Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
File: kPJzpjxR6vP55a57n6r9spMTQN8.mft (raw, json)
Hash identifier: MBrTnA+9AouGQHbKkhjog8uskJj8uC57m+KUOzKZclQ=
Subject key identifier: A0:05:29:CD:E9:37:9B:BB:AC:F3:1A:5B:9B:CF:CC:4B:63:C3:C7:DA
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial: 01A13C38679218B77BE748153EA5C2E89209
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
Manifest number: 1AA6
Signing time: Wed 14 Oct 2026 21:01:31 +0000
Manifest this update: Wed 14 Oct 2026 21:01:31 +0000
Manifest next update: Thu 15 Oct 2026 21:01:31 +0000
Files and hashes: 1: 2nuIt9bPWep-2UcGvqLkgY-wilc.roa (hash: Yp1t0MZeVuZGR3tdv1lGZRI1XtiJF6WvXUMNdE4/tt4=)
2: H1UfnsPmJquL-wAem-B7U2sSVbU.roa (hash: jJFynedk78xhXpOxYHZ7thKVc027uZMv2ZJ5fQeWm5w=)
3: kPJzpjxR6vP55a57n6r9spMTQN8.crl (hash: 0iBeC9n0vpyIOgKRuhMyYYn8OLOY6/Si+8HUDzmWr/k=)
4: lMgoDA5bIRwWymuV894cK1NqlE4.roa (hash: 1MayWUj9g/XYEFJmVMWNXWfQS/ghagEhZ1TszpoNUJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 21:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:38:67:92:18:b7:7b:e7:48:15:3e:a5:c2:e8:92:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Validity
Not Before: Oct 14 21:01:31 2026 GMT
Not After : Oct 15 21:01:31 2026 GMT
Subject: CN=a00529cde9379bbbacf31a5b9bcfcc4b63c3c7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:87:97:de:41:fd:66:e9:19:81:b3:cd:59:
d8:03:d1:ec:f0:50:e3:07:2a:00:68:e6:89:8d:a2:
4b:47:41:23:ae:71:0a:9b:a9:80:93:44:fe:73:10:
df:58:c3:fc:63:96:12:cb:d9:f7:01:64:7b:32:00:
69:c2:a9:20:dc:59:c6:cf:c3:51:dc:b6:e8:09:8c:
73:35:e5:55:66:93:82:55:3c:86:0c:ff:f7:8d:16:
61:04:0b:bc:32:5e:70:f1:ad:5e:05:f6:6d:91:0f:
71:52:bf:f6:91:22:f6:2e:3f:d4:55:5d:0a:f9:a4:
4c:a2:aa:9a:90:40:5a:aa:40:d3:2a:06:94:17:9e:
5b:e0:9b:c5:ac:cf:d3:c5:9f:9e:f6:5b:a1:ad:da:
43:a2:f0:52:04:4e:f7:9b:a9:05:e3:7d:7d:43:d9:
6a:4a:dc:a0:84:4b:ca:be:48:02:a0:2c:0c:88:c4:
03:9f:9b:e4:e2:30:82:77:58:3f:bc:73:95:8a:a2:
75:55:51:5e:cd:b2:32:b5:8a:2c:c9:a4:fd:d9:bd:
ca:b0:a3:e0:41:fc:dc:6e:98:f6:d8:4c:e2:7f:c3:
30:cc:47:e0:35:95:df:46:3c:5d:b6:60:ba:e3:14:
60:14:54:b8:ea:fa:d4:48:d6:65:d1:96:be:22:b6:
37:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:05:29:CD:E9:37:9B:BB:AC:F3:1A:5B:9B:CF:CC:4B:63:C3:C7:DA
X509v3 Authority Key Identifier:
keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:85:16:74:87:96:e9:73:47:9e:b3:c9:3a:d9:0f:fb:ba:21:
