
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
File: kpWx8dzY-mrB73iCeMSJ4V6srnA.mft (raw, json)
Hash identifier: IIeogLG4FIa/5j6b0QWTDkqziA38iu8qCxi7ieXxZsc=
Subject key identifier: 34:BA:2F:EE:66:BB:C8:40:B6:51:38:52:0B:23:9E:7D:4C:6A:63:3D
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 01A0C7463B3C7F3689269CEADAA996396BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
Manifest number: 1A87
Signing time: Tue 22 Sep 2026 04:01:03 +0000
Manifest this update: Tue 22 Sep 2026 04:01:03 +0000
Manifest next update: Wed 23 Sep 2026 04:01:03 +0000
Files and hashes: 1: Mh0GCA4fU985YGcY_Sl-hoqqYak.roa (hash: dw7zE1QA5b14EOKa3p03pQXACOHf0x9i1vrxjiOG4Qc=)
2: j2nCgCNKu-8HhbapFFrobHwW1PE.roa (hash: GSO3KSJwSfb4pYZK1pE/e2C6mgmmsHzX3/UBNgiH+xA=)
3: kpWx8dzY-mrB73iCeMSJ4V6srnA.crl (hash: wiLSYtv8Lt1s7BxFW2CxH6ZeMDpPKn5/B4TZjVz58RI=)
4: rcD1dohMBrT0sIUfDYqyK5wqUuA.roa (hash: LHJxJ8uhzAWPnNINZvl3itiKDSVQRmXMQ+MPHPp9DtE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:3b:3c:7f:36:89:26:9c:ea:da:a9:96:39:6b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Sep 22 04:01:03 2026 GMT
Not After : Sep 23 04:01:03 2026 GMT
Subject: CN=34ba2fee66bbc840b65138520b239e7d4c6a633d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:11:8a:a4:24:d1:b7:93:d6:dd:da:aa:39:8c:
dc:b2:cf:cc:9f:0a:96:03:dd:8f:42:6f:10:09:1d:
eb:d4:87:f7:5f:ee:96:4d:ff:47:5d:93:b1:9d:9d:
ef:47:31:0c:52:0e:25:ea:08:94:3c:4c:58:56:df:
d1:28:ff:2a:5d:a6:83:ac:fa:0c:2d:8e:56:d6:4b:
a9:8a:ab:3e:ac:13:af:20:6c:f3:a5:56:ff:a9:d0:
27:62:ac:49:4f:5d:2d:35:9f:95:9b:60:30:cd:84:
70:84:a4:b7:c7:d3:fa:05:42:27:17:1d:79:4c:9f:
bd:09:19:7d:73:1c:d0:a7:c6:28:b0:0f:13:19:32:
a3:2e:6c:f0:ab:64:b2:e3:99:da:0b:f4:c4:bf:f2:
41:e8:0a:3c:ec:66:ef:ff:c3:56:b9:54:15:fe:4d:
e5:c4:77:2e:d9:0a:da:89:4f:f3:c0:6d:19:20:44:
fc:f8:7b:7a:4c:62:f8:bc:5b:36:2c:b9:be:2e:17:
4a:15:e5:90:a2:8a:ee:50:a9:7a:fd:be:c5:d5:28:
b8:44:93:5e:14:48:63:a0:09:55:4a:d0:48:4a:13:
3c:91:e9:95:8b:37:68:5e:f8:c0:60:e0:dd:07:fc:
d3:72:9a:b0:ce:13:b8:e2:ec:41:56:85:4a:e6:99:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BA:2F:EE:66:BB:C8:40:B6:51:38:52:0B:23:9E:7D:4C:6A:63:3D
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:88:62:8f:23:78:1a:ab:79:fc:3d:79:de:24:e5:68:67:8e:
