Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
File: KPIqU5CbUnc1JGNA8EF-vv0yazE.mft (raw, json)
Hash identifier: Xs6Vu4RsdcuomLCyXOKkxAvyLTtd9f98vzGD9JaphYY=
Subject key identifier: AD:28:AB:3E:5B:81:11:AE:27:83:C3:F3:D8:DC:51:86:44:B0:08:74
Authority key identifier: 28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
Certificate issuer: /CN=28f22a53909b527735246340f0417ebefd326b31
Certificate serial: 01A0C96B2B75061FB7F2BC87562CFE6EF31B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
Manifest number: 0193
Signing time: Tue 22 Sep 2026 14:00:38 +0000
Manifest this update: Tue 22 Sep 2026 14:00:38 +0000
Manifest next update: Wed 23 Sep 2026 14:00:38 +0000
Files and hashes: 1: KPIqU5CbUnc1JGNA8EF-vv0yazE.crl (hash: RJeSNeJx5qVod+znWh1uQ9ppngqWNwDD8sqJrtNuvN8=)
2: w0e6jkiUX1sni-XsVknCS6jjnrs.asa (hash: dlOu1937WJHpDAsAncwHV+rfvJq6GFUalmkUWER/diE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:6b:2b:75:06:1f:b7:f2:bc:87:56:2c:fe:6e:f3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f22a53909b527735246340f0417ebefd326b31
Validity
Not Before: Sep 22 14:00:38 2026 GMT
Not After : Sep 23 14:00:38 2026 GMT
Subject: CN=ad28ab3e5b8111ae2783c3f3d8dc518644b00874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:67:b3:2c:41:dd:96:59:6f:26:4d:ad:9a:
3e:86:6a:ba:f1:39:df:c3:7d:f6:58:66:a9:32:7a:
d7:91:0b:f3:e9:7c:0c:e0:25:e0:54:92:07:b5:74:
ad:0b:b0:8d:f3:13:7d:c1:ee:7d:bb:46:92:08:91:
30:c8:a3:e9:49:cd:70:f2:c1:c3:e1:3a:66:77:ea:
32:dc:ec:34:24:f0:46:f0:5b:b1:32:50:3e:78:90:
72:1d:b9:73:eb:24:14:64:0b:83:0b:0f:ba:ec:ae:
bf:5a:3e:d8:16:2c:19:03:5c:87:46:5f:18:75:42:
85:92:74:4a:d8:0e:02:80:af:87:7c:d7:db:d6:65:
4e:0d:c9:a3:cc:09:9f:8e:c0:a1:21:0e:23:54:18:
3c:05:dd:a6:88:36:87:2d:a0:79:dd:92:87:d1:5e:
eb:50:27:10:67:56:ad:7f:23:5c:0c:ee:0e:50:b7:
22:aa:b1:7b:bb:3f:da:32:75:f2:ed:f5:75:56:bc:
af:8c:25:1a:ef:64:1b:c3:3c:76:19:10:1e:cd:39:
d0:b4:4b:1b:89:99:07:38:97:41:48:72:58:e9:e4:
62:e1:96:c9:60:6c:6d:7c:a5:28:7f:26:ab:e7:64:
41:1d:13:82:77:dc:35:7e:bf:d3:cc:49:3b:81:5d:
12:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:28:AB:3E:5B:81:11:AE:27:83:C3:F3:D8:DC:51:86:44:B0:08:74
X509v3 Authority Key Identifier:
keyid:28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e7:ec:30:49:08:15:bb:61:47:37:97:87:38:80:93:fe:cc:
e7:1d:df:09:16:a6:54:06:85:2e:a3:71:2c:da:78:c1:a7:bc:
0e:21:50:8b:be:e4:1b:13:b1:9b:34:21:42:c9:28:b8:74:bb:
29:09:27:4f:5a:03:00:81:59:e9:d3:6a:68:50:0e:ba:4e:2b:
e5:83:8d:be:3d:b8:5b:dd:62:28:6b:f0:53:8c:95:8b:8d:4c:
66:08:11:cb:d2:74:2f:9c:13:d0:51:4f:13:54:e9:a2:ed:6d:
51:05:29:37:92:ff:61:b6:54:71:e3:44:8f:de:ea:44:d2:52:
9d:03:c1:4f:d0:de:aa:9f:2d:f2:ae:9e:c2:ed:2e:43:38:1a:
f2:48:d7:7a:d5:6d:7e:70:4c:a4:d6:d1:66:6b:cd:b6:08:2d:
3b:be:02:3a:4b:fd:95:f4:80:eb:13:d1:f6:27:73:0e:42:61:
61:f1:29:0f:38:1d:3c:36:55:9d:ef:09:18:eb:13:d1:13:ab:
e5:5d:e6:62:ef:c8:f2:49:d3:14:86:c1:b8:4e:8f:da:8d:f4:
d3:e3:11:1c:a1:da:a2:ae:e1:f6:4d:fa:5f:5a:ec:2f:ac:e2:
72:f0:3d:18:89:b6:93:2f:8e:f1:69:b8:4c:58:25:38:25:28:
24:ae:87:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:47:17 2026 by rpki-client