Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
File: kfLh5DqmRNsVhnEYLy73foiWZg8.mft (raw, json)
Hash identifier: ZLfjqhbbxmK4425aQeHpKAlWAIhSye+OihU/WLmft44=
Subject key identifier: 1F:20:FB:0D:70:64:6C:78:23:10:21:13:73:39:AD:8A:48:C9:3E:E1
Authority key identifier: 91:F2:E1:E4:3A:A6:44:DB:15:86:71:18:2F:2E:F7:7E:88:96:66:0F
Certificate issuer: /CN=91f2e1e43aa644db158671182f2ef77e8896660f
Certificate serial: 01A0D011C38945BDE3AACC4869C2AB3083A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
Manifest number: E5
Signing time: Wed 23 Sep 2026 21:00:20 +0000
Manifest this update: Wed 23 Sep 2026 21:00:20 +0000
Manifest next update: Thu 24 Sep 2026 21:00:20 +0000
Files and hashes: 1: 0ZKhdRC1ISNyLJqs7qyYjd09MaE.roa (hash: sffu/a8bcElcI8BNy5um3eH5jCXlNb+/px2mPjs5pUw=)
2: kfLh5DqmRNsVhnEYLy73foiWZg8.crl (hash: dv2B5pwCpP+2b91hFWyufucSxfrrGVanFU527WiWq4s=)
3: tG4gTPfHdM_krBmnKLHGpg5R9c4.roa (hash: 7umB3yGBdGAwRb3JHQ8z/6Dgf6/LhI4qIuUqFDPArww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:c3:89:45:bd:e3:aa:cc:48:69:c2:ab:30:83:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f2e1e43aa644db158671182f2ef77e8896660f
Validity
Not Before: Sep 23 21:00:20 2026 GMT
Not After : Sep 24 21:00:20 2026 GMT
Subject: CN=1f20fb0d70646c78231021137339ad8a48c93ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:83:e6:f9:b3:f3:23:ec:e5:ba:f7:7e:7f:
84:ac:fb:62:29:0f:07:24:1c:97:7d:d9:3c:cf:96:
f4:1f:11:bc:49:d9:59:22:9c:1e:c4:b0:9b:c2:68:
87:72:67:a9:e5:80:2f:5c:20:11:a2:77:a6:1a:1f:
27:b5:6f:66:4a:b2:fb:1a:fe:b9:cd:58:0b:42:98:
17:24:ea:ae:e5:3a:48:36:ab:20:8d:58:fe:15:7e:
9b:7d:fc:d8:0b:60:cc:2e:ba:16:4c:3e:91:20:be:
6b:4c:5a:9f:26:25:9a:0c:55:24:cb:77:b1:0c:58:
ae:f1:b5:2a:3d:37:d8:44:3f:d6:0b:83:00:ee:cb:
38:ad:b0:fd:e3:7f:9b:39:b3:0b:aa:96:64:cb:84:
b1:03:ad:b0:85:27:23:1c:95:e5:dc:ae:1d:03:b1:
97:3f:4e:10:2d:6f:75:6b:69:ab:a0:05:aa:19:31:
df:4d:5b:55:d1:a1:f7:fe:47:32:85:e6:65:54:5a:
4d:0e:61:75:5d:9e:49:ee:4b:5f:df:08:c0:73:81:
0a:3c:52:4c:e9:f6:a1:9e:a3:0b:76:cc:6c:77:b9:
e6:b1:5d:32:c2:33:48:dd:cd:1f:01:2f:3a:fc:5e:
4a:90:46:ed:8f:ed:0c:59:8e:6d:77:16:dc:e2:ab:
e2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:20:FB:0D:70:64:6C:78:23:10:21:13:73:39:AD:8A:48:C9:3E:E1
X509v3 Authority Key Identifier:
keyid:91:F2:E1:E4:3A:A6:44:DB:15:86:71:18:2F:2E:F7:7E:88:96:66:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfLh5DqmRNsVhnEYLy73foiWZg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6c78da-bded-41a9-b508-302ce1bc99c0/1/kfLh5DqmRNsVhnEYLy73foiWZg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3c:f8:60:57:92:a3:63:f8:e1:bf:22:e5:d2:56:69:94:c5:
4f:c9:50:e5:fc:e4:c1:d7:26:da:67:33:9e:5d:df:7a:46:ba:
03:b1:99:5e:56:ff:6f:78:93:02:19:09:56:20:76:ef:44:b1:
61:ce:09:d8:2e:01:1d:af:f6:80:29:b2:64:5a:33:1b:62:aa:
52:89:fe:2e:af:00:d9:00:16:43:cb:e1:a8:ee:d1:a6:ac:59:
8e:8f:72:e6:51:dd:42:93:96:0f:bc:b0:48:d3:ec:00:0c:e8:
7f:ca:94:c2:ca:f6:da:3d:ce:1c:c1:d6:7f:6c:49:1a:72:02:
01:d9:77:73:0d:10:31:20:88:07:11:75:45:7e:75:75:0b:3f:
aa:79:fa:84:c8:0d:b7:d1:e9:78:c8:a7:fa:85:02:e0:b8:06:
02:b2:a9:84:b6:af:b9:e3:10:88:98:32:99:8f:03:a6:4d:f4:
dd:a4:18:d7:cd:cb:4d:bf:c7:b1:9d:84:e6:4a:8b:fc:4a:5f:
46:eb:25:a1:f6:ba:14:e3:4d:56:9c:b6:93:16:f4:4e:e5:21:
90:dc:7b:07:5b:3b:21:09:d9:82:ff:4e:8e:fc:ab:ba:78:f3:
1a:da:27:53:20:22:6c:31:2a:09:33:84:fc:30:93:09:41:ac:
38:f3:5a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:20:13 2026 by rpki-client