Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
File: kwTroql6CcmzsIz_g9-0dxQbwcs.mft (raw, json)
Hash identifier: XH7GLkkPQRMewBpmPuBE5FpdFMnBFVOUFlsGZ7sNAVQ=
Subject key identifier: CE:62:F6:36:A8:C4:24:7D:DF:CD:D2:67:9D:F1:02:13:22:E2:18:5D
Authority key identifier: 93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
Certificate issuer: /CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Certificate serial: 01A0CD10C41F09C81F81A66FCCBDD722A014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 07:00:23 +0000
Manifest this update: Wed 23 Sep 2026 07:00:23 +0000
Manifest next update: Thu 24 Sep 2026 07:00:23 +0000
Files and hashes: 1: duZd3xX6ldZFnJAWeKOY3aU-YWA.roa (hash: zrGRAnADEy4+RjdotY9/kdUuG4P+5ZGMBez8xpARCts=)
2: kwTroql6CcmzsIz_g9-0dxQbwcs.crl (hash: W7Ptjy3cC3rr+lsLUV/WFDRxdMU3vaoKnEY7nRs3NnE=)
3: tB6SdtPeaNHkXKdCFOrT0cZRLQo.asa (hash: hEt0QePrXimypD2t1C7kRdRaY7tLoSp85y3ztSay7R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:10:c4:1f:09:c8:1f:81:a6:6f:cc:bd:d7:22:a0:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9304eba2a97a09c9b3b08cff83dfb477141bc1cb
Validity
Not Before: Sep 23 07:00:23 2026 GMT
Not After : Sep 24 07:00:23 2026 GMT
Subject: CN=ce62f636a8c4247ddfcdd2679df1021322e2185d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8d:a7:e9:59:27:3a:eb:b9:c4:88:e3:ee:1b:
4b:90:ac:d9:68:8f:23:dc:67:10:a8:6f:d3:05:fc:
ca:e6:44:bf:a2:c2:44:d9:e8:f9:79:7c:63:0e:7c:
42:b6:14:3e:15:22:3d:e2:6b:e4:52:a6:c8:17:7b:
13:d1:92:87:79:4d:4a:95:55:b3:d9:e9:55:45:45:
35:8b:74:50:71:d6:08:55:0e:09:c7:62:98:9f:09:
45:6f:53:a8:9a:55:b1:ba:8a:92:6d:b9:51:11:cd:
04:96:4b:96:6f:b3:df:da:0b:71:10:73:4a:61:37:
81:5e:7f:32:c4:c0:ff:f6:73:c8:11:8e:c3:24:7a:
d7:5d:92:1a:9a:1e:fa:68:da:0a:68:5f:4d:65:76:
fb:0f:f0:e0:1b:94:4a:01:62:6e:27:14:7a:f7:72:
de:84:a8:ec:b0:5d:f6:ab:7c:6a:f2:c1:a2:24:a9:
30:08:38:15:e2:9a:43:48:9e:3f:fd:45:d9:17:bd:
7f:4c:2b:9e:19:10:0a:61:0e:40:01:f2:bc:b4:a9:
3f:c1:f2:3f:28:18:50:5a:e2:58:08:74:5c:85:83:
3c:af:2c:0b:28:85:7b:5c:15:1f:b9:d3:e1:73:91:
8c:1a:75:e6:c0:e1:b2:35:95:90:f1:14:9e:2a:66:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:62:F6:36:A8:C4:24:7D:DF:CD:D2:67:9D:F1:02:13:22:E2:18:5D
X509v3 Authority Key Identifier:
keyid:93:04:EB:A2:A9:7A:09:C9:B3:B0:8C:FF:83:DF:B4:77:14:1B:C1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwTroql6CcmzsIz_g9-0dxQbwcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ab23ff-e53b-4d08-8392-9af993b0343e/1/kwTroql6CcmzsIz_g9-0dxQbwcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:5c:fb:65:ef:d3:cf:6f:2b:14:bc:e4:1b:1a:b7:e7:13:84:
9e:82:a0:7f:7f:de:fa:29:55:d2:f6:df:3c:78:6e:ba:70:08:
cf:83:78:cb:7c:8b:36:9f:0a:35:a5:a6:45:14:2a:b9:da:30:
0f:f9:77:15:ff:1a:73:77:7d:ce:e1:85:c4:ae:b3:e0:f5:85:
7c:7d:e0:9a:13:ed:27:a7:01:f3:d1:a7:1f:08:f0:35:3d:18:
cd:4d:ac:2d:62:7f:8d:ae:ee:76:1e:17:7d:1a:f0:f9:9e:56:
8c:61:91:98:24:b3:d7:2d:38:8f:c5:93:b9:8e:5b:6f:54:c4:
2f:3e:13:4d:fe:77:97:bc:ce:38:29:5d:0f:fb:bd:08:6b:dd:
c9:05:d0:c0:20:9b:dd:ca:86:ac:e3:db:c5:92:1e:ff:24:c9:
47:8c:68:d3:7a:91:83:7b:71:f7:14:2a:1d:03:82:aa:98:14:
a7:45:99:1c:cd:ed:b0:3d:92:d3:9e:03:37:b1:60:fc:0b:bc:
9d:d5:0b:28:5d:46:cb:10:7e:cb:25:dc:b5:26:d5:5f:79:ed:
ce:e3:b3:dd:96:61:6e:ca:ab:7b:6c:8e:37:5d:7d:4a:ff:5d:
6f:73:06:20:83:22:62:ee:d4:1b:96:f1:db:95:56:e2:4a:a1:
cf:5e:e1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:38:31 2026 by rpki-client