Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: W1/mpFHVFaz5ogKKWijjB0vapv1C6cSVeyDni2y8WO0=
Subject key identifier: BC:CC:1F:0E:9F:EC:0D:CF:C7:CD:AB:E6:2C:DE:06:A0:A9:04:7A:3E
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 01A12DD76A540D2E893DE7B4B3462AAFA8D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 12ED
Signing time: Mon 12 Oct 2026 02:00:54 +0000
Manifest this update: Mon 12 Oct 2026 02:00:54 +0000
Manifest next update: Tue 13 Oct 2026 02:00:54 +0000
Files and hashes: 1: LoBZWNkmLSVfsZuZ4a_P-xbLNmY.roa (hash: 5btPQpV3QRoECaB/uLJs3VZKrBAPWks8ioyfHTWrUsc=)
2: jDCERCzkhdhrug4frNl3uzi2ve4.roa (hash: bzlZu7qYns9heIilVJxGkJDoL0/9tWjc+pGecsMq6Ws=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: zcOticw9icd5OzQwPm/SqPvcWWedfrPHY2k4yiDP8+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:d7:6a:54:0d:2e:89:3d:e7:b4:b3:46:2a:af:a8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Oct 12 02:00:54 2026 GMT
Not After : Oct 13 02:00:54 2026 GMT
Subject: CN=bccc1f0e9fec0dcfc7cdabe62cde06a0a9047a3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:a6:6c:e1:cd:e7:5f:86:6e:06:cf:a0:67:
bb:62:8b:6a:69:42:da:10:93:92:94:58:57:9b:5d:
ff:59:01:93:e6:1f:ca:9a:c5:08:57:0c:c0:d2:a5:
67:5f:6a:ad:19:87:7f:59:7b:88:d2:a7:f3:7f:f3:
49:d2:af:25:b3:fa:97:61:d4:f9:e7:dc:fd:d5:ef:
00:2a:95:34:21:4e:88:27:8f:95:fd:d8:fd:51:96:
a9:ad:f6:11:29:45:bb:1b:11:02:23:44:45:e8:96:
76:72:fe:b8:98:56:a3:e3:f5:37:cf:17:14:f8:f7:
98:59:89:dd:fc:db:1e:4e:7e:7f:09:ea:98:de:d9:
52:47:8a:47:b3:93:46:76:df:3e:db:03:7e:e2:f0:
26:3c:a9:00:fc:cd:76:88:39:d8:9f:5c:2d:d4:c7:
ab:2f:d1:07:27:85:79:b5:78:3b:e4:0b:02:3b:dc:
0e:b8:b6:69:8a:03:c4:aa:03:02:0a:a3:d2:62:46:
b7:9c:14:a7:b6:43:f3:a5:f5:c1:54:e5:d6:80:d0:
3d:59:67:1c:4b:eb:df:fc:01:7d:94:a7:0a:dc:cd:
2e:eb:c1:9d:0b:3b:80:ce:10:6b:b6:14:d9:21:86:
18:7a:b0:95:0f:f5:6c:f5:f0:3d:67:c6:97:d7:f8:
ce:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CC:1F:0E:9F:EC:0D:CF:C7:CD:AB:E6:2C:DE:06:A0:A9:04:7A:3E
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:13:43:45:00:46:d3:d8:b7:21:67:86:83:e8:16:96:e8:99:
2f:c2:bf:e7:79:d5:ed:75:55:a8:82:ff:3c:5f:74:16:9a:d9:
8e:fc:1f:fb:6c:75:77:b3:4d:e1:fa:94:3d:fa:f0:f6:8e:74:
5f:04:3c:ea:6d:ba:ce:0e:3f:f7:3a:df:8a:6b:1e:ca:c7:dc:
72:fd:13:e4:9f:ec:33:88:bf:3b:7e:f2:40:e9:8b:17:63:57:
6a:ef:83:f1:aa:75:ef:ca:b9:4d:d5:db:13:fb:38:cd:7a:5c:
1a:41:20:3b:2b:21:14:c8:1a:01:59:80:bd:6a:9a:6b:7d:2c:
c1:c7:a9:b5:cf:e5:f4:6a:1d:a0:55:56:91:af:75:bf:31:aa:
73:5f:9a:98:9b:d7:68:7f:d1:68:8e:f9:0d:79:1d:f1:9d:8b:
69:84:2c:fe:c8:2b:50:b6:7a:65:e7:e1:24:f6:d8:89:7d:66:
b7:07:4b:c6:bf:fd:7e:d4:3d:bd:9d:a3:a7:6a:51:6f:d7:f7:
22:c5:e4:c4:70:72:68:c8:3d:3a:c4:d2:1c:ea:b1:58:68:b9:
e1:e9:e1:bc:d3:c8:6e:84:12:d1:50:a0:a7:de:ee:01:c0:74:
70:19:01:24:e3:d9:5e:9e:8c:6c:ad:a6:1e:06:85:a3:d1:76:
7a:e6:44:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 08:50:11 2026 by rpki-client