f8:61:b5:95:cf:b4:ee:d3:b6:a7:87:cf:a8:f2:3d:09:38:60:
51:c6:17:e7:63:9a:a9:41:5a:1d:33:b3:49:95:c0:94:de:3f:
6d:e0:aa:09:cd:cf:a1:d2:a9:54:e6:5a:3d:e5:d9:da:6f:2a:
9b:de:25:d4:86:3d:1c:bc:6e:ac:b6:9e:c6:50:95:a0:ad:87:
d5:18:da:bb:9f:66:69:03:d8:c6:64:27:bf:96:59:81:77:7f:
a0:8a:76:2e:49:38:90:cf:87:52:44:3b:4f:0d:1e:ad:1e:48:
a4:5a:00:47:82:1a:8e:f6:46:07:00:eb:72:33:be:fb:0c:46:
45:60:3c:fd:33:d1:22:9c:58:56:2c:18:ce:3f:f9:3b:ab:1b:
02:ff:21:9c:fd:a6:41:7e:76:99:db:cc:f0:df:8a:00:34:45:
4b:9d:3f:e7:89:8a:d8:72:68:7b:3a:2f:21:41:1a:a0:6f:f7:
af:9d:dc:00:58:b4:e8:41:c0:f0:57:6d:42:f7:5a:03:bb:aa:
68:4f:14:12:06:50:bf:f2:68:75:6a:ba:a0:fe:6b:77:c5:76:
fd:c1:09:84:5d:ab:7c:b0:72:25:59:91:30:a1:fd:f5:d0:dd:
f2:da:5e:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE8OGeSGLd750gVPqXC6JIJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjI3M2E2M2M1MWVhZjNmOWU1YWU3YjlmYWFmZGIyOTMx
MzQwZGYwHhcNMjYxMDE0MjEwMTMxWhcNMjYxMDE1MjEwMTMxWjAzMTEwLwYDVQQD
EyhhMDA1MjljZGU5Mzc5YmJiYWNmMzFhNWI5YmNmY2M0YjYzYzNjN2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14KHl95B/WbpGYGzzVnYA9Hs8FDj
ByoAaOaJjaJLR0EjrnEKm6mAk0T+cxDfWMP8Y5YSy9n3AWR7MgBpwqkg3FnGz8NR
3LboCYxzNeVVZpOCVTyGDP/3jRZhBAu8Ml5w8a1eBfZtkQ9xUr/2kSL2Lj/UVV0K
+aRMoqqakEBaqkDTKgaUF55b4JvFrM/TxZ+e9luhrdpDovBSBE73m6kF4319Q9lq
StyghEvKvkgCoCwMiMQDn5vk4jCCd1g/vHOViqJ1VVFezbIytYosyaT92b3KsKPg
Qfzcbpj22Ezif8MwzEfgNZXfRjxdtmC64xRgFFS46vrUSNZl0Za+IrY3tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAFKc3pN5u7rPMaW5vPzEtjw8faMB8GA1UdIwQY
MBaAFJDyc6Y8Uerz+eWue5+q/bKTE0DfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BKenBqeFI2dlA1NWE1N242cjlzcE1UUU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iYzY3NmItYzBiNi00ZmJiLTkzM2Yt
NTA4MmMyOGI3MTVmLzEva1BKenBqeFI2dlA1NWE1N242cjlzcE1UUU44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iYzY3NmItYzBiNi00ZmJiLTkzM2YtNTA4MmMyOGI3MTVm
LzEva1BKenBqeFI2dlA1NWE1N242cjlzcE1UUU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoUWdIeW
6XNHnrPJOtkP+7oh+GG1lc+07tO2p4fPqPI9CThgUcYX52OaqUFaHTOzSZXAlN4/
beCqCc3PodKpVOZaPeXZ2m8qm94l1IY9HLxurLaexlCVoK2H1Rjau59maQPYxmQn
v5ZZgXd/oIp2Lkk4kM+HUkQ7Tw0erR5IpFoAR4IajvZGBwDrcjO++wxGRWA8/TPR
IpxYViwYzj/5O6sbAv8hnP2mQX52mdvM8N+KADRFS50/54mK2HJoezovIUEaoG/3
r53cAFi06EHA8FdtQvdaA7uqaE8UEgZQv/JodWq6oP5rd8V2/cEJhF2rfLByJVmR
MKH99dDd8tpeOA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 03:33:13 2026 by rpki-client