Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
File: KL69RlhhhHPtTIN2fFHejiM8MpI.mft (raw, json)
Hash identifier: XUdhhA7g5MAh6SUXh4ZZxE2jOyfzjkOiIE7CpiXGOL0=
Subject key identifier: D4:10:2C:16:B3:3C:50:22:70:0A:89:67:F0:70:CB:1C:AC:6D:31:2A
Authority key identifier: 28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
Certificate issuer: /CN=28bebd4658618473ed4c83767c51de8e233c3292
Certificate serial: 019F9324420DFC6238222EE5759053219880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
Manifest number: 1345
Signing time: Fri 24 Jul 2026 08:00:54 +0000
Manifest this update: Fri 24 Jul 2026 08:00:54 +0000
Manifest next update: Sat 25 Jul 2026 08:00:54 +0000
Files and hashes: 1: KL69RlhhhHPtTIN2fFHejiM8MpI.crl (hash: 8KOU7ak5WNiZFvqghr5A1zI6Ax5h2gWZfu1ksLYeluM=)
2: NNW9fBL9fFAJGVwGGKC0u4xaMBk.roa (hash: QeuasZLkGWjhmBmI2lmaeg2T0aIzvZFSj+N457z3Xik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:42:0d:fc:62:38:22:2e:e5:75:90:53:21:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bebd4658618473ed4c83767c51de8e233c3292
Validity
Not Before: Jul 24 08:00:54 2026 GMT
Not After : Jul 25 08:00:54 2026 GMT
Subject: CN=d4102c16b33c5022700a8967f070cb1cac6d312a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:a4:f2:fb:b3:b7:c6:2d:19:77:74:a7:d9:
0f:7a:e4:00:21:fc:03:11:36:4c:22:12:b8:04:16:
b4:fd:0f:c1:c9:c9:a3:22:20:d5:b3:fe:93:40:64:
e1:c3:24:e4:61:63:9a:d1:cd:53:10:84:84:59:80:
b6:96:9e:1c:52:ea:53:4c:ed:13:78:bb:e3:30:c1:
d1:02:f0:b4:a5:00:6d:48:08:9d:25:8c:cc:ba:34:
54:6f:5a:6d:eb:9a:01:75:4e:aa:47:3a:18:fc:9e:
8a:76:31:7b:42:48:87:75:f4:fa:94:5b:d7:d0:0e:
97:ef:f3:20:1f:03:62:ea:0a:e6:a4:9e:41:14:1a:
70:fc:5c:ef:14:50:ca:cb:1a:f1:0b:e4:81:c3:c9:
d1:e0:4f:cb:4d:7b:d1:10:e9:d0:03:d2:38:ff:e2:
15:b2:9a:de:4b:ca:8d:7a:87:9b:7d:29:22:b1:a9:
ee:17:20:ae:8b:95:f1:02:17:3c:b6:90:cd:1b:40:
c9:52:b0:9f:22:84:7b:12:d7:36:9f:94:ba:22:ef:
a2:36:78:33:29:8a:89:c2:70:db:1f:eb:e6:ba:c6:
f1:10:dd:22:8c:29:09:b9:01:ad:5a:bf:a8:02:be:
be:6c:8e:21:b4:f6:d1:a5:29:4b:03:c4:11:44:33:
5f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:10:2C:16:B3:3C:50:22:70:0A:89:67:F0:70:CB:1C:AC:6D:31:2A
X509v3 Authority Key Identifier:
keyid:28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:f0:66:5e:f2:f0:d3:2f:ac:d0:59:91:c2:51:dc:45:9e:5b:
38:a7:10:66:53:cf:c9:82:89:50:37:03:28:9e:ee:b6:27:85:
d0:13:1d:e1:e9:5f:7e:aa:e2:98:4e:df:a9:24:ea:56:e4:03:
7b:f7:49:6c:46:42:b9:b7:8b:13:2a:0b:d2:76:c5:f8:06:ea:
16:6b:74:94:56:a4:d9:cb:b3:09:9b:4a:81:6e:56:e3:86:ca:
f9:fe:9f:f8:a7:3c:21:28:06:65:65:7c:ab:67:80:e8:12:9a:
93:7e:34:77:65:5b:c7:3d:25:cf:23:0a:3b:47:d1:38:92:c2:
d2:0c:39:04:34:7c:d4:d2:41:97:37:3e:cf:7f:99:6a:09:e4:
a6:9a:83:8b:c6:c5:95:05:b9:5c:0e:98:be:54:51:3f:85:50:
91:9c:e6:39:61:2e:1f:fb:e4:c6:5a:fe:1b:5a:93:33:ce:15:
89:df:2b:40:58:e8:9e:39:6f:a9:51:ad:da:56:f0:ad:0f:1f:
4f:e4:40:46:9d:3a:38:df:14:9b:e1:f8:10:9a:92:47:e4:78:
5c:63:6f:83:61:ab:ec:f7:32:e5:70:6e:24:87:89:ae:9d:3c:
2d:3b:5f:a6:80:3b:f4:af:8f:44:fd:d0:54:c1:6b:99:a7:65:
6d:51:6e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:01:57 2026 by rpki-client