Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
File: KPIqU5CbUnc1JGNA8EF-vv0yazE.mft (raw, json)
Hash identifier: pWS8zQ4MlWJ1hNITLRQhQuJFtq2DoRoAZqWJgoWrS7w=
Subject key identifier: 73:48:E3:1B:C7:FA:C4:82:2F:BD:FB:09:4A:AD:AB:A6:C1:37:02:CA
Authority key identifier: 28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
Certificate issuer: /CN=28f22a53909b527735246340f0417ebefd326b31
Certificate serial: 019F8EA2C91ED42DB79768B1D1AB5C4FABC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
Manifest number: F0
Signing time: Thu 23 Jul 2026 11:01:00 +0000
Manifest this update: Thu 23 Jul 2026 11:01:00 +0000
Manifest next update: Fri 24 Jul 2026 11:01:00 +0000
Files and hashes: 1: KPIqU5CbUnc1JGNA8EF-vv0yazE.crl (hash: 3ytidJoQBEqkvVkGzHuNeoilvOsZLH1ut+51t+wbvNE=)
2: w0e6jkiUX1sni-XsVknCS6jjnrs.asa (hash: dlOu1937WJHpDAsAncwHV+rfvJq6GFUalmkUWER/diE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:c9:1e:d4:2d:b7:97:68:b1:d1:ab:5c:4f:ab:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f22a53909b527735246340f0417ebefd326b31
Validity
Not Before: Jul 23 11:01:00 2026 GMT
Not After : Jul 24 11:01:00 2026 GMT
Subject: CN=7348e31bc7fac4822fbdfb094aadaba6c13702ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:43:e3:49:86:92:1b:45:f1:84:c5:40:7f:be:
a9:db:f2:fd:b7:1c:3b:89:f8:6e:30:e0:98:8e:62:
23:f1:4d:8b:b3:64:9b:66:9b:35:f6:f9:a9:1e:75:
77:09:a5:61:5c:b4:c8:22:37:ea:06:09:d2:a3:90:
06:63:71:0f:37:93:08:98:4f:fb:1c:29:bb:66:55:
3a:7c:5a:55:b4:c7:7d:9b:92:57:3e:a1:bb:d2:79:
87:90:0f:a9:d5:f6:6c:08:85:7e:58:11:ed:6e:25:
08:14:50:7e:ea:e8:fd:b0:da:a3:77:a4:41:c0:84:
6e:4e:ae:81:a5:58:1a:72:c8:1a:bc:07:8c:6d:03:
74:17:c1:8d:1f:0b:15:fa:a2:17:98:39:6c:dd:82:
58:7c:c0:cd:aa:ba:9e:c9:e9:72:88:36:32:43:38:
71:6f:e8:23:42:4a:6b:14:ee:73:cd:cb:ed:37:3a:
d9:af:bd:25:51:f6:62:38:4f:f4:58:01:c0:c6:12:
9d:68:30:9e:73:a2:ff:80:52:be:78:28:98:e2:a2:
b6:4e:05:a9:ba:55:de:fd:87:e5:05:f2:78:ac:be:
c8:2b:7f:b3:5c:d8:67:02:70:c0:cd:20:66:a1:4e:
49:b8:c6:42:31:f3:67:95:0e:7b:ca:e6:58:59:b2:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:48:E3:1B:C7:FA:C4:82:2F:BD:FB:09:4A:AD:AB:A6:C1:37:02:CA
X509v3 Authority Key Identifier:
keyid:28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:27:96:07:a2:c4:db:0c:74:a4:c7:e2:25:61:3d:7d:fc:9a:
fe:2b:92:5a:65:85:7b:0b:89:2d:b5:4c:ef:6f:c6:19:d9:74:
15:3b:d0:5c:55:fa:88:2f:2a:66:31:2d:43:32:3d:5c:17:89:
80:e3:f9:97:ae:f2:03:16:e2:41:73:00:51:f4:ef:df:84:d6:
cb:3d:96:a6:27:d8:e7:b3:12:0d:d1:64:97:01:a1:1f:a8:18:
7e:3b:62:f6:f5:16:51:3c:ec:9b:db:d6:3b:20:50:ad:18:ed:
45:f7:e3:41:14:e9:f3:2f:44:77:f1:74:6d:3c:89:37:d3:0d:
e9:e0:01:23:ab:6f:5c:97:bf:72:a5:dc:1a:4e:60:e8:82:87:
f0:69:62:99:c2:a8:dc:09:92:c4:85:fc:65:15:66:50:9f:61:
61:08:01:23:e4:d9:db:1b:66:e0:56:4b:1e:75:bf:d9:c5:0b:
5b:4d:a0:c5:39:dd:c0:2e:4f:41:53:5c:bd:33:6d:f1:fd:d9:
18:fc:79:bc:a7:30:08:97:aa:0b:96:3a:aa:5b:dd:79:b6:ed:
a4:2f:cb:f1:13:53:6c:c7:66:94:85:89:fe:2d:e2:49:10:27:
7e:14:22:12:33:cb:3b:a9:13:78:7d:e8:1c:42:fc:cb:76:ce:
f1:0f:97:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:09:14 2026 by rpki-client