Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
File: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft (raw, json)
Hash identifier: VsWfAj4VLgrw6seMpNbJ79Enc5z2nDwNmX/0pkfCxhQ=
Subject key identifier: 5A:F2:FD:FA:B2:75:A9:26:AB:F6:C9:2F:54:1C:39:55:56:65:91:2E
Authority key identifier: 28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
Certificate issuer: /CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Certificate serial: 019E20237FC614BBFED329AB0DD0AFFAFA14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
Manifest number: 1351
Signing time: Wed 13 May 2026 07:00:57 +0000
Manifest this update: Wed 13 May 2026 07:00:57 +0000
Manifest next update: Thu 14 May 2026 07:00:57 +0000
Files and hashes: 1: 6Rn-wxtOzItHCQZfTf_aB44eX3w.roa (hash: CLsXfryDKRJpVOl8XMFhcPTYQSBV9e1dqAwQW92Ka+4=)
2: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl (hash: lW5zMLzbuXok8IWu8aIWuveljyS9G5+MnSg2b50IzAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:7f:c6:14:bb:fe:d3:29:ab:0d:d0:af:fa:fa:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Validity
Not Before: May 13 07:00:57 2026 GMT
Not After : May 14 07:00:57 2026 GMT
Subject: CN=5af2fdfab275a926abf6c92f541c39555665912e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5b:1f:dd:13:0e:12:f2:28:c4:b5:f1:f8:9d:
e2:5f:17:70:14:4c:06:d4:98:42:ca:14:8a:1e:2e:
7f:97:23:4c:04:77:24:f2:c7:88:ce:7b:0d:22:07:
91:3a:03:20:f1:79:14:00:bd:11:55:2d:23:3c:d0:
1e:7c:ba:28:28:b8:90:87:31:d9:53:cd:f8:5b:d5:
9c:b8:9b:97:49:e2:ad:2b:7c:91:e5:6c:22:95:26:
58:11:cc:8e:27:30:49:65:47:30:df:ca:72:ad:e3:
f3:ea:53:a0:4c:be:3d:b8:9c:de:83:ac:af:b5:5a:
13:a7:7f:a2:8c:b8:2f:5c:6b:7a:6a:98:9c:1b:74:
4d:65:2f:8d:8b:4e:e9:ae:df:a3:72:89:53:2d:5d:
65:7a:c4:18:54:c9:43:32:c3:d3:95:91:85:31:d2:
60:eb:7f:38:a1:02:a6:52:fa:ee:ba:3e:a8:72:e4:
cd:02:eb:0a:ec:c3:f8:37:4b:6f:36:47:82:e1:5d:
4a:32:36:a7:b5:9d:a8:be:c5:e6:f2:d6:b8:12:42:
33:6f:87:f1:ba:46:3d:a9:20:48:a3:f4:14:d0:b7:
b2:93:95:de:c5:6f:0d:19:f5:62:d2:ad:92:dc:8c:
13:26:85:da:e3:47:03:77:69:d2:b5:27:73:58:55:
08:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F2:FD:FA:B2:75:A9:26:AB:F6:C9:2F:54:1C:39:55:56:65:91:2E
X509v3 Authority Key Identifier:
keyid:28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4a:13:7f:6e:33:e8:db:12:b5:6b:c7:80:ed:3c:5d:a3:3b:
d1:56:fc:a5:79:b4:d5:c8:10:72:ce:89:49:2f:d6:d4:9e:54:
ae:ec:62:e3:3a:1a:3b:52:62:fe:0a:99:c8:6b:fe:04:b2:be:
fc:c8:e2:b3:1c:9d:55:cc:a6:ea:7a:71:7f:cd:4b:44:85:2f:
63:d5:af:fb:5a:f3:99:62:ee:4b:fc:0b:fe:11:07:5e:dd:a8:
de:f7:ef:3f:17:01:c7:1a:a5:8d:f0:9e:98:76:f0:67:7e:b2:
c9:1c:95:7d:a3:8e:c7:a1:61:3e:14:f8:38:84:bd:98:9e:48:
45:9b:cf:f4:93:a7:7e:4f:22:62:f2:39:77:aa:ba:fd:9b:44:
a3:64:04:23:2a:40:80:1b:ba:b9:88:fc:fa:1d:4d:8e:b1:03:
3b:2b:36:8e:fb:13:33:f5:05:f1:d6:b6:fc:bc:9a:bd:8a:fe:
58:08:25:28:bb:fc:f1:b4:3d:e6:b5:a8:eb:85:f3:28:a8:e0:
31:37:d7:c5:ac:3e:cf:a8:db:45:74:eb:86:a4:a1:72:f7:eb:
26:c7:64:85:ae:97:7e:a2:f6:c2:2d:ad:4a:30:fb:aa:c4:73:
51:82:85:1f:06:b7:26:81:2d:0b:ef:12:15:eb:96:04:68:86:
28:a2:25:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:57:32 2026 by rpki-client