Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
File: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft (raw, json)
Hash identifier: efyuqewCnoTqD+4YCemIOfTtcPJonchEd8PW8f2lhh0=
Subject key identifier: 53:80:E5:AA:F0:7D:D8:2A:CB:1B:C0:8F:78:B3:49:6A:F1:18:0E:D8
Authority key identifier: 28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
Certificate issuer: /CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Certificate serial: 019D28F2C90345F1BC14E0992F9D47BCF833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
Manifest number: 12D1
Signing time: Thu 26 Mar 2026 07:01:32 +0000
Manifest this update: Thu 26 Mar 2026 07:01:32 +0000
Manifest next update: Fri 27 Mar 2026 07:01:32 +0000
Files and hashes: 1: 6Rn-wxtOzItHCQZfTf_aB44eX3w.roa (hash: CLsXfryDKRJpVOl8XMFhcPTYQSBV9e1dqAwQW92Ka+4=)
2: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl (hash: o9AJfMikw5r2cc9euQM5GVtuqBsD0Z30iUTfQ0Bzlzg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:c9:03:45:f1:bc:14:e0:99:2f:9d:47:bc:f8:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Validity
Not Before: Mar 26 07:01:32 2026 GMT
Not After : Mar 27 07:01:32 2026 GMT
Subject: CN=5380e5aaf07dd82acb1bc08f78b3496af1180ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:84:e8:34:86:f1:9f:69:4d:e7:0f:c8:7a:a2:
73:ba:02:7a:8c:e3:c7:dc:aa:01:ac:d7:32:92:39:
86:58:a0:2f:1f:ec:77:07:20:fb:d2:4d:31:5e:4d:
60:19:3d:1f:75:99:e4:03:99:14:3b:5f:53:e7:bf:
c9:9e:ca:08:bd:66:54:1f:79:9e:1f:c9:d3:c9:c3:
d5:40:d2:47:da:56:a6:d4:49:0d:61:04:d6:0f:96:
52:37:8d:54:92:d8:c0:87:4d:72:5f:99:36:89:2f:
e9:50:cb:69:a1:7d:c9:80:48:e2:f0:e3:b8:8f:49:
63:c0:4e:44:1d:79:e9:c6:50:79:69:c0:2c:3b:c0:
c1:c1:7a:4c:d9:5e:14:94:3f:25:fd:93:ed:f9:c6:
b7:ff:a0:36:d0:d1:93:20:17:6d:11:a7:95:07:60:
19:d9:c0:76:ce:c2:9f:a9:a7:87:6e:a3:d9:3a:9e:
32:75:1d:ab:de:bb:4c:e2:e8:f5:5f:7f:bf:ca:a8:
1d:1a:a5:87:6e:3d:5f:56:5c:f7:a8:3d:0a:ae:01:
82:96:21:6e:ef:9e:10:9e:31:89:19:ef:47:25:e0:
65:24:af:aa:7d:ad:c3:0d:41:e2:dd:fd:6e:a2:27:
04:60:13:fd:d3:f8:08:83:10:20:91:b4:45:5f:31:
08:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:80:E5:AA:F0:7D:D8:2A:CB:1B:C0:8F:78:B3:49:6A:F1:18:0E:D8
X509v3 Authority Key Identifier:
keyid:28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ef:e6:4e:44:d0:b1:54:11:62:d0:6f:3b:0e:42:b4:d8:a1:
4c:69:6b:df:8e:84:ca:d9:b0:de:11:47:e5:dd:aa:32:37:dc:
9e:32:29:b2:37:cd:eb:50:d7:f0:00:3b:1f:3f:ba:ff:64:06:
5c:89:dd:8b:21:b4:dc:92:17:64:bf:ef:a9:7d:02:2e:ad:fc:
27:45:50:fb:4d:06:9f:e4:ed:67:76:0f:2b:ad:12:6a:38:ea:
20:db:af:a9:66:d7:22:9f:7f:a8:6e:ef:15:60:aa:4e:b8:cf:
4f:d5:bf:a6:09:c4:39:a2:9b:80:04:19:31:5e:aa:0a:2a:89:
4f:c3:a8:49:15:b3:8b:e7:54:75:a6:97:7a:5a:5e:99:2f:f6:
97:b6:86:8e:84:3d:4e:bf:ce:6d:bd:28:bc:69:d2:8b:d7:ee:
56:ae:a3:83:cb:c8:a4:ed:b4:53:7f:73:8c:a5:5f:06:0e:97:
f5:fa:96:2e:c5:d6:a8:93:04:db:97:fa:1c:df:07:01:b7:45:
bf:51:d3:c1:75:14:0d:be:e2:5d:d3:b4:f4:48:66:3e:cd:90:
2b:55:8c:70:2a:11:0f:04:d7:bf:e6:0d:eb:52:e1:cd:e4:95:
df:68:11:cb:f9:ab:2e:16:c5:b3:00:7f:79:35:46:08:39:78:
8b:e3:90:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:15:49 2026 by rpki-client