Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: 9ixOEWpB5/Buf2hdzZcZ2NOSF0w7BIngW60wRRbFJuE=
Subject key identifier: 78:5C:FD:3B:24:47:03:A7:ED:18:1E:83:CB:15:20:9F:CD:6F:95:E9
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 01A0D8A869070EB66FD67B40A4D142892994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 1666
Signing time: Fri 25 Sep 2026 13:01:50 +0000
Manifest this update: Fri 25 Sep 2026 13:01:50 +0000
Manifest next update: Sat 26 Sep 2026 13:01:50 +0000
Files and hashes: 1: 0xBMzbimSDs_I2nvtM1Y5jK-78k.roa (hash: SgKHLhFkroj2Hq/iLApLxBA7Ln6Ya97UmYFoHMm8u7c=)
2: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: dmnjnFoDS9I01L8O0Zu6KSNpycT5D66J2AQlc3wdqyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:a8:69:07:0e:b6:6f:d6:7b:40:a4:d1:42:89:29:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Sep 25 13:01:50 2026 GMT
Not After : Sep 26 13:01:50 2026 GMT
Subject: CN=785cfd3b244703a7ed181e83cb15209fcd6f95e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:c9:34:5c:a1:2e:f7:27:50:c9:0f:82:13:
63:8c:ac:90:8f:c2:ff:d2:ee:ee:36:2b:3a:8e:22:
47:46:16:44:50:89:63:96:a8:4c:1b:c4:e3:27:f9:
0a:1c:a3:a0:aa:d7:1a:5f:d1:a4:05:ed:f1:8d:d3:
30:a1:bf:11:b4:d5:71:b8:34:98:7d:c0:1e:42:7a:
33:46:65:f1:83:08:9c:8a:0b:0b:56:bf:d1:1c:4d:
1b:25:9d:19:ed:52:89:18:f9:c7:6f:d8:7d:9d:10:
4c:85:ad:8f:cd:66:da:c2:93:0c:73:bf:f0:12:97:
49:3a:b2:f2:8b:a4:6b:a0:4f:c3:ae:67:b5:74:37:
eb:67:f3:d5:ff:45:83:57:0e:cb:18:c6:5c:19:81:
32:7b:94:ed:21:b5:6f:08:51:f1:0b:05:c2:ef:8d:
78:ef:da:10:db:e9:0c:80:f0:5b:80:60:99:fb:91:
15:e9:f8:50:fe:fe:dd:f2:97:33:6c:66:f3:04:af:
04:84:8e:af:1a:39:e9:1a:d1:48:f8:76:ad:34:bb:
95:a1:b7:69:4b:75:47:d8:b1:72:7a:03:bf:17:99:
62:4b:76:08:17:aa:f5:91:80:1b:2f:65:6b:86:d3:
45:44:3a:9b:f0:f3:67:94:44:5b:df:25:15:21:69:
40:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5C:FD:3B:24:47:03:A7:ED:18:1E:83:CB:15:20:9F:CD:6F:95:E9
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:24:e8:9d:31:0a:21:d5:7b:f8:76:e4:76:cf:73:99:1d:28:
0b:c6:65:8d:e5:e1:b5:a2:51:75:39:64:d9:9e:96:f2:4d:70:
cc:99:d7:41:8a:5e:19:c7:85:e9:7b:3b:42:3e:18:ed:ad:42:
ef:7a:5c:8f:ca:e9:59:dd:61:5c:7e:9e:a4:57:ea:3a:fa:63:
5f:c5:ea:bb:f4:b5:3e:d4:60:b8:7c:85:4f:2f:11:d8:df:37:
73:6e:99:cc:b9:7f:e4:50:b1:17:fc:07:6e:03:cd:8d:36:5d:
63:4c:4c:e3:73:c8:85:6a:df:e3:f1:63:98:c2:cd:ec:82:7f:
3f:1e:39:05:67:60:d4:c1:5b:78:bf:cf:3a:1c:8b:42:06:9d:
9f:41:77:bd:aa:6f:db:92:95:12:82:da:c4:01:d9:2f:fd:e0:
98:b4:cc:c0:c4:38:1e:fd:87:51:04:f8:01:17:62:5d:66:2a:
c2:06:b5:92:e8:76:49:38:3a:dc:12:7c:80:32:67:52:84:dc:
ad:fb:00:03:e0:9f:35:9a:45:e3:3c:27:3c:ed:4b:91:35:e3:
58:85:77:0c:fb:08:cb:84:2d:e0:a4:67:ab:6b:c7:e1:01:d5:
6a:06:a8:45:b7:1b:92:26:36:c8:80:81:72:8b:c0:9b:9f:8f:
60:d6:6a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:08:09 2026 by rpki-client