Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: W3hXcU7s+lX+WrzfLfZRjcBJMHvdNHtiPsklxgqWElA=
Subject key identifier: 2F:DC:89:90:7A:A7:6B:4D:D0:D4:8E:CA:7F:30:00:EF:4E:57:13:A4
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 019E1EA2B108012498C41B6079B80E3D3C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0D6C
Signing time: Wed 13 May 2026 00:00:38 +0000
Manifest this update: Wed 13 May 2026 00:00:38 +0000
Manifest next update: Thu 14 May 2026 00:00:38 +0000
Files and hashes: 1: 6qGh1CWEL5urT7KqlTeQZmDgafw.roa (hash: OCUd2zNoXwmHcdVRlj45FZmejRsmzHfWho56l2ASAPc=)
2: 8xs8XCRJdNPyL9gpjmSYqUlvaDU.roa (hash: 5NXvRg6jd6XpCSNvlKufUP5Iq4iqGRVh+6EUgzg+7Wo=)
3: H8ur06ZzMoUo1Gt7mOEKMDQJafY.roa (hash: zkR8SvftOg6UL5t5sXessXOzxmjo2b7nS9dxJ1c+yR4=)
4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: uzqzrJ/azjpqQYwIfCRnPNJ5T1rxGovZvdObKZFX6+Q=)
5: YGGcoMwgnXgQhZlFiELK4BMadGs.roa (hash: YXm7yk6lZ9RL1Uc7MqGLkZ8Gibptwurwo1w5xqii1FU=)
6: dpXdts3AfZLIoFXIbwsOROmN3kw.roa (hash: uqPS9mBkXJrgKSVn6k1BG32CndZwaIOx9TRcsPuY0+4=)
7: sreC2wgD7tfWbcxeKGmM8jbVMK0.roa (hash: 3TdsfIYOJaGfNZoP9ydUNXZCTzbuK4Zf2Wc7FFSRaFU=)
8: upFBJ1-blKi1hPEsB5UUCJux19I.roa (hash: lAsTTr8C/PJQgbSJ4pgl6HP1xqpS4XO7lEwlziU+2A8=)
9: yjjbe9KP85kt8Ob2oDHDR9MXIMg.roa (hash: wJzFwpkYh/4OlhPxLRY+Af3Zi8uNHB0MPLWQeMahMl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:b1:08:01:24:98:c4:1b:60:79:b8:0e:3d:3c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: May 13 00:00:38 2026 GMT
Not After : May 14 00:00:38 2026 GMT
Subject: CN=2fdc89907aa76b4dd0d48eca7f3000ef4e5713a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:b4:ec:ac:de:08:e0:3e:83:45:75:63:62:
1f:35:cf:00:e3:01:a2:40:c2:d6:91:26:a9:02:2a:
93:ef:77:33:34:d8:93:b8:c9:ab:02:d1:e5:3c:e2:
35:51:35:cf:a6:66:0c:2d:7d:19:b4:6f:86:a0:c5:
4d:04:34:8c:a0:00:cd:c8:b6:e4:73:72:5d:d4:03:
d8:0a:bf:a3:52:9b:92:20:68:6c:6a:95:4f:8b:d0:
52:a5:53:2c:dd:b0:f8:1b:25:3b:0f:55:be:53:fa:
6c:b1:35:90:77:6f:e7:8d:d0:5f:96:b1:ff:e0:4a:
14:f7:0e:9d:b3:0f:77:83:b6:61:56:74:64:03:59:
f2:48:54:fe:4f:62:83:d4:c8:64:8a:08:47:c6:48:
0c:b8:f3:9a:24:2a:de:40:41:82:f7:fb:fe:b4:a9:
68:75:22:95:f9:6f:23:4e:df:e2:26:dd:83:54:5c:
24:45:53:ce:f1:41:e3:1f:7c:43:7f:94:78:63:fe:
aa:cb:de:f5:92:ea:56:1a:5d:c7:5c:3b:bc:4a:03:
3b:95:63:0b:bf:fe:f0:da:91:40:e1:c0:18:a1:17:
8c:94:08:76:4c:a4:16:95:38:8f:85:e4:07:02:f1:
f5:86:de:2e:20:57:4f:18:71:17:6b:70:dc:d2:61:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DC:89:90:7A:A7:6B:4D:D0:D4:8E:CA:7F:30:00:EF:4E:57:13:A4
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c8:86:47:db:57:09:77:2c:28:f3:46:11:bc:25:ae:0e:08:
85:8a:d1:e4:12:21:b3:8a:54:16:6b:62:d7:e2:51:66:be:0d:
59:7b:54:cc:38:19:03:54:d3:e2:7b:cc:f2:bb:86:0f:25:96:
b3:8b:2a:3f:12:a9:34:c8:69:96:0e:d7:f3:26:cf:02:a1:bb:
1b:89:9a:65:e3:73:c0:49:77:e3:e7:a5:bb:cb:5e:89:ad:02:
0c:51:52:c2:51:56:94:5e:51:63:54:fb:42:ce:d6:bc:25:4b:
8d:e3:63:07:52:b1:9c:72:f8:6f:b4:79:e8:03:01:58:57:0a:
74:7a:5e:7b:fe:0c:fe:7b:c1:27:d5:4b:08:40:8e:ad:8e:b3:
5f:6d:ad:c3:76:ed:90:e3:5f:2d:39:3d:f3:39:15:71:f4:85:
41:c9:9a:b9:15:22:99:c1:83:ad:d5:97:3b:5b:22:aa:ec:38:
2c:14:60:99:39:f2:a9:f1:f6:c7:86:44:61:49:e5:46:59:21:
6c:74:3f:6d:be:ae:4e:61:27:b4:65:3b:a5:79:15:1e:64:b5:
59:4f:45:87:ab:6d:cb:54:a4:0f:85:c1:4d:e2:86:ee:ad:ea:
36:d9:ef:f6:a3:ee:82:74:0e:45:9f:73:07:6f:cc:66:ff:ef:
ac:d9:1d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:31 2026 by rpki-client