Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: XgS0OaaeAFTE0A9mCCwyR57vHXjCYmc6IttymcZ3m+k=
Subject key identifier: 6A:7A:C3:30:2C:68:60:63:87:19:F2:23:23:1D:57:22:84:10:6B:33
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 019D27A8E9AE69AADB7272FCF10D76AE60B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 08CA
Signing time: Thu 26 Mar 2026 01:01:14 +0000
Manifest this update: Thu 26 Mar 2026 01:01:14 +0000
Manifest next update: Fri 27 Mar 2026 01:01:14 +0000
Files and hashes: 1: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: X4zGpDGIvnV7VYiqW2GkVd1a6H+3p0ZScxQUENV0ZGA=)
2: Maj2D8cSqrB3CLI5LyrvNUbe9TI.roa (hash: b021eDbkKPvvVAW1JJTFEOe1gdVYy/RtiqJ/4iLcPI4=)
3: RUgdvvKNJ1CIlBna6_Sqdz_ueYU.asa (hash: oOjO7PspO0d7dU35qwf5iIVxgQOTcnCtnb/oChTMR6o=)
4: cHGfrQ2RRCrzMuQN1_zdwWiDk3I.roa (hash: EJXHDQe6ZDkATsWeN7+btkC/hG9y8A/gHxLok69CX5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:e9:ae:69:aa:db:72:72:fc:f1:0d:76:ae:60:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Mar 26 01:01:14 2026 GMT
Not After : Mar 27 01:01:14 2026 GMT
Subject: CN=6a7ac3302c6860638719f223231d572284106b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:1d:79:05:12:63:15:0c:93:f5:e3:e4:5b:
a2:3c:3c:8b:18:53:5d:1e:6b:0b:60:cb:e7:79:3d:
ec:d2:18:7a:ee:de:3d:2f:7e:8e:8d:95:79:16:e2:
71:31:8d:23:0d:3b:91:ae:ce:94:22:fb:e0:45:78:
6b:4a:37:aa:6a:d9:0f:a8:9d:c8:eb:37:39:e9:61:
d5:3e:40:1c:52:50:d4:47:e2:e0:01:cf:cb:88:d1:
4f:3c:ef:42:40:19:f2:9e:ba:48:5c:b7:66:3c:6d:
92:16:00:46:8a:20:98:60:db:0b:b1:39:2b:44:39:
a4:08:55:89:25:12:02:f6:7c:d7:47:df:d6:0b:f8:
ca:10:75:0d:2c:4f:de:a0:54:7d:c4:d6:dd:30:b8:
d7:48:9e:e1:1b:89:80:ed:4f:36:48:f5:10:81:46:
1b:14:a7:08:a6:60:d9:2c:b5:fe:bf:fb:44:93:46:
6c:b8:68:2f:0f:0e:5f:34:dd:98:72:f4:d8:2a:3f:
4b:92:f3:93:2f:4e:0e:0d:8d:0b:72:9e:55:24:15:
bd:e6:f9:64:81:15:66:f0:eb:a7:3d:e1:b6:0b:7c:
2f:84:9f:7c:f3:f1:c5:c2:de:50:b5:cd:c2:ca:8b:
5f:5d:96:5b:a2:3d:0d:a6:ef:1d:7b:62:21:39:a4:
a0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7A:C3:30:2C:68:60:63:87:19:F2:23:23:1D:57:22:84:10:6B:33
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:16:31:1d:80:7f:82:39:b3:01:7c:76:42:b4:8b:1b:af:a0:
b2:8c:50:b2:a1:f0:cb:3b:04:c2:59:6a:fb:20:0e:be:f4:cd:
8c:a0:c8:f2:55:71:db:24:00:03:5d:3e:d6:30:06:7e:ea:d6:
95:11:e5:81:6c:65:f1:f9:d3:8e:0c:38:89:b2:d9:80:2c:93:
79:02:cc:76:7f:67:14:69:08:5c:16:50:7d:d6:84:de:6e:ae:
f7:96:c4:e9:a0:54:d1:d9:6a:80:7c:49:c7:66:9f:6c:50:f0:
ba:26:78:bf:99:51:0e:bc:e0:72:90:be:98:05:79:9a:33:48:
14:a1:33:f2:ff:0f:8d:69:f7:3f:da:24:a0:8f:9a:51:3a:cc:
5c:58:f1:8b:4f:da:ad:ff:a2:cd:55:e1:9f:92:8a:fb:6f:ab:
b9:b5:42:a3:a3:65:f5:31:8b:36:3d:9c:07:98:1a:b7:07:4f:
ea:6e:6b:82:d7:33:7c:f6:ca:30:f7:92:3c:0d:25:42:90:38:
f6:a9:09:8c:f3:0b:f4:d2:fc:c4:a9:23:f9:79:c8:5f:51:4e:
d1:3f:39:1e:91:0f:06:19:5e:0b:ca:8f:26:9f:28:f1:95:2c:
53:ee:4e:dd:78:41:75:2a:47:67:11:db:c1:9d:a7:0d:a4:6a:
d2:a0:ac:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:36 2026 by rpki-client