Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: gZVSAgivIxCy+yPX9vSoB1Z1TMgHSnZDLPlhXw4zdtM=
Subject key identifier: 4C:19:D8:74:9C:CE:95:02:CD:35:97:36:D5:D2:4E:D1:3C:C8:F9:F9
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 01A100912B2D6C1CBD4C181C04C4C71B7AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 1374
Signing time: Sat 03 Oct 2026 07:01:16 +0000
Manifest this update: Sat 03 Oct 2026 07:01:16 +0000
Manifest next update: Sun 04 Oct 2026 07:01:16 +0000
Files and hashes: 1: 3psKaSY7CT6URaeruLUFwZkMcnU.roa (hash: fj0+JCymjpW+3NEk9HmGETVM60SuUscKNMaXaBgYTFg=)
2: 9JGQPsaWzqRWIOApF5whvE4AxIc.roa (hash: 0ltom3fi/AGzQOkuUGF0tjXYR0L8QJ4XTtORcpTGq3c=)
3: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: RGukYRqQHikgk+OQlBDC6FFS9+Ano9cfnsC0dyMoh30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:91:2b:2d:6c:1c:bd:4c:18:1c:04:c4:c7:1b:7a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Oct 3 07:01:16 2026 GMT
Not After : Oct 4 07:01:16 2026 GMT
Subject: CN=4c19d8749cce9502cd359736d5d24ed13cc8f9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:5f:66:96:5a:81:e1:67:b9:1f:32:25:31:
69:0b:6b:db:4d:99:32:1e:d6:a0:83:6e:0d:a4:c2:
0b:53:e7:06:bd:61:24:16:33:99:10:75:b0:f9:53:
d1:3e:9a:5e:10:24:ab:4c:c4:ca:d8:99:95:53:9b:
3f:cf:f8:25:f6:04:0b:2d:43:3a:15:33:db:a3:95:
b2:80:29:02:c1:67:e5:4c:c0:69:d3:25:f8:81:99:
7a:c0:a9:39:66:43:d7:5d:c0:52:23:44:5b:bc:0c:
db:f0:96:2c:d0:dd:0d:3c:97:5f:b8:ae:dd:99:ca:
75:fc:dc:3d:f5:13:6b:62:7a:40:64:6a:8e:40:22:
14:a0:89:4c:e4:99:ec:b5:b9:83:82:c4:e7:e2:3e:
ff:f2:6a:54:3a:0f:7c:d2:98:dd:c5:fd:c7:41:0d:
b8:f6:d2:cb:49:2f:24:b0:34:13:78:4a:14:e3:5e:
7e:8f:f8:fc:bc:c4:27:72:48:b0:c9:fa:7f:06:0d:
04:e5:c9:71:74:1b:12:27:9e:fa:8e:cb:b8:78:36:
73:fa:1a:31:fc:48:d1:d0:ef:cd:0a:0e:77:3a:53:
0e:12:89:72:58:6b:bc:ab:fa:5d:02:31:87:36:2d:
94:98:e2:46:89:58:6e:c1:61:c4:53:19:27:92:df:
1d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:19:D8:74:9C:CE:95:02:CD:35:97:36:D5:D2:4E:D1:3C:C8:F9:F9
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:8c:61:8d:1e:f3:65:8c:f3:ea:b6:b4:d7:30:cc:37:dd:57:
df:6f:f5:37:03:f1:da:54:6c:91:c3:7f:74:ef:66:91:af:40:
c6:d8:95:c7:44:05:05:65:a5:f6:32:36:3d:ec:fd:f1:cc:24:
e3:5a:73:37:0e:e0:5e:e5:4c:85:ba:9e:9a:e5:d5:10:c2:1a:
e5:49:eb:07:e1:ff:bb:7b:ff:bf:84:c3:e7:65:76:27:42:ed:
22:fa:57:a2:91:6d:e8:53:22:1b:0f:98:15:17:e6:57:ff:9a:
68:45:7c:d4:e3:5b:c9:2c:ba:4a:cc:6a:1b:88:c2:47:b1:16:
c4:26:ef:de:2f:db:a3:74:17:b0:c1:68:01:2d:93:aa:5e:35:
7d:b7:d6:83:a6:79:92:99:ce:a8:4b:bf:39:98:c7:e9:7a:b3:
a7:ab:d0:a0:e6:42:1c:ab:c2:02:6e:e9:b6:08:16:dc:51:cd:
1e:61:0b:a4:15:4d:0a:3c:fc:6d:7e:a3:d1:7c:54:c3:33:ef:
07:e1:cd:ae:4c:2b:b7:3f:01:15:b6:31:cd:e1:8e:0f:e2:2e:
79:a6:9a:36:d9:44:08:2e:d6:90:32:57:b3:0f:0a:ad:31:51:
a3:86:78:4d:3c:6a:e4:80:04:40:0c:0a:1d:bb:a9:80:7a:27:
b8:6a:89:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:07:33 2026 by rpki-client