Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
File: KM0SOrdJNbPklTilzaDMnSuurxU.mft (raw, json)
Hash identifier: jxvrq/ExGKPGPNBHeVJfkjHHy0SX9lZd+MeEy3QPnEE=
Subject key identifier: 56:63:A5:26:EE:2C:33:38:B5:6C:5E:EF:63:B1:46:FB:0E:C7:F2:DC
Authority key identifier: 28:CD:12:3A:B7:49:35:B3:E4:95:38:A5:CD:A0:CC:9D:2B:AE:AF:15
Certificate issuer: /CN=28cd123ab74935b3e49538a5cda0cc9d2baeaf15
Certificate serial: 019F916CB243246737D80406C2FBEAACA50A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KM0SOrdJNbPklTilzaDMnSuurxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:47 +0000
Manifest this update: Fri 24 Jul 2026 00:00:47 +0000
Manifest next update: Sat 25 Jul 2026 00:00:47 +0000
Files and hashes: 1: KM0SOrdJNbPklTilzaDMnSuurxU.crl (hash: zj/569gF6qLNqQW5gXaucic+hGbVcokPOLv05NJ6Dk0=)
2: uVLWLVZ_kcxFWm8ZzgV8DoBUdcY.roa (hash: R9P1gLfYpBnWPKUfugfKeag1ecJmDwTXW1CEll0445Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KM0SOrdJNbPklTilzaDMnSuurxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:b2:43:24:67:37:d8:04:06:c2:fb:ea:ac:a5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cd123ab74935b3e49538a5cda0cc9d2baeaf15
Validity
Not Before: Jul 24 00:00:47 2026 GMT
Not After : Jul 25 00:00:47 2026 GMT
Subject: CN=5663a526ee2c3338b56c5eef63b146fb0ec7f2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:1e:82:34:03:d9:39:ff:98:57:b4:92:09:
aa:7e:53:09:73:ad:30:99:38:33:ab:14:d1:8c:fd:
29:01:42:3f:cf:76:b5:05:24:96:d9:10:77:1e:5c:
2f:2e:81:e4:1e:04:50:3f:a3:2c:3a:e9:22:de:27:
8f:12:52:cb:58:10:a7:e6:10:3f:a4:79:f0:df:79:
00:07:9b:f1:70:4a:d8:fc:5e:5b:a5:e7:6a:8e:81:
70:6a:3a:cd:36:e5:93:a5:fa:07:c3:fc:6a:da:42:
07:71:bd:6d:1a:26:ae:85:29:11:22:84:a6:ec:99:
01:07:9c:2f:cf:34:cd:74:2a:11:60:36:20:f4:ef:
6e:1c:f5:54:ef:8e:6e:72:4d:cc:3e:e8:07:bf:b1:
75:92:ab:6f:5f:89:c3:2b:23:07:40:a0:bb:26:9b:
89:43:a1:42:8f:c4:1f:ca:17:bd:b7:05:c3:1e:ed:
08:4c:e4:ca:72:d7:b5:3c:d3:a3:21:07:ed:38:3a:
80:a2:df:e5:a9:be:27:bc:db:2f:a0:56:fc:7f:d4:
dd:f0:d6:3d:74:ae:d7:41:ee:6b:a7:a3:91:11:36:
44:44:09:66:11:33:b1:3d:46:d2:f2:9c:5b:76:6f:
30:6e:7c:38:ed:7b:c6:ca:65:b0:b1:68:24:ab:61:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:63:A5:26:EE:2C:33:38:B5:6C:5E:EF:63:B1:46:FB:0E:C7:F2:DC
X509v3 Authority Key Identifier:
keyid:28:CD:12:3A:B7:49:35:B3:E4:95:38:A5:CD:A0:CC:9D:2B:AE:AF:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KM0SOrdJNbPklTilzaDMnSuurxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:9b:b5:d6:5a:9e:5a:14:27:45:51:8e:40:5b:2a:8c:4f:c2:
f6:91:84:24:c3:d9:ce:e7:d4:af:99:c7:b7:d3:b6:04:c6:ed:
e3:d0:f3:78:9f:b0:e7:c4:28:bd:83:1e:54:3e:ea:66:9b:25:
a9:f9:5f:f0:98:be:99:f0:36:a4:85:97:48:bf:f7:4a:76:35:
78:c4:48:e2:ba:01:0d:40:40:f9:15:c6:3a:ee:8a:48:b3:8e:
bb:cc:e3:9f:5c:14:0a:78:63:1d:68:46:aa:e2:e1:80:93:7b:
d1:b1:6e:e7:d9:4d:3a:6d:d7:a3:fd:61:b2:dd:f0:24:e2:9d:
2e:84:54:8d:28:bf:76:45:07:2b:93:b8:08:84:c9:64:4e:28:
42:da:07:b3:30:2a:ea:e3:90:ec:83:3e:21:b9:63:67:a7:57:
b2:ff:16:34:c1:52:59:e8:ce:e1:fe:da:9d:24:97:64:ee:b8:
b8:9a:b7:5d:00:f9:f7:90:c9:b0:fb:0f:02:d7:29:53:df:62:
3a:35:b5:ec:87:2f:cd:ce:b3:91:8a:b9:72:04:f2:0b:74:e5:
1b:2b:4b:42:cb:2b:67:da:93:92:4c:c3:d6:38:55:15:d4:40:
32:89:9f:db:4c:2b:2a:0c:d6:e2:f6:12:0b:69:85:dd:a4:4b:
58:0d:71:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:20:46 2026 by rpki-client