Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
File: KPVnVJmD9DrdmYw26PeL0V9Fosw.mft (raw, json)
Hash identifier: EqyvdSTAJIu45G7TlRkAhmZb27QszroymiQuY+7ZeAw=
Subject key identifier: A2:57:87:BB:5E:8E:6F:2B:E9:69:A6:E3:00:42:C9:9F:19:BE:B9:14
Authority key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
Certificate issuer: /CN=28f567549983f43add998c36e8f78bd15f45a2cc
Certificate serial: 019D284E498F1545B6D20C6344CC336F3A4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
Manifest number: 0E8C
Signing time: Thu 26 Mar 2026 04:01:52 +0000
Manifest this update: Thu 26 Mar 2026 04:01:52 +0000
Manifest next update: Fri 27 Mar 2026 04:01:52 +0000
Files and hashes: 1: 31-g2O4jA-IdMKhrhpCzByPryFw.roa (hash: GKsHl7IDsZtj7GZMS2THAskx0P5sRUkyuOPplPo3N4A=)
2: KPVnVJmD9DrdmYw26PeL0V9Fosw.crl (hash: rhumaYFUAlezb4uXXKHq7C+URTytD7y0XKNagt3J5vA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:49:8f:15:45:b6:d2:0c:63:44:cc:33:6f:3a:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f567549983f43add998c36e8f78bd15f45a2cc
Validity
Not Before: Mar 26 04:01:52 2026 GMT
Not After : Mar 27 04:01:52 2026 GMT
Subject: CN=a25787bb5e8e6f2be969a6e30042c99f19beb914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:4a:38:37:63:52:75:79:0b:01:a2:f3:43:
04:4a:33:a2:27:a8:e9:20:76:ec:f4:29:8a:aa:31:
26:e1:23:64:5e:a8:9b:0e:a7:c8:bf:c7:df:c6:4e:
2d:a9:66:d5:d2:6b:c3:97:bc:2c:7c:9d:0f:f0:2b:
e1:f3:86:b7:fb:a0:de:7e:63:cc:68:51:de:f2:c0:
0a:78:4f:b6:2c:cc:3d:e4:45:79:ab:dd:7f:bd:0d:
85:47:ce:1b:99:6a:c0:4b:53:b7:92:f4:34:60:59:
a5:82:57:d2:c4:9a:e1:28:74:e9:0b:f0:e3:8c:f2:
da:b1:18:2d:67:70:4c:d1:c1:38:a2:20:59:8b:48:
f7:d0:d6:e5:da:92:ef:ca:ec:b8:c2:f4:4a:54:f9:
64:61:38:7d:92:47:c6:22:31:1e:a4:2d:18:6b:3b:
45:5b:8f:e1:76:dd:17:55:cd:b5:a7:7d:99:d8:36:
34:de:a5:9d:4a:a9:51:23:1e:c4:d7:12:c7:39:34:
0f:fe:6a:2a:40:79:9f:10:26:48:a0:bf:7b:ca:1e:
94:9f:24:b4:88:1a:ee:8b:ec:04:3e:9e:b4:2c:94:
ac:68:5a:95:e8:77:96:a0:be:2a:48:b1:cf:97:18:
c8:d9:bf:1c:47:5e:35:35:7b:d9:42:0a:1b:c1:98:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:57:87:BB:5E:8E:6F:2B:E9:69:A6:E3:00:42:C9:9F:19:BE:B9:14
X509v3 Authority Key Identifier:
keyid:28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4d:4a:31:7a:82:e2:94:82:5c:cc:f1:93:1d:b7:86:e1:eb:
e2:6b:9a:3a:46:d9:df:67:cc:f5:ea:66:40:2b:a0:25:63:a5:
15:06:5e:0d:83:8b:5c:2c:ea:05:77:fe:90:b4:d6:78:0b:c2:
11:6c:b4:c1:e0:0b:ff:44:fe:8c:b3:39:34:02:48:4e:5b:17:
a6:45:51:d5:79:89:f3:5e:5c:a9:d8:68:87:f9:25:73:8d:a5:
7a:0e:40:0f:31:09:1a:59:2f:35:4d:47:dd:0a:8d:14:8d:24:
7e:1a:26:63:01:17:ce:43:96:71:21:e9:f3:d3:05:34:b8:92:
80:8f:c9:8d:3b:90:b9:ee:6c:d5:de:43:e4:9c:90:f3:d9:bc:
bd:40:9b:0b:0d:c0:73:08:b7:4f:7a:33:50:cf:ac:97:a1:8b:
a5:67:53:d3:aa:fc:ac:f5:56:4e:e8:26:52:14:3e:73:18:9c:
4b:6c:b3:90:43:64:d7:2e:20:9b:72:cd:dd:b8:f0:5c:27:86:
a1:f8:4a:b0:0d:fd:ae:0d:35:94:ea:50:2f:77:b8:29:87:7e:
37:a6:60:8f:87:88:1a:35:7e:bf:a8:7b:50:aa:f8:1c:02:5d:
8c:59:dd:39:c5:81:be:f3:2c:c9:37:b0:54:1c:05:6e:df:2b:
96:2a:4d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:34 2026 by rpki-client