Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft
File: kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft (raw, json)
Hash identifier: Sro3DrDhDmlXRIPitM9DDorOlRI6MeKWoEM6mI/KFC4=
Subject key identifier: 48:D1:2E:DD:96:FA:3F:5F:DD:C9:DE:C3:30:CE:FF:F9:B4:7B:59:89
Authority key identifier: 91:EC:C5:84:07:DC:26:D0:B8:09:DD:DB:4C:67:D6:75:5D:FF:86:FD
Certificate issuer: /CN=91ecc58407dc26d0b809dddb4c67d6755dff86fd
Certificate serial: 01A0D5DD9CAA73E052A4CDE223C893151AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kezFhAfcJtC4Cd3bTGfWdV3_hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:01:05 +0000
Manifest this update: Fri 25 Sep 2026 00:01:05 +0000
Manifest next update: Sat 26 Sep 2026 00:01:05 +0000
Files and hashes: 1: JLLfHMatuxcdEQiT0UQSyxEk5Nw.roa (hash: qBCZAB7xvXxou+T2GdjhZxyRoHv6x5IT+u6DzlaMiOg=)
2: cDmtSrPi3Xfa9GQ3-l6u7-BE248.roa (hash: 0shjjAec7Cb9aPFwygq8U/0Lwh0QCfxBtCpb+tdZIdk=)
3: kezFhAfcJtC4Cd3bTGfWdV3_hv0.crl (hash: /LPYl6KC8/9BaFaXQycb5MNgT1zLAAiAtkM8LgUvYVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kezFhAfcJtC4Cd3bTGfWdV3_hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:9c:aa:73:e0:52:a4:cd:e2:23:c8:93:15:1a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ecc58407dc26d0b809dddb4c67d6755dff86fd
Validity
Not Before: Sep 25 00:01:05 2026 GMT
Not After : Sep 26 00:01:05 2026 GMT
Subject: CN=48d12edd96fa3f5fddc9dec330cefff9b47b5989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:64:a4:02:1a:5b:ca:45:9a:20:eb:86:52:d7:
7d:ea:b9:a7:ca:09:a9:6c:1d:41:e2:f4:4a:f1:b2:
c3:f8:8c:19:be:85:87:a5:7b:19:72:56:2e:f6:ca:
07:78:ff:16:43:de:70:f9:ef:2a:2f:ee:d8:8c:9c:
fc:26:ed:16:d7:39:41:00:a7:ce:dd:12:64:9c:c7:
15:7c:08:df:ab:a1:f3:ad:34:80:aa:98:31:67:a7:
59:3e:23:52:57:52:13:b8:35:25:e2:99:dd:e9:55:
6f:a1:32:36:a9:43:38:32:d3:71:e9:8f:b8:21:80:
14:9b:40:4f:60:59:99:0a:f4:47:3c:8b:80:c7:99:
c9:41:fa:46:b6:c4:32:85:69:8f:e5:6d:2b:b5:8f:
b2:f8:a4:39:04:48:26:4d:ba:7e:33:0d:18:8d:dc:
d2:bc:30:e8:b4:f3:4a:a2:ac:39:54:39:20:9e:ba:
04:d3:2a:5f:1c:d1:45:61:69:6d:66:3f:9c:be:70:
43:df:e7:d1:85:33:6a:f3:fe:2f:60:6f:fe:ea:0b:
64:7f:17:96:04:36:a5:54:f3:c5:63:dc:2e:33:13:
98:ca:9a:a4:ae:02:d5:66:c3:b0:ff:c4:c3:97:e7:
55:b3:91:a9:41:0f:9b:63:0e:b7:e1:1a:d4:b7:4c:
ad:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:D1:2E:DD:96:FA:3F:5F:DD:C9:DE:C3:30:CE:FF:F9:B4:7B:59:89
X509v3 Authority Key Identifier:
keyid:91:EC:C5:84:07:DC:26:D0:B8:09:DD:DB:4C:67:D6:75:5D:FF:86:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kezFhAfcJtC4Cd3bTGfWdV3_hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/391fd1-63ef-44f3-98b7-47109f035207/1/kezFhAfcJtC4Cd3bTGfWdV3_hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:49:36:32:fc:ee:92:dc:f4:5e:c9:69:a0:33:56:bc:1e:4e:
92:0d:ae:ff:ea:86:fe:10:c0:d8:0d:f3:02:a4:e7:b4:e0:bd:
46:9e:27:fc:e5:b0:f4:82:a3:ae:11:7c:31:9a:53:87:77:21:
a6:b9:6c:75:8c:ef:53:2a:46:8c:f4:82:9e:22:1b:58:2e:71:
67:0c:8a:7b:1e:29:44:d4:38:4f:32:cf:61:f9:ce:01:35:3f:
70:74:be:6f:70:87:c9:c7:a6:90:09:a5:f5:53:9e:61:a8:de:
7f:1b:0d:a4:79:e8:b5:07:ab:04:61:d2:69:87:7a:19:db:2d:
23:b9:ad:14:c1:16:f2:22:12:ec:db:2f:31:20:11:29:e4:10:
99:d3:54:9d:f8:da:ad:30:14:e2:07:9c:7b:cb:bf:c8:9d:0c:
51:9d:07:ab:d7:c1:9a:91:a4:d1:d6:0c:b6:d7:06:50:7a:bf:
72:08:18:ce:fa:69:0e:c1:c5:52:2d:d9:2d:14:ef:b0:67:f3:
42:3c:f0:c6:4f:d9:fe:f4:49:1c:c0:b2:e2:13:54:3b:ed:8c:
32:6d:0f:da:e5:e4:f0:51:29:3e:ea:6f:16:ed:ee:3d:e6:9c:
26:fd:36:44:9d:26:c7:f6:70:e8:98:1c:6e:a5:20:eb:c5:87:
04:ba:09:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:03:50 2026 by rpki-client