Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
File: KPev7E0_BvgNaHKm1iRs0B5z1qY.mft (raw, json)
Hash identifier: nRHL/UidxVmDktMXrOdZs/eW/gfSH+PjGVrJwo/amRo=
Subject key identifier: 94:8F:70:13:AB:DF:E9:78:A2:B4:67:03:C6:99:98:9C:38:2A:36:D8
Authority key identifier: 28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
Certificate issuer: /CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Certificate serial: 019D2AA9C26AC3E378C748385A89F30A05CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 15:01:01 +0000
Manifest this update: Thu 26 Mar 2026 15:01:01 +0000
Manifest next update: Fri 27 Mar 2026 15:01:01 +0000
Files and hashes: 1: KPev7E0_BvgNaHKm1iRs0B5z1qY.crl (hash: AHZlccRYE6iN2pv6+7eRM+jaeBWmFyOBfctJTR5BYwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:c2:6a:c3:e3:78:c7:48:38:5a:89:f3:0a:05:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Validity
Not Before: Mar 26 15:01:01 2026 GMT
Not After : Mar 27 15:01:01 2026 GMT
Subject: CN=948f7013abdfe978a2b46703c699989c382a36d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:18:68:d4:b9:db:62:61:19:3c:ca:67:b6:
fe:4b:60:9d:7d:0b:75:b1:a0:ee:17:40:71:14:88:
b3:cb:7d:9d:99:9f:36:fb:90:b9:ba:3c:e8:d1:93:
65:ab:ca:24:c9:27:73:e0:d6:4e:99:cc:c4:f0:09:
80:9e:83:76:eb:33:02:1f:c7:c8:5f:c9:64:68:fd:
c9:e9:8c:65:d3:db:0b:f6:bd:1f:b7:bf:47:d9:dc:
e9:3a:c3:15:84:7d:06:4d:cc:2b:c9:53:55:4c:83:
15:8d:6d:2a:04:41:ad:00:87:72:f1:d7:b2:46:ae:
77:06:65:ad:76:98:13:07:c4:ab:1e:16:af:34:71:
46:70:cb:c1:a2:d7:4f:ee:43:41:4f:f3:7e:cf:b3:
99:f7:eb:90:eb:25:bf:a1:73:0e:aa:d6:9c:64:28:
c4:14:f4:76:08:35:69:c9:4f:93:c2:dd:df:ef:2b:
4f:64:0c:57:9a:d6:fa:d0:56:89:51:c0:25:5b:a5:
e1:17:16:75:56:12:7a:e6:31:89:c3:65:96:86:75:
29:a1:26:1e:6e:47:48:32:15:34:a2:01:3e:f8:2e:
a0:89:82:a8:46:32:36:98:5e:ef:53:70:60:71:e4:
ac:92:94:28:e8:b3:72:c6:8f:19:70:e6:3f:81:57:
62:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8F:70:13:AB:DF:E9:78:A2:B4:67:03:C6:99:98:9C:38:2A:36:D8
X509v3 Authority Key Identifier:
keyid:28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e7:0a:f3:20:3a:87:c0:da:b3:d2:66:80:a7:bb:86:8c:a6:
0e:da:e1:4f:4a:d6:e6:d2:4f:4b:36:fb:80:95:59:dc:3d:99:
a0:23:dc:2c:15:ee:45:58:9c:e0:83:a0:63:3f:1a:ad:df:52:
0a:bd:0c:f5:60:c0:23:45:42:4c:4f:4f:25:f9:c5:3b:1e:14:
b2:a5:57:fe:2f:e5:8e:41:55:64:6f:a1:a7:56:3b:b8:70:aa:
9c:65:2e:ac:f1:12:88:36:2a:10:61:31:21:60:0f:3e:b0:1a:
be:ff:88:72:fe:53:5e:d2:9f:94:79:e0:64:06:8f:b9:c1:a0:
43:8c:2c:ec:fb:2b:e2:93:30:aa:38:58:00:7b:4a:c7:bc:2f:
3b:b7:ff:01:ca:46:2f:2d:60:16:92:c4:54:fb:ab:2c:6b:39:
b8:e8:27:bc:6f:ad:d9:06:e8:f0:aa:73:7f:45:d5:2b:53:c4:
f3:df:1d:97:d5:b8:80:bf:53:76:09:37:89:68:40:b8:00:f5:
09:e1:70:ec:15:73:9b:44:60:47:73:a2:3d:d0:20:90:06:7a:
5f:56:fa:bc:73:3e:88:fe:1a:50:ae:44:61:3b:a6:59:29:13:
08:76:26:77:64:4c:7f:f3:f0:ea:1a:3d:e1:d1:51:56:dc:e7:
30:c8:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:58:48 2026 by rpki-client