7b:5e:04:31:80:45:14:a7:3b:9b:6a:c0:55:13:36:3f:90:54:
86:ab:7f:7c:11:55:a9:84:7b:eb:9d:58:32:fd:b3:63:c6:06:
3e:45:cd:cd:83:67:14:99:41:e5:d3:c8:a2:60:2e:3e:73:51:
96:02:8d:64:a7:19:73:92:49:3d:b3:80:49:75:f3:21:2b:45:
89:d4:3b:53:e5:2b:4b:05:de:ca:a2:59:be:c4:49:75:72:66:
9f:ea:02:8f:ec:47:35:fb:18:3a:70:29:07:73:fe:6c:3f:ae:
5c:c9:ed:9a:d8:03:ac:fa:23:69:a1:a4:df:2b:e2:a3:de:2f:
c0:09:bb:02:6a:8f:b2:ea:05:4a:50:41:d7:c0:22:4a:c0:f5:
6f:f9:cd:38:fd:76:b0:86:62:e5:94:2a:16:b6:19:a7:32:ac:
88:81:92:11:b1:b2:17:fb:84:a6:e4:02:de:69:f8:cf:2b:d6:
dd:11:6d:46:2c:44:52:07:62:1d:2f:f0:0e:c3:65:07:91:cd:
08:9b:ee:cc:03:cb:2c:f9:76:d4:e1:4b:49:1c:1f:70:77:ee:
7b:d7:b4:34:ce:7a:e0:eb:0b:dd:c2:e8:86:b1:a7:36:7b:05:
9e:4d:43:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHRjs8fzaJJpzq2qmWOWu9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOTViMWYxZGNkOGZhNmFjMWVmNzg4Mjc4YzQ4OWUxNWVh
Y2FlNzAwHhcNMjYwOTIyMDQwMTAzWhcNMjYwOTIzMDQwMTAzWjAzMTEwLwYDVQQD
EygzNGJhMmZlZTY2YmJjODQwYjY1MTM4NTIwYjIzOWU3ZDRjNmE2MzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBGKpCTRt5PW3dqqOYzcss/MnwqW
A92PQm8QCR3r1If3X+6WTf9HXZOxnZ3vRzEMUg4l6giUPExYVt/RKP8qXaaDrPoM
LY5W1kupiqs+rBOvIGzzpVb/qdAnYqxJT10tNZ+Vm2AwzYRwhKS3x9P6BUInFx15
TJ+9CRl9cxzQp8YosA8TGTKjLmzwq2Sy45naC/TEv/JB6Ao87Gbv/8NWuVQV/k3l
xHcu2QraiU/zwG0ZIET8+Ht6TGL4vFs2LLm+LhdKFeWQooruUKl6/b7F1Si4RJNe
FEhjoAlVStBIShM8kemVizdoXvjAYODdB/zTcpqwzhO44uxBVoVK5pkmUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDS6L+5mu8hAtlE4Ugsjnn1MamM9MB8GA1UdIwQY
MBaAFJKVsfHc2Ppqwe94gnjEieFerK5wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMt
OWViNDBjYzVmNjhiLzEva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMtOWViNDBjYzVmNjhi
LzEva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY4hijyN4
Gqt5/D153iTlaGeOe14EMYBFFKc7m2rAVRM2P5BUhqt/fBFVqYR7651YMv2zY8YG
PkXNzYNnFJlB5dPIomAuPnNRlgKNZKcZc5JJPbOASXXzIStFidQ7U+UrSwXeyqJZ
vsRJdXJmn+oCj+xHNfsYOnApB3P+bD+uXMntmtgDrPojaaGk3yvio94vwAm7AmqP
suoFSlBB18AiSsD1b/nNOP12sIZi5ZQqFrYZpzKsiIGSEbGyF/uEpuQC3mn4zyvW
3RFtRixEUgdiHS/wDsNlB5HNCJvuzAPLLPl21OFLSRwfcHfue9e0NM564OsL3cLo
hrGnNnsFnk1DNQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 15:01:25 2026 by rpki-client