Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.mft
File: ku7WCxGcJj3Q1Azv6fvWVIk1rl8.mft (raw, json)
Hash identifier: np7KK88nd6JFO5v/mRV5/Fm3OfTCxmQ51F+klyxcIkA=
Subject key identifier: 32:C7:59:51:F1:BE:98:71:C9:D2:BE:10:CA:9B:FC:28:C2:92:68:A8
Authority key identifier: 92:EE:D6:0B:11:9C:26:3D:D0:D4:0C:EF:E9:FB:D6:54:89:35:AE:5F
Certificate issuer: /CN=92eed60b119c263dd0d40cefe9fbd6548935ae5f
Certificate serial: 01A0EB1C6173ACFBAC3F7B7F751C2E142A3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.mft
Manifest number: F3
Signing time: Tue 29 Sep 2026 03:01:40 +0000
Manifest this update: Tue 29 Sep 2026 03:01:40 +0000
Manifest next update: Wed 30 Sep 2026 03:01:40 +0000
Files and hashes: 1: ku7WCxGcJj3Q1Azv6fvWVIk1rl8.crl (hash: v6Aq8ALMnpuxX7JL1x91fOYewtvAUjNhaF+QdPwRNgs=)
2: xlhY8tX9lBwHVp8VuomicH6lW4o.roa (hash: aR0n4UA9z3cBX9/a0HFsNmvZi8ea7RGY46C+J9dNC0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:1c:61:73:ac:fb:ac:3f:7b:7f:75:1c:2e:14:2a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eed60b119c263dd0d40cefe9fbd6548935ae5f
Validity
Not Before: Sep 29 03:01:40 2026 GMT
Not After : Sep 30 03:01:40 2026 GMT
Subject: CN=32c75951f1be9871c9d2be10ca9bfc28c29268a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:83:e7:1d:b8:a4:37:fa:87:2a:f8:68:01:85:
20:a2:40:bb:f1:63:14:81:42:a7:f5:65:06:97:56:
0a:0d:c5:19:4d:b3:00:81:f3:06:bb:85:49:ce:ac:
a6:c6:4c:43:85:49:a0:b2:42:64:e9:00:26:2b:34:
20:8f:1e:65:b7:3e:6a:bc:aa:6b:3f:42:7d:60:62:
66:05:b8:65:06:21:bc:a9:f3:0c:64:e2:b3:ed:af:
64:f9:a5:00:01:23:53:8e:3e:60:4a:ea:61:dd:ec:
37:2c:36:82:19:dd:ea:6e:15:a3:da:d8:b5:52:87:
d0:d8:37:40:48:08:03:0b:09:c8:48:99:17:76:48:
98:a0:ff:6a:f2:77:72:9e:c0:87:a1:3d:4a:90:e3:
84:5e:15:7a:01:c8:5e:e5:2d:84:4e:af:de:3a:43:
5f:c4:70:33:42:c6:c9:63:49:01:b8:4e:25:46:af:
3b:ce:2e:53:df:59:c3:4b:dd:b9:f2:47:b4:6a:8d:
19:1c:72:74:4f:fc:2c:2a:ae:8a:7e:24:12:3d:56:
a6:e0:40:df:83:17:45:e8:7f:ff:11:d9:0e:c8:9d:
15:b8:d6:0e:f0:96:44:74:d1:ab:9c:46:b0:d1:cb:
a6:da:50:18:e1:b4:03:45:cd:a1:74:a3:be:d5:fa:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C7:59:51:F1:BE:98:71:C9:D2:BE:10:CA:9B:FC:28:C2:92:68:A8
X509v3 Authority Key Identifier:
keyid:92:EE:D6:0B:11:9C:26:3D:D0:D4:0C:EF:E9:FB:D6:54:89:35:AE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/6b31ee-24fb-4c03-be2e-3776fd47dc65/1/ku7WCxGcJj3Q1Azv6fvWVIk1rl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fb:c2:f1:a8:e4:c6:e0:98:45:68:b5:fe:52:76:31:e2:bb:
f2:21:43:f6:5f:23:55:a7:0b:42:a7:d2:38:49:27:cd:a2:48:
d0:ce:44:04:dc:39:7c:89:2f:8f:a5:4f:7a:6a:62:e7:06:80:
a1:07:8d:61:f8:0c:e0:a2:38:c6:95:89:9c:3e:27:4d:4c:b3:
b4:a2:1b:53:ea:59:66:03:06:fa:9e:2d:98:ed:4d:2d:ef:30:
ff:3b:99:1b:54:0c:12:dc:12:cc:4a:fc:bf:78:83:70:d6:e7:
c7:05:ec:7b:f0:d1:e4:fb:09:79:41:85:70:d7:dc:14:2d:2f:
19:22:04:10:79:68:88:8e:04:57:c2:8a:7c:ec:0c:3a:d5:b5:
c2:97:71:2b:79:77:b7:ca:52:34:38:c0:26:86:8c:90:12:8c:
0f:eb:89:80:b7:1b:55:6a:4b:39:c4:5d:48:df:42:b7:ef:fc:
d7:42:bb:ab:47:62:9e:2e:4d:ab:9f:dd:ec:37:54:a9:a8:2c:
9a:43:0c:f9:3d:cb:2c:f1:cb:80:1d:a1:81:41:9f:7d:d8:bf:
35:ce:59:fc:81:3c:cd:21:ea:6c:18:2c:9b:59:ea:60:3c:9a:
35:8a:3a:62:62:36:e7:ea:f2:9e:40:29:28:ce:ca:d2:2b:6b:
6e:a9:76:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDrHGFzrPusP3t/dRwuFCo6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZWVkNjBiMTE5YzI2M2RkMGQ0MGNlZmU5ZmJkNjU0ODkz
NWFlNWYwHhcNMjYwOTI5MDMwMTQwWhcNMjYwOTMwMDMwMTQwWjAzMTEwLwYDVQQD
EygzMmM3NTk1MWYxYmU5ODcxYzlkMmJlMTBjYTliZmMyOGMyOTI2OGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoPnHbikN/qHKvhoAYUgokC78WMU
gUKn9WUGl1YKDcUZTbMAgfMGu4VJzqymxkxDhUmgskJk6QAmKzQgjx5ltz5qvKpr
P0J9YGJmBbhlBiG8qfMMZOKz7a9k+aUAASNTjj5gSuph3ew3LDaCGd3qbhWj2ti1
UofQ2DdASAgDCwnISJkXdkiYoP9q8ndynsCHoT1KkOOEXhV6Ache5S2ETq/eOkNf
xHAzQsbJY0kBuE4lRq87zi5T31nDS9258ke0ao0ZHHJ0T/wsKq6KfiQSPVam4EDf
gxdF6H//EdkOyJ0VuNYO8JZEdNGrnEaw0cum2lAY4bQDRc2hdKO+1fpmgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLHWVHxvphxydK+EMqb/CjCkmioMB8GA1UdIwQY
MBaAFJLu1gsRnCY90NQM7+n71lSJNa5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3U3V0N4R2NKajNRMUF6djZmdldWSWsxcmw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82YjMxZWUtMjRmYi00YzAzLWJlMmUt
Mzc3NmZkNDdkYzY1LzEva3U3V0N4R2NKajNRMUF6djZmdldWSWsxcmw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82YjMxZWUtMjRmYi00YzAzLWJlMmUtMzc3NmZkNDdkYzY1
LzEva3U3V0N4R2NKajNRMUF6djZmdldWSWsxcmw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcPvC8ajk
xuCYRWi1/lJ2MeK78iFD9l8jVacLQqfSOEknzaJI0M5EBNw5fIkvj6VPempi5waA
oQeNYfgM4KI4xpWJnD4nTUyztKIbU+pZZgMG+p4tmO1NLe8w/zuZG1QMEtwSzEr8
v3iDcNbnxwXse/DR5PsJeUGFcNfcFC0vGSIEEHloiI4EV8KKfOwMOtW1wpdxK3l3
t8pSNDjAJoaMkBKMD+uJgLcbVWpLOcRdSN9Ct+/810K7q0dini5Nq5/d7DdUqags
mkMM+T3LLPHLgB2hgUGffdi/Nc5Z/IE8zSHqbBgsm1nqYDyaNYo6YmI25+rynkAp
KM7K0itrbql25A==
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:08:59 2026 by rpki-client