Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
File: KM0SOrdJNbPklTilzaDMnSuurxU.mft (raw, json)
Hash identifier: 6lPB3J6sb9p9V3Cc7foCGWd/amo5vwLmX5Ka9zLFqX4=
Subject key identifier: F5:6E:E9:E2:76:06:F8:2E:32:D0:9F:5B:CC:79:FF:35:5B:E3:17:B9
Authority key identifier: 28:CD:12:3A:B7:49:35:B3:E4:95:38:A5:CD:A0:CC:9D:2B:AE:AF:15
Certificate issuer: /CN=28cd123ab74935b3e49538a5cda0cc9d2baeaf15
Certificate serial: 01A0E174F327A4DC82FD59ADE93E643A91DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KM0SOrdJNbPklTilzaDMnSuurxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:02:12 +0000
Manifest this update: Sun 27 Sep 2026 06:02:12 +0000
Manifest next update: Mon 28 Sep 2026 06:02:12 +0000
Files and hashes: 1: KM0SOrdJNbPklTilzaDMnSuurxU.crl (hash: reNf5VWlz+KsFfUe1rcuv4QzovZ56EbyB/U0WJ0B5Ig=)
2: uVLWLVZ_kcxFWm8ZzgV8DoBUdcY.roa (hash: R9P1gLfYpBnWPKUfugfKeag1ecJmDwTXW1CEll0445Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KM0SOrdJNbPklTilzaDMnSuurxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:f3:27:a4:dc:82:fd:59:ad:e9:3e:64:3a:91:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cd123ab74935b3e49538a5cda0cc9d2baeaf15
Validity
Not Before: Sep 27 06:02:12 2026 GMT
Not After : Sep 28 06:02:12 2026 GMT
Subject: CN=f56ee9e27606f82e32d09f5bcc79ff355be317b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:af:a6:a4:1f:c9:28:b3:72:f5:67:42:ce:66:
e7:d6:26:6b:33:5b:1c:03:f4:e0:aa:da:56:86:7e:
72:8c:d8:b7:4c:5b:58:03:90:8e:a8:4d:39:40:48:
8c:7f:26:f9:e8:ca:97:8d:1b:91:98:cb:ce:e6:fa:
09:97:f8:13:16:61:a9:4d:e2:d5:6c:62:32:03:9d:
4a:4c:23:31:9e:93:0b:b7:d3:32:03:9d:95:83:d7:
03:ef:27:41:92:8a:98:f0:75:cb:9e:69:b3:9a:6c:
0f:a6:2a:f9:63:14:a2:e3:e9:60:c6:0a:71:da:63:
a3:15:dd:99:a7:fa:0c:f1:af:72:83:d3:e7:ce:5e:
80:eb:ad:31:ef:dd:e3:05:c0:c5:7a:ac:90:fa:31:
0c:f1:5c:71:f4:8d:a3:4a:37:b6:0b:7a:e8:ee:82:
1d:f8:7b:01:2e:2f:09:13:df:4d:03:b3:fe:06:6e:
47:a3:46:0e:9e:90:e6:82:7e:24:5d:64:8a:f4:0f:
f0:b4:dc:51:d9:c3:5b:ab:a4:fc:b8:6b:cb:b4:1f:
4f:be:83:90:59:1c:e5:d0:50:b6:14:75:c4:ca:3d:
c1:55:ac:45:59:f3:d6:08:c4:2f:7d:5e:5a:a3:a0:
c8:64:77:a7:b5:07:97:7a:f9:56:49:3d:ee:68:38:
49:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6E:E9:E2:76:06:F8:2E:32:D0:9F:5B:CC:79:FF:35:5B:E3:17:B9
X509v3 Authority Key Identifier:
keyid:28:CD:12:3A:B7:49:35:B3:E4:95:38:A5:CD:A0:CC:9D:2B:AE:AF:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KM0SOrdJNbPklTilzaDMnSuurxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3d:d6:8d:33:4e:60:1f:8b:29:d1:d2:4e:3d:64:71:82:23:
aa:53:00:88:f4:65:39:18:79:7e:01:1f:80:9f:7f:7e:34:a9:
29:38:7d:87:a6:45:f5:2c:7f:83:48:02:01:c5:6c:b5:4f:7e:
ce:b3:c8:36:9b:76:73:95:94:a4:0a:4b:0a:7b:73:d4:08:e1:
57:65:3d:a9:89:41:93:f8:26:2b:3e:e0:7c:1f:57:84:49:01:
de:f1:ed:b9:28:1b:c8:c3:61:de:2c:13:bf:ab:98:d7:34:a6:
9c:a3:46:cd:7f:43:df:8d:a7:8a:70:4b:c9:94:7f:57:5d:7e:
07:21:17:88:41:7a:41:c7:0c:e4:28:7c:cd:ba:0f:30:db:10:
3a:9b:e0:59:c6:b4:a5:d5:6a:97:d2:94:42:34:a0:29:dc:f3:
3f:e5:36:ad:68:00:ca:e5:f8:84:e3:b9:9f:cd:d5:42:95:d3:
dc:f1:46:b6:53:41:dc:c3:77:cc:cf:a0:15:c9:f3:ab:9c:05:
a6:93:ca:38:4a:db:c0:e3:69:19:e4:48:80:6b:4a:d5:17:dc:
d0:a2:2c:a7:fa:e7:93:9a:e5:f8:3c:4e:38:f9:29:df:31:7c:
e9:d5:78:82:02:ac:0e:0b:26:2d:b9:d6:06:8b:28:bd:81:f6:
88:51:59:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:16:11 2026 by rpki-client