Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
File: KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft (raw, json)
Hash identifier: gSTp7Xof2FXFvi9Rqp+Z1QOWV7zgSpQ19IJc2Kwr7Zk=
Subject key identifier: D8:01:7C:FB:4C:C4:A4:F9:89:33:0D:48:CF:8F:BA:CC:D9:8C:8F:0C
Authority key identifier: 28:C2:20:2A:44:35:37:FB:8F:B2:80:56:7A:17:48:5F:12:30:C4:11
Certificate issuer: /CN=28c2202a443537fb8fb280567a17485f1230c411
Certificate serial: 019D3375D7886E99D343927A8AC7A14BDC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
Manifest number: 1890
Signing time: Sat 28 Mar 2026 08:00:54 +0000
Manifest this update: Sat 28 Mar 2026 08:00:54 +0000
Manifest next update: Sun 29 Mar 2026 08:00:54 +0000
Files and hashes: 1: KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl (hash: i+DLQ90M7IVvAQJ35pz1QbjPYuWi9V8CnFnPIBT6dVA=)
2: rAXOeYyJicjxp8FzJx__Y7hlvEM.roa (hash: shr4TV48j/I82nbVkR38hVjMhfoyIR4wttCVbDSd4eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:d7:88:6e:99:d3:43:92:7a:8a:c7:a1:4b:dc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c2202a443537fb8fb280567a17485f1230c411
Validity
Not Before: Mar 28 08:00:54 2026 GMT
Not After : Mar 29 08:00:54 2026 GMT
Subject: CN=d8017cfb4cc4a4f989330d48cf8fbaccd98c8f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:06:66:ea:89:a7:28:34:c5:cb:5c:43:38:
90:67:da:c5:05:8e:10:36:49:6d:de:68:4e:2f:ce:
ec:b8:69:40:b2:31:4c:aa:06:fa:6e:11:e1:fe:60:
44:04:3c:4c:29:f9:49:14:c1:a6:f0:e6:48:f1:b8:
f9:97:9f:d1:5d:f4:28:24:3c:e6:2f:26:b2:ce:2c:
c3:2b:2b:40:8f:26:18:21:66:e3:de:d3:28:fc:49:
27:52:31:4b:18:13:e9:2d:b4:46:5d:02:9f:f3:31:
7d:f3:bd:c8:0d:31:4b:47:f0:81:1f:0c:5a:49:d2:
cf:eb:9a:36:fe:2a:33:8c:ea:11:13:47:c3:98:ed:
6a:3e:b9:5d:f3:d7:48:53:cb:37:79:b0:ac:21:e1:
75:07:04:5d:83:19:b1:68:3c:20:2f:3b:f6:65:3d:
2e:50:93:b8:53:65:93:93:07:fc:6f:13:33:d8:bd:
99:cd:28:24:c7:1b:3f:36:b6:4c:58:bf:ff:a9:7c:
df:1d:4d:d2:46:07:e0:f7:d1:b2:ef:f6:dc:d1:51:
a3:95:0a:9d:d7:9b:b2:39:dd:73:e7:6c:2c:9a:aa:
2d:44:b4:b8:6e:a2:65:2a:5b:8c:5b:93:8a:fb:dc:
b2:1f:33:10:57:8b:8b:5d:6b:ef:f2:b9:58:b1:5a:
ce:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:01:7C:FB:4C:C4:A4:F9:89:33:0D:48:CF:8F:BA:CC:D9:8C:8F:0C
X509v3 Authority Key Identifier:
keyid:28:C2:20:2A:44:35:37:FB:8F:B2:80:56:7A:17:48:5F:12:30:C4:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:de:1a:2c:ae:2a:11:cb:2c:d5:c2:79:06:c3:9b:46:ca:17:
