Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: vxbjBUZLzV8L854vsOuxLQUE/NVcz3wuTviTCds9MBA=
Subject key identifier: 5A:F7:3C:A7:BC:76:AC:55:84:D0:BD:09:C5:0C:13:B6:10:EF:96:FB
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 01A0D727F1ED4CF9D9036FE4B753E96647CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0ED7
Signing time: Fri 25 Sep 2026 06:01:54 +0000
Manifest this update: Fri 25 Sep 2026 06:01:54 +0000
Manifest next update: Sat 26 Sep 2026 06:01:54 +0000
Files and hashes: 1: 29v_UvGTzrv0FNNyLrzzEifxUDQ.roa (hash: JBQnXvjqAFsHEoG0C+AGJp4xr36OJCXqWBYzwVT8SB4=)
2: 6qGh1CWEL5urT7KqlTeQZmDgafw.roa (hash: OCUd2zNoXwmHcdVRlj45FZmejRsmzHfWho56l2ASAPc=)
3: ERqoMB1EdTu-WuTzFfa9zq0xENU.roa (hash: JBCpcS00xzJTn3hkHBlQy1mjAraFDf4IIBmEBDuwd58=)
4: H8ur06ZzMoUo1Gt7mOEKMDQJafY.roa (hash: zkR8SvftOg6UL5t5sXessXOzxmjo2b7nS9dxJ1c+yR4=)
5: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: DdsHqcY9Ez/suP6AOR3dXnA9IXF1hBbRNXnpXfu4AxA=)
6: YGGcoMwgnXgQhZlFiELK4BMadGs.roa (hash: YXm7yk6lZ9RL1Uc7MqGLkZ8Gibptwurwo1w5xqii1FU=)
7: sreC2wgD7tfWbcxeKGmM8jbVMK0.roa (hash: 3TdsfIYOJaGfNZoP9ydUNXZCTzbuK4Zf2Wc7FFSRaFU=)
8: yjjbe9KP85kt8Ob2oDHDR9MXIMg.roa (hash: wJzFwpkYh/4OlhPxLRY+Af3Zi8uNHB0MPLWQeMahMl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:27:f1:ed:4c:f9:d9:03:6f:e4:b7:53:e9:66:47:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Sep 25 06:01:54 2026 GMT
Not After : Sep 26 06:01:54 2026 GMT
Subject: CN=5af73ca7bc76ac5584d0bd09c50c13b610ef96fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:81:97:4a:f9:90:9b:77:80:f6:7b:cd:d7:58:
f2:f6:16:03:32:5e:a6:39:ca:39:1b:bd:81:46:49:
2b:be:e7:a4:b4:8e:6c:54:31:41:22:9c:14:a0:28:
67:45:4b:2a:56:76:c0:e7:01:3c:3b:b8:f3:fe:13:
15:75:3a:7d:58:70:3c:61:bc:db:54:c6:00:38:8e:
da:93:24:14:fd:26:74:59:b7:ed:15:2c:cf:c7:5f:
e1:1f:42:77:9b:32:c0:d9:be:f4:0a:00:7b:82:41:
8f:2e:96:4c:06:98:36:1c:f0:60:fc:04:c3:20:26:
c4:b9:28:9e:c5:41:64:47:25:64:92:08:9d:01:e2:
bb:9a:45:2a:06:37:41:5e:3d:69:8d:63:10:be:84:
71:55:fd:a2:c3:e8:f2:6b:0e:09:87:7d:14:72:dc:
33:f7:ec:3a:28:4c:ef:29:80:7e:54:73:18:8a:4a:
17:65:d1:5e:12:0a:71:7a:00:35:ea:01:2e:63:03:
8e:9c:8b:4e:da:ae:a9:5b:f3:ec:d0:53:7a:41:f3:
b2:01:5b:27:11:a5:1e:74:99:0d:36:c2:e8:67:7b:
80:ff:02:47:92:b7:19:2e:4f:18:ad:c5:2e:f3:3f:
92:37:0e:2d:8e:a7:b1:42:85:b2:ed:d6:9a:34:4d:
97:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F7:3C:A7:BC:76:AC:55:84:D0:BD:09:C5:0C:13:B6:10:EF:96:FB
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:67:fa:a9:7c:d2:98:02:8a:50:2c:6e:b1:c6:5e:16:40:b1:
1c:fc:66:a0:2f:c4:67:33:bb:f0:31:e5:fd:13:70:9e:f2:8d:
a7:17:df:6d:ca:ed:43:0d:c0:3c:ca:52:11:f8:ce:d4:d1:57:
5f:d6:13:ac:54:d0:ed:da:66:81:62:50:9f:3e:36:14:0c:83:
d7:f5:b3:e5:31:2b:23:19:55:d0:87:20:8a:e8:16:15:36:6d:
7f:02:fa:d1:3e:0c:c1:d1:99:9d:91:41:12:48:3d:5d:ea:65:
df:14:18:9b:1e:1e:ca:ef:77:34:bf:6d:b5:38:4b:62:a3:b0:
32:44:4c:fa:57:a9:e7:9b:72:65:fa:99:cd:d5:8c:b6:12:99:
0b:58:22:3f:31:9b:65:d3:2f:17:92:cb:c8:42:7f:05:57:d3:
53:0f:18:07:be:20:5a:23:1a:f6:b6:6d:c9:10:88:76:91:cf:
bd:86:dd:51:19:4c:7a:8e:69:6c:ca:ff:ad:22:3b:a3:12:96:
72:5a:94:a9:fb:ee:f4:bf:37:ea:c9:88:9a:59:ae:40:cb:e3:
c4:ce:e0:16:50:0d:a4:d3:ce:73:9e:53:3f:15:82:b5:e4:7c:
63:64:14:c0:f9:ba:21:0d:98:28:b7:02:41:49:bf:b4:98:86:
fa:54:70:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:23:17 2026 by rpki-client