a8:39:4e:5b:33:
e3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:89:E8:79:CA:06:CB:FC:BC:5F:4A:D5:49:A1:96:36:49:FC:4A:75
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fe:94:79:82:67:8a:73:bc:9a:96:d9:14:92:1b:e3:a0:db:
fc:9c:a9:a4:bf:62:c2:97:b9:bc:80:2b:94:9b:31:69:24:18:
36:33:b8:87:60:33:10:25:0b:ba:2e:7d:3f:43:77:7b:8c:54:
95:65:31:d8:52:b1:8b:a1:ed:c7:a0:6f:50:70:11:8d:2f:1b:
14:b9:a8:bb:69:69:2b:d3:44:39:8b:27:f1:b6:27:0e:4d:e1:
45:84:dc:d9:05:a3:8c:aa:e2:92:8a:dc:4a:81:22:d8:4b:54:
2a:39:46:e0:20:30:d3:20:4e:4e:24:cb:d5:b8:3d:c3:68:4e:
c5:e1:15:b4:27:7b:42:e6:0a:2e:4e:71:48:dd:45:64:cc:38:
83:03:5f:85:39:19:6f:7b:81:75:8d:f4:44:95:5c:e6:01:f1:
bf:73:75:a7:01:34:23:6b:90:d2:99:4d:f9:6d:c0:6e:d1:c0:
48:aa:b7:70:22:65:e7:ad:1c:c9:6d:38:90:7d:c4:29:80:64:
63:f7:9a:2f:25:21:07:34:af:e5:73:ec:cd:25:d9:57:2d:0e:
44:a2:cf:a3:b8:8c:09:a4:55:1e:0e:4b:21:6d:64:98:6e:ab:
c8:e1:7a:03:1d:e2:7e:60:5c:39:08:e7:90:b0:1a:5c:e3:d6:
30:de:cf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:27:25 2026 by rpki-client