Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: kW/9jnduGmIqnA1br2OUZ8EomjH+T5wa9NKMMb/fi+k=
Subject key identifier: 97:3F:2A:E6:9C:4F:13:AD:6A:0C:21:09:A7:B8:BB:61:EE:9D:7F:2C
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 019D258380F40B0CC149E3966933B6AFCF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0CEB
Signing time: Wed 25 Mar 2026 15:01:08 +0000
Manifest this update: Wed 25 Mar 2026 15:01:08 +0000
Manifest next update: Thu 26 Mar 2026 15:01:08 +0000
Files and hashes: 1: 6qGh1CWEL5urT7KqlTeQZmDgafw.roa (hash: OCUd2zNoXwmHcdVRlj45FZmejRsmzHfWho56l2ASAPc=)
2: 8xs8XCRJdNPyL9gpjmSYqUlvaDU.roa (hash: 5NXvRg6jd6XpCSNvlKufUP5Iq4iqGRVh+6EUgzg+7Wo=)
3: H8ur06ZzMoUo1Gt7mOEKMDQJafY.roa (hash: zkR8SvftOg6UL5t5sXessXOzxmjo2b7nS9dxJ1c+yR4=)
4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: agCygYGuIfDaRdvhM7OLBFA53EFgdACF+pLtc32rTW0=)
5: YGGcoMwgnXgQhZlFiELK4BMadGs.roa (hash: YXm7yk6lZ9RL1Uc7MqGLkZ8Gibptwurwo1w5xqii1FU=)
6: dpXdts3AfZLIoFXIbwsOROmN3kw.roa (hash: uqPS9mBkXJrgKSVn6k1BG32CndZwaIOx9TRcsPuY0+4=)
7: sreC2wgD7tfWbcxeKGmM8jbVMK0.roa (hash: 3TdsfIYOJaGfNZoP9ydUNXZCTzbuK4Zf2Wc7FFSRaFU=)
8: upFBJ1-blKi1hPEsB5UUCJux19I.roa (hash: lAsTTr8C/PJQgbSJ4pgl6HP1xqpS4XO7lEwlziU+2A8=)
9: yjjbe9KP85kt8Ob2oDHDR9MXIMg.roa (hash: wJzFwpkYh/4OlhPxLRY+Af3Zi8uNHB0MPLWQeMahMl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:80:f4:0b:0c:c1:49:e3:96:69:33:b6:af:cf:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Mar 25 15:01:08 2026 GMT
Not After : Mar 26 15:01:08 2026 GMT
Subject: CN=973f2ae69c4f13ad6a0c2109a7b8bb61ee9d7f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f7:4b:3c:4a:7b:96:97:a3:b7:02:5c:df:77:
9b:93:17:0b:f3:6a:d0:06:45:c9:2f:4e:0a:85:77:
82:e9:5a:43:a5:1d:af:2e:9a:db:c8:5e:7e:27:e1:
4a:be:85:a6:61:44:13:ef:fc:3f:bc:4b:2a:d8:35:
74:39:50:e5:71:e3:07:c5:71:72:c0:e8:d7:f0:e6:
4e:fe:67:ca:b5:b5:a4:ff:9d:43:5c:76:ae:49:03:
2c:9c:c4:ae:45:fc:69:af:df:13:d7:28:a7:19:88:
f7:87:82:89:36:77:5f:fd:49:ce:95:13:da:13:a6:
8f:65:4c:9e:89:88:5b:3e:ab:bc:51:2b:b6:02:5d:
9b:83:f8:18:21:1a:01:fd:e9:81:cf:f4:38:d1:3f:
66:64:91:ca:02:f7:22:9d:c9:b0:88:f2:f5:b0:95:
b8:b9:51:9b:0d:c7:59:c0:62:24:b9:26:c6:4f:cb:
9d:7e:1a:16:10:ec:ce:d8:48:ef:e1:16:2a:0e:ed:
cc:f1:30:90:1a:71:64:03:d2:ec:db:70:d6:9d:24:
2a:4d:6e:ec:14:0b:60:6a:b7:8c:da:95:ef:68:89:
ef:be:9a:0c:a8:24:62:78:a2:17:4d:0b:86:a1:7f:
85:c8:15:18:8f:cf:0f:4b:7a:67:33:0a:18:85:a3:
1c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3F:2A:E6:9C:4F:13:AD:6A:0C:21:09:A7:B8:BB:61:EE:9D:7F:2C
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:7a:28:9d:13:d2:a2:73:0f:24:60:40:30:0b:f2:19:68:f5:
77:97:3c:40:53:ba:89:bb:d8:93:70:cd:3d:ef:a2:b6:42:d8:
99:4b:4d:c5:ae:5d:ac:e7:a9:23:6e:9c:3b:9e:10:fe:d8:5d:
5a:b7:51:d0:3c:36:e9:14:10:c0:14:30:70:08:52:49:81:be:
f0:da:f9:f4:8f:25:d8:21:15:97:40:67:e8:f3:5d:a6:a2:1f:
17:be:62:42:92:a9:af:0e:c1:f8:6b:25:33:ad:3c:90:7f:8e:
71:0d:40:3d:88:df:cb:76:d4:28:b3:27:42:b4:b3:36:df:a9:
15:56:a0:17:03:78:62:5a:fc:80:3a:f7:ce:fd:06:8c:13:36:
1c:6b:d7:8b:a8:13:b2:65:4c:e8:c6:75:bf:08:42:85:73:67:
30:11:98:43:db:14:07:87:98:82:c9:54:5e:44:b1:23:cb:da:
07:b0:32:07:da:67:fc:a3:ed:c4:55:e1:e1:0c:52:32:8c:e4:
ee:0a:08:8a:29:6f:1e:34:b5:4a:5a:10:53:93:28:69:1e:78:
a8:66:cc:8f:fb:1a:2b:30:51:5f:68:67:00:d8:d9:3e:cd:a6:
55:ee:9b:14:ce:1a:a4:27:2d:15:56:f9:72:44:64:d3:e6:3f:
22:8d:cf:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:35 2026 by rpki-client