Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
File: KPIqU5CbUnc1JGNA8EF-vv0yazE.mft (raw, json)
Hash identifier: IhfCbKewlC0JZtOx5F2iklvccUWpwt5CCzaO9IDiae0=
Subject key identifier: 38:8C:EF:8E:3A:B8:28:31:1E:89:CF:83:30:84:56:13:EB:06:9F:9D
Authority key identifier: 28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
Certificate issuer: /CN=28f22a53909b527735246340f0417ebefd326b31
Certificate serial: 019E1DFEE5CECCA2A61A93A0E9B62B27FF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
Manifest number: 31
Signing time: Tue 12 May 2026 21:01:44 +0000
Manifest this update: Tue 12 May 2026 21:01:44 +0000
Manifest next update: Wed 13 May 2026 21:01:44 +0000
Files and hashes: 1: KPIqU5CbUnc1JGNA8EF-vv0yazE.crl (hash: VVvhY93u7GuRojWX8a3HqIsh4N1K7w1iSLd1f23Ab5s=)
2: w0e6jkiUX1sni-XsVknCS6jjnrs.asa (hash: dlOu1937WJHpDAsAncwHV+rfvJq6GFUalmkUWER/diE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:e5:ce:cc:a2:a6:1a:93:a0:e9:b6:2b:27:ff:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f22a53909b527735246340f0417ebefd326b31
Validity
Not Before: May 12 21:01:44 2026 GMT
Not After : May 13 21:01:44 2026 GMT
Subject: CN=388cef8e3ab828311e89cf8330845613eb069f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:87:af:70:99:0c:45:90:84:b4:04:a1:1c:d7:
7c:e0:7c:a2:45:42:e7:4d:37:e6:d5:f3:d8:74:04:
41:ef:28:9b:06:cf:e6:5f:8e:c7:1e:2f:a0:8d:25:
96:3e:ad:9c:1e:c3:f3:56:4a:1a:db:53:3d:98:0b:
37:1c:53:5e:2c:90:08:d0:be:ab:06:97:12:07:d4:
42:eb:cb:2c:45:bc:73:68:0a:39:9d:99:3c:be:53:
85:ef:f5:67:4a:52:3b:92:68:8b:88:ab:79:fe:fd:
84:93:c9:e2:9f:29:2f:75:1f:4d:e6:e9:47:1f:d2:
3e:8d:e3:15:0b:a6:cd:cb:d2:67:2d:75:30:57:36:
be:3e:71:cb:cf:7f:e3:db:36:b4:d6:bb:b5:01:f4:
ed:2a:32:b6:5b:90:df:32:c1:a3:7e:76:8b:b3:da:
a6:d7:5e:49:fd:cd:3f:02:95:46:3d:50:7b:fd:63:
de:55:2d:15:3d:65:30:f7:42:7f:4a:8c:ee:f2:88:
73:1a:ce:ae:18:65:82:bd:cd:87:df:8f:67:14:eb:
7f:b5:48:92:fa:ae:49:44:91:97:a6:44:4e:88:82:
b0:52:80:7f:91:fa:ef:0b:e1:e9:02:dd:f6:6e:1a:
a6:3f:fb:49:c2:c9:8e:6c:03:34:78:59:c3:b3:b4:
0d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8C:EF:8E:3A:B8:28:31:1E:89:CF:83:30:84:56:13:EB:06:9F:9D
X509v3 Authority Key Identifier:
keyid:28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f5:64:64:7d:5e:0e:3c:5a:4a:2e:ab:c5:2e:fd:7c:e0:f5:
14:8c:e6:bb:5e:60:dc:df:20:01:2c:44:15:37:61:2d:90:02:
ab:1f:6c:33:50:85:a4:5c:05:c9:d6:90:36:57:f2:5a:15:71:
21:2d:90:a7:47:24:d6:3b:7a:e0:de:2d:7e:30:60:79:74:1f:
a6:1b:45:08:fa:ed:42:1c:74:20:df:13:f8:ba:7e:c9:02:2b:
93:4b:b1:d2:77:b7:cb:a9:1d:c7:64:4a:a3:81:88:76:a8:6c:
c7:5f:aa:95:a6:0a:86:97:88:4d:a9:b7:30:87:9e:87:f3:a5:
11:79:02:8f:12:e3:26:07:53:9f:1f:7e:69:a7:09:99:90:26:
46:88:d2:03:53:c4:82:12:a2:5a:fe:87:fe:8f:ce:f9:4e:c9:
7c:e0:11:73:06:f2:b7:bf:4e:49:91:d5:f3:8b:d3:fc:74:57:
64:6f:2b:0b:17:ba:d6:4d:98:f0:bd:1a:23:e7:61:62:76:37:
f6:4b:09:8e:0d:3b:f1:69:20:24:81:b8:68:61:e1:f8:49:4e:
ed:fe:96:ac:74:6d:fa:df:a0:6f:84:95:2a:eb:bb:c2:e6:f6:
c3:c8:65:e2:c0:99:76:61:cc:02:c4:51:e4:41:a7:8b:9e:13:
23:57:99:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:19 2026 by rpki-client