Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: Xy69eNl/49G0FUkD7TuQoXMQ5i5TNSvv8fMECcaJoqI=
Subject key identifier: C6:BF:E7:C9:D9:B5:BB:AC:C1:94:43:7A:60:11:66:35:F6:9E:DB:6E
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 019D333EF81814A87B123F528A79EB2D8FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 08D0
Signing time: Sat 28 Mar 2026 07:00:57 +0000
Manifest this update: Sat 28 Mar 2026 07:00:57 +0000
Manifest next update: Sun 29 Mar 2026 07:00:57 +0000
Files and hashes: 1: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: 1QQF6DsOTAnjWXZhuNiZ4b2oG/Xmf/JNotsCeg5GNX8=)
2: Maj2D8cSqrB3CLI5LyrvNUbe9TI.roa (hash: b021eDbkKPvvVAW1JJTFEOe1gdVYy/RtiqJ/4iLcPI4=)
3: RUgdvvKNJ1CIlBna6_Sqdz_ueYU.asa (hash: oOjO7PspO0d7dU35qwf5iIVxgQOTcnCtnb/oChTMR6o=)
4: cHGfrQ2RRCrzMuQN1_zdwWiDk3I.roa (hash: EJXHDQe6ZDkATsWeN7+btkC/hG9y8A/gHxLok69CX5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:f8:18:14:a8:7b:12:3f:52:8a:79:eb:2d:8f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Mar 28 07:00:57 2026 GMT
Not After : Mar 29 07:00:57 2026 GMT
Subject: CN=c6bfe7c9d9b5bbacc194437a60116635f69edb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d8:33:2f:fa:ee:65:0c:65:50:be:63:0a:35:
ff:b3:14:0d:a1:63:61:2b:53:83:76:1b:7a:6d:a3:
65:eb:6a:e6:50:62:27:59:49:03:b1:7c:a8:d1:32:
94:0e:f8:3e:82:da:07:6a:e9:3b:2e:90:eb:6f:37:
c9:2c:cb:27:59:e5:ef:1c:d5:d0:d7:5e:f9:26:ff:
8d:7e:4e:86:9d:64:7d:45:4d:1c:e2:51:45:d0:de:
00:52:4f:5e:c1:2e:e9:53:03:f8:36:5d:5b:c4:ec:
c6:66:2b:f2:da:ce:d3:7c:be:23:4e:df:31:73:93:
a1:07:39:1a:a6:ea:89:de:8f:dd:1f:12:39:04:c7:
0c:bc:0a:37:c7:71:e7:05:bc:64:0b:13:13:7f:23:
5f:5a:36:81:ba:c1:cf:5f:06:e4:b0:c3:e6:8e:4d:
ad:0d:b0:81:2f:c0:c5:f7:cd:bd:04:11:51:ce:8e:
43:23:af:88:ce:e9:74:a9:31:07:88:11:dd:32:bd:
5c:43:30:1f:67:8e:a8:e8:1a:75:9d:fb:a6:7a:eb:
5b:9b:f9:ec:d8:22:47:36:47:d4:84:80:35:26:50:
3a:a4:d3:71:e6:a5:8a:ee:9a:8e:68:27:ee:80:46:
8a:c8:ea:93:49:ea:fd:15:cb:9d:4c:41:7d:a7:70:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:BF:E7:C9:D9:B5:BB:AC:C1:94:43:7A:60:11:66:35:F6:9E:DB:6E
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:92:1b:fd:a7:2c:f2:d6:23:b4:45:86:dd:6a:67:19:eb:92:
96:ec:32:81:c8:d8:69:44:c0:84:e8:0f:20:84:b0:a9:f6:53:
56:22:8b:02:ba:09:02:31:0b:c1:89:db:f6:84:46:c6:f8:64:
54:52:36:c4:e0:27:52:e1:ff:b0:a9:04:d8:26:5d:37:4a:25:
b0:4b:9a:02:8a:42:b3:36:1c:28:c3:c4:57:7d:98:11:16:34:
ed:00:d0:5f:c5:fb:2a:a0:c8:6e:6c:34:a7:4b:42:a6:5f:84:
1d:b0:d1:c2:a8:f9:b9:aa:10:19:da:0d:1a:58:52:eb:b9:3e:
bc:7c:df:92:0a:c9:72:46:af:e1:c5:77:ba:77:10:9d:67:f8:
66:79:78:75:66:5c:9c:13:e8:8f:f4:96:85:98:83:04:39:9f:
65:21:99:68:7b:6f:bf:7e:b0:80:88:84:cc:2e:41:d6:6c:59:
56:b4:c5:d1:42:6a:3b:74:62:f9:25:37:3f:34:24:06:20:9f:
ca:97:e5:a9:56:4d:5f:56:39:a9:35:1c:ac:59:77:51:f5:d2:
81:ac:bd:88:7e:7a:ca:b9:3e:db:16:60:a5:d6:a6:c0:3f:a8:
d4:97:86:79:47:2e:60:72:86:d7:2e:82:e2:34:87:24:ab:f3:
6a:aa:98:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:44:11 2026 by rpki-client