
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.mft
File: KMWu-Y8hlLSzfyWF0rMh0s0FG2o.mft (raw, json)
Hash identifier: 2tzj1Znz8z/fSqQ4A4Lcwglg611wbx81x5tSiDY/eXg=
Subject key identifier: 1D:11:7A:6E:AA:AB:EC:2A:77:AC:3D:A1:B6:2E:30:9A:F4:3F:7F:1E
Authority key identifier: 28:C5:AE:F9:8F:21:94:B4:B3:7F:25:85:D2:B3:21:D2:CD:05:1B:6A
Certificate issuer: /CN=28c5aef98f2194b4b37f2585d2b321d2cd051b6a
Certificate serial: 01A0D34A8AE263EC4AA6B26152F68AECB10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.mft
Manifest number: 015C
Signing time: Thu 24 Sep 2026 12:01:12 +0000
Manifest this update: Thu 24 Sep 2026 12:01:12 +0000
Manifest next update: Fri 25 Sep 2026 12:01:12 +0000
Files and hashes: 1: JJ3Jrlo4EfsF8fxfWN1mWDQydjo.roa (hash: hVX8HYf1U+V3FnobfFS2BDs1NBWEvAMPu9hWuZ6QxQc=)
2: KMWu-Y8hlLSzfyWF0rMh0s0FG2o.crl (hash: XUsZgqvUUA15jWl+GpQ3oPdbKYcjdBGxn1tzIKvdRAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:8a:e2:63:ec:4a:a6:b2:61:52:f6:8a:ec:b1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c5aef98f2194b4b37f2585d2b321d2cd051b6a
Validity
Not Before: Sep 24 12:01:12 2026 GMT
Not After : Sep 25 12:01:12 2026 GMT
Subject: CN=1d117a6eaaabec2a77ac3da1b62e309af43f7f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4d:58:b5:f6:00:ce:36:fb:65:12:0d:88:f1:
35:e9:5d:cf:f7:6f:67:3d:56:0e:bd:3a:d7:c0:72:
25:2a:e6:33:b7:53:d7:df:41:f5:64:49:b4:b6:3c:
2f:d6:13:ae:7a:64:ea:68:7e:ce:3a:45:e4:ec:27:
1b:6d:2c:a2:bc:71:35:fc:eb:c7:f9:25:11:89:d2:
9e:5d:c7:c1:7c:25:43:d5:60:3f:d4:29:27:16:1e:
53:11:bf:d1:a7:f6:b7:8a:52:bd:6f:1e:4b:9e:d7:
a1:f3:62:d7:09:5e:7e:7d:a7:7d:cb:cd:65:ea:aa:
03:25:99:14:e4:0f:5d:33:cc:78:76:46:22:de:dd:
37:68:6b:d7:27:c4:1c:3c:d0:70:72:53:bb:31:27:
c6:19:12:c4:82:8e:f6:c6:81:80:d8:2c:e4:45:aa:
1c:0e:ae:a0:37:3e:91:5f:f6:b1:85:22:84:cd:77:
d5:65:c1:5f:9b:37:e3:b0:b4:3e:f8:12:44:28:40:
54:c1:2e:63:bf:81:23:d7:b0:25:9b:a0:46:c9:83:
01:76:8a:66:f8:32:3a:41:45:66:e2:30:7a:c2:b3:
2f:9c:5d:31:f6:f4:d0:88:6c:a3:54:85:1a:8d:a4:
c1:99:1f:f5:ee:83:cb:6b:ab:aa:10:fd:c3:5f:ae:
54:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:11:7A:6E:AA:AB:EC:2A:77:AC:3D:A1:B6:2E:30:9A:F4:3F:7F:1E
X509v3 Authority Key Identifier:
keyid:28:C5:AE:F9:8F:21:94:B4:B3:7F:25:85:D2:B3:21:D2:CD:05:1B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/85b169-8dad-4b16-baba-0f09b16fdaac/1/KMWu-Y8hlLSzfyWF0rMh0s0FG2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:48:70:66:44:b8:06:71:d2:cf:06:ca:15:f1:1d:db:8c:c4:
a1:a6:d6:9e:2c:58:a8:37:eb:0a:9a:2b:ee:cb:4c:a7:4f:52:
cc:30:72:65:e8:9e:a9:11:18:3a:8e:7b:9e:99:63:d0:b4:9d:
2b:c4:ba:3f:53:07:93:c5:51:1e:67:b0:e3:ec:f5:d7:10:33:
94:93:ba:08:da:c0:2d:29:eb:bc:05:9a:f1:24:27:08:0e:57:
0d:e8:7a:f7:e6:11:77:2c:cf:72:cf:8d:33:12:7e:33:a7:57:
73:2c:6b:c6:c4:52:e2:c2:33:b0:85:43:cd:5a:1c:29:ea:1f:
28:2f:00:20:45:67:b2:58:bd:83:73:c8:c4:62:8a:c7:1f:8d:
a0:52:70:51:44:1a:e6:7d:04:e5:eb:ff:ac:68:2d:ef:fd:dc:
ef:65:96:df:1d:f6:fd:78:d2:ee:dc:dc:e7:78:36:8a:43:f2:
5a:d4:bf:a3:3b:76:2a:e4:24:9c:55:5f:e8:d5:91:29:75:ff:
98:1c:5d:f7:36:7d:8a:9c:be:3c:52:5d:27:66:33:56:b7:8c:
b8:3f:2b:cd:a9:d2:0c:08:2c:77:df:ba:2d:4f:88:ba:50:6c:
b8:31:15:7f:82:d0:36:cb:5b:61:58:b5:e9:83:ec:1e:ee:fd:
28:f5:c7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:43:44 2026 by rpki-client