d5:d8:0e:2f:6d:5d:a2:06:6a:99:f7:3b:9d:fb:a5:3e:3b:cf:
86:a4:5e:6e:48:73:09:2a:45:09:d6:48:d5:86:0a:57:eb:74:
07:54:c8:f8:80:36:e5:4a:eb:fc:9d:bb:b2:2d:c0:d5:bd:fa:
c7:2e:9e:9c:4f:6f:0a:91:0f:da:8f:72:a1:5f:59:2b:4e:dd:
2b:bc:8a:62:b2:3f:ba:f2:69:d8:22:7e:53:de:76:ef:96:d6:
fb:37:6a:0b:90:7d:51:23:d0:21:86:23:d9:c7:0d:7e:d9:b4:
07:0d:07:7d:e6:d4:57:05:d1:06:05:bf:11:81:13:1b:47:93:
cd:61:0c:e8:ee:e3:b7:db:af:3d:4a:ff:03:58:25:78:28:5f:
a1:48:c5:86:75:96:c7:94:ff:b3:6b:15:19:0f:8b:e6:39:65:
5f:90:d8:1d:d5:18:b3:d7:8e:5c:40:70:24:dd:05:a6:1d:58:
f0:1f:c0:f8:34:36:ed:2e:fa:fb:b1:8f:d5:8d:07:94:5c:b0:
73:a2:7e:80:89:da:3a:d4:cb:45:a5:c3:da:25:b4:35:b4:4a:
2e:01:c1:b1:93:75:fc:13:65:51:e2:42:b9:ca:6c:3f:67:51:
b5:0e:2d:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0zddeIbpnTQ5J6isehS9wBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YzIyMDJhNDQzNTM3ZmI4ZmIyODA1NjdhMTc0ODVmMTIz
MGM0MTEwHhcNMjYwMzI4MDgwMDU0WhcNMjYwMzI5MDgwMDU0WjAzMTEwLwYDVQQD
EyhkODAxN2NmYjRjYzRhNGY5ODkzMzBkNDhjZjhmYmFjY2Q5OGM4ZjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8kGZuqJpyg0xctcQziQZ9rFBY4Q
Nklt3mhOL87suGlAsjFMqgb6bhHh/mBEBDxMKflJFMGm8OZI8bj5l5/RXfQoJDzm
LyayzizDKytAjyYYIWbj3tMo/EknUjFLGBPpLbRGXQKf8zF9873IDTFLR/CBHwxa
SdLP65o2/iozjOoRE0fDmO1qPrld89dIU8s3ebCsIeF1BwRdgxmxaDwgLzv2ZT0u
UJO4U2WTkwf8bxMz2L2ZzSgkxxs/NrZMWL//qXzfHU3SRgfg99Gy7/bc0VGjlQqd
15uyOd1z52wsmqotRLS4bqJlKluMW5OK+9yyHzMQV4uLXWvv8rlYsVrOmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgBfPtMxKT5iTMNSM+PuszZjI8MMB8GA1UdIwQY
MBaAFCjCICpENTf7j7KAVnoXSF8SMMQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS01JZ0trUTFOX3VQc29CV2VoZElYeEl3eEJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9hMmNlNjQtMzNhZi00NWZlLTkwZWIt
ODlkMjYxMWE5NWRiLzEvS01JZ0trUTFOX3VQc29CV2VoZElYeEl3eEJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9hMmNlNjQtMzNhZi00NWZlLTkwZWItODlkMjYxMWE5NWRi
LzEvS01JZ0trUTFOX3VQc29CV2VoZElYeEl3eEJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKt4aLK4q
Ecss1cJ5BsObRsoX1dgOL21dogZqmfc7nfulPjvPhqRebkhzCSpFCdZI1YYKV+t0
B1TI+IA25Urr/J27si3A1b36xy6enE9vCpEP2o9yoV9ZK07dK7yKYrI/uvJp2CJ+
U95275bW+zdqC5B9USPQIYYj2ccNftm0Bw0HfebUVwXRBgW/EYETG0eTzWEM6O7j
t9uvPUr/A1gleChfoUjFhnWWx5T/s2sVGQ+L5jllX5DYHdUYs9eOXEBwJN0Fph1Y
8B/A+DQ27S76+7GP1Y0HlFywc6J+gInaOtTLRaXD2iW0NbRKLgHBsZN1/BNlUeJC
ucpsP2dRtQ4tIg==
-----END CERTIFICATE-----
Generated at Sat Mar 28 15:56:07 2026 by rpki-client