
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: 6LM6S7fArAqYJu9R3x8mBn29fnndi70J/hJQX5A1VOs=
Subject key identifier: D6:B1:0C:A6:DC:2D:E9:C9:42:F0:ED:ED:FC:ED:05:0E:38:85:98:59
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 019F8ED91800E164AF3314A7DFBE96BCA63D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0E2D
Signing time: Thu 23 Jul 2026 12:00:19 +0000
Manifest this update: Thu 23 Jul 2026 12:00:19 +0000
Manifest next update: Fri 24 Jul 2026 12:00:19 +0000
Files and hashes: 1: 29v_UvGTzrv0FNNyLrzzEifxUDQ.roa (hash: JBQnXvjqAFsHEoG0C+AGJp4xr36OJCXqWBYzwVT8SB4=)
2: 6qGh1CWEL5urT7KqlTeQZmDgafw.roa (hash: OCUd2zNoXwmHcdVRlj45FZmejRsmzHfWho56l2ASAPc=)
3: ERqoMB1EdTu-WuTzFfa9zq0xENU.roa (hash: JBCpcS00xzJTn3hkHBlQy1mjAraFDf4IIBmEBDuwd58=)
4: H8ur06ZzMoUo1Gt7mOEKMDQJafY.roa (hash: zkR8SvftOg6UL5t5sXessXOzxmjo2b7nS9dxJ1c+yR4=)
5: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: rvsK2pCOkxs98/FqmSb3YQHLseZgli8zYcs9X5/NXXM=)
6: YGGcoMwgnXgQhZlFiELK4BMadGs.roa (hash: YXm7yk6lZ9RL1Uc7MqGLkZ8Gibptwurwo1w5xqii1FU=)
7: sreC2wgD7tfWbcxeKGmM8jbVMK0.roa (hash: 3TdsfIYOJaGfNZoP9ydUNXZCTzbuK4Zf2Wc7FFSRaFU=)
8: yjjbe9KP85kt8Ob2oDHDR9MXIMg.roa (hash: wJzFwpkYh/4OlhPxLRY+Af3Zi8uNHB0MPLWQeMahMl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:18:00:e1:64:af:33:14:a7:df:be:96:bc:a6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Jul 23 12:00:19 2026 GMT
Not After : Jul 24 12:00:19 2026 GMT
Subject: CN=d6b10ca6dc2de9c942f0ededfced050e38859859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:ac:cd:1f:23:7f:07:db:40:6b:b0:3b:db:
e1:88:66:48:bc:de:2f:75:88:81:40:e2:c5:a7:51:
fd:18:14:f0:84:b8:41:1b:4a:e1:b1:d4:64:b9:b6:
a5:20:42:d9:54:b5:83:d1:22:c2:de:dd:26:0b:1a:
95:5b:da:6f:5a:70:08:d9:10:d8:ee:3e:1a:db:53:
76:b1:85:e1:50:eb:12:ff:a2:fa:70:0f:81:6c:27:
de:68:45:5c:c8:4c:4c:a7:97:cb:62:13:a1:6e:19:
3c:db:7e:e8:5c:cf:4d:0c:8c:e0:11:f2:fd:9e:95:
bb:02:04:95:3a:79:2b:06:15:2f:82:14:83:03:a9:
5a:cc:09:34:ee:23:f8:53:8e:bd:28:68:6e:f4:27:
22:60:45:d5:31:61:21:b0:c6:7f:83:f5:10:31:d0:
33:fd:a9:17:08:43:5d:e5:59:7b:18:35:58:e7:f2:
c9:41:47:11:8b:e4:b9:5b:c2:f5:13:7e:7a:8c:6a:
f9:07:f3:fe:85:92:e7:cd:e1:fe:f2:a4:87:4c:3b:
d1:bf:55:91:0c:f3:ac:07:7e:d1:b5:ef:2e:7a:70:
e2:4f:21:58:7f:e9:c6:26:5b:54:99:85:5b:7b:85:
12:c5:42:4a:bd:84:6c:ea:15:d5:83:e2:13:4b:be:
c5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B1:0C:A6:DC:2D:E9:C9:42:F0:ED:ED:FC:ED:05:0E:38:85:98:59
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:5f:90:23:b6:de:78:6b:e2:cf:d0:26:f9:69:b5:03:94:0e:
34:f2:58:f4:5e:4c:b1:c2:83:e8:76:58:8a:aa:7e:6f:83:f3:
6a:40:07:06:b9:16:49:86:49:9e:5f:5b:5b:98:c7:ec:6b:06:
69:ea:0f:a3:75:4f:d9:e8:18:9d:fd:a6:79:c7:01:90:21:03:
29:a2:16:5d:bd:b4:70:d6:93:24:7e:f6:22:97:6f:13:37:ab:
a9:87:19:a8:f0:a3:52:eb:35:be:13:bd:f0:8b:20:e4:5f:9b:
8d:29:58:e8:9a:b4:2c:86:ba:6f:55:22:3d:ad:53:6d:c8:65:
fc:ba:b2:93:af:39:a6:6c:cc:d5:20:e9:15:bf:77:28:24:fe:
2f:88:d2:4b:9f:24:a7:79:80:49:16:8c:bf:39:51:2a:8c:32:
0a:2c:cc:da:64:4c:f1:d5:b6:a4:66:ad:5e:94:45:40:2c:e3:
22:60:d8:67:2f:57:28:cb:1b:76:a0:41:3d:c6:13:a0:ac:47:
f2:17:b0:3b:3a:dc:61:84:22:6d:cc:d8:fb:c5:dc:8d:77:17:
4a:71:14:89:e0:32:37:c1:6f:19:da:75:93:48:55:8a:16:ff:
ac:84:06:3e:ef:a6:cc:3c:80:65:3b:61:33:ae:5f:ce:5a:16:
b4:e6:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:34 2026 by rpki-client