Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
File: KL8ecjI3QqxNgTarbI6F33ujfus.mft (raw, json)
Hash identifier: i1t+1Qxz5FNwrZ081Ew2TuWSpzLq357b8HbB8grdsT4=
Subject key identifier: 69:8C:B2:BF:40:49:5E:A8:13:74:F3:40:6E:2B:0F:65:FD:52:6B:E8
Authority key identifier: 28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
Certificate issuer: /CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Certificate serial: 01A127678103D93E2954E64EE40D8F9A4312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
Manifest number: 1A9B
Signing time: Sat 10 Oct 2026 20:00:56 +0000
Manifest this update: Sat 10 Oct 2026 20:00:56 +0000
Manifest next update: Sun 11 Oct 2026 20:00:56 +0000
Files and hashes: 1: JYwSyuAchjIXKqx-0j7gKo4P2VU.roa (hash: Ont+m3ZNydrhvmwI0GsT3aYVRki6QYVMqq1ZQxnAm0g=)
2: KL8ecjI3QqxNgTarbI6F33ujfus.crl (hash: 2iLKAXWRQvRP6cZEz70KYfDOziqj9Pmr5fFGU8XM09M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:67:81:03:d9:3e:29:54:e6:4e:e4:0d:8f:9a:43:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Validity
Not Before: Oct 10 20:00:56 2026 GMT
Not After : Oct 11 20:00:56 2026 GMT
Subject: CN=698cb2bf40495ea81374f3406e2b0f65fd526be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3e:7a:72:6c:5a:df:ca:59:c5:83:ab:c6:91:
a8:04:cb:44:cf:d1:a8:c5:a7:b6:24:f6:af:e2:d6:
da:a5:3b:18:3c:07:ff:1b:d4:51:1c:99:08:7b:34:
19:2b:cd:4c:c6:3d:86:b2:e5:91:ab:d5:df:3a:51:
6e:21:5f:40:dd:17:a9:d7:39:36:9b:06:3e:f0:8a:
9f:d4:a3:1b:1d:01:69:f3:95:a6:95:1e:2a:cf:8a:
ae:1e:a0:13:76:4e:b5:3c:86:8f:c6:7d:ea:1b:76:
64:57:e5:bd:9c:d6:26:4c:9f:98:08:a2:c3:54:9e:
44:5f:77:a5:c5:b5:00:6c:57:91:03:93:cb:e8:a1:
c1:54:61:30:7e:76:94:37:0b:f6:c2:79:a8:75:5c:
3d:3c:e2:fa:64:2b:7d:11:9b:28:2d:25:d0:e2:72:
1d:d2:4d:83:e1:6b:98:64:69:4c:f1:14:c3:76:3f:
de:70:b9:32:9c:33:a6:16:f7:55:a9:a9:c2:9f:a0:
81:b7:12:57:01:ab:15:32:a2:a7:f2:29:91:ef:5d:
3f:f5:47:0e:fe:8a:82:91:c3:e7:54:09:6c:c6:23:
1d:65:5d:fa:da:73:06:32:a2:60:96:5b:a6:c8:d0:
44:0c:26:c7:70:6a:89:bc:7d:d9:7b:2a:88:eb:90:
2b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8C:B2:BF:40:49:5E:A8:13:74:F3:40:6E:2B:0F:65:FD:52:6B:E8
X509v3 Authority Key Identifier:
keyid:28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:94:e5:7a:62:96:2d:1f:6e:02:93:69:b0:fc:d2:a1:e6:84:
6c:d4:25:59:68:91:46:0d:45:0f:fd:b6:44:e5:fb:f8:f0:13:
67:14:86:a4:9f:11:d3:6f:81:c3:54:c0:e1:88:49:f1:e5:fa:
67:16:2a:8d:49:09:ae:6e:fc:82:ef:e5:02:31:86:e4:34:c0:
f6:7b:fa:ea:f6:49:6a:49:16:19:17:aa:e5:c5:f1:ad:1a:f7:
f0:e6:a9:14:bb:c0:60:f5:9a:00:67:6a:59:09:09:ef:f5:c8:
51:7d:f2:1b:34:2c:bc:af:5b:2b:d7:ad:a2:f9:15:db:34:fa:
03:44:c0:9f:5c:f2:50:8b:18:c0:f3:99:7b:b0:70:78:99:47:
e4:dc:7a:72:2a:0f:5f:15:6a:8f:7d:9a:17:1c:ed:f6:7e:05:
bb:ef:42:74:68:4e:46:d6:2a:24:10:61:2e:29:23:a7:2f:3c:
c2:79:93:e2:5a:79:47:aa:94:02:88:b1:82:f3:d1:7a:67:6c:
d4:9a:a8:36:8f:67:19:a1:0a:20:15:1a:7c:00:d4:5b:fe:1f:
19:ea:f9:ce:c7:e8:31:ae:ed:02:0a:3b:f8:ff:b6:d6:31:ed:
40:fe:fe:af:df:86:5a:c8:e9:c8:d9:ca:fd:3c:b1:6e:45:0a:
2d:a3:dd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:09:32 2026 by rpki-client