Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
File: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft (raw, json)
Hash identifier: oQOIz1OhcNOjCMdoSUsypWxaNpp2LyJ7IiE4til5FwY=
Subject key identifier: C2:A6:DD:10:98:73:61:C8:78:11:16:7F:1F:EB:A1:4F:01:E3:4F:BA
Authority key identifier: 28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
Certificate issuer: /CN=280c3860fb96a823971e2ee62f8abff093861604
Certificate serial: 019D2816796ECB59F26201D8C3623ED784D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
Manifest number: 04F4
Signing time: Thu 26 Mar 2026 03:00:54 +0000
Manifest this update: Thu 26 Mar 2026 03:00:54 +0000
Manifest next update: Fri 27 Mar 2026 03:00:54 +0000
Files and hashes: 1: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl (hash: wpOQe9urhCqrs3FU6xrGxj2dQdLSC2fpeIpAsB/LUz0=)
2: h61hfdjD2qOmBnWHJGxzIB8c3I4.roa (hash: eeYDdA0+UQRYGPWmQqmukWqDEBNnCI6wRQqNfeNfgqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:79:6e:cb:59:f2:62:01:d8:c3:62:3e:d7:84:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280c3860fb96a823971e2ee62f8abff093861604
Validity
Not Before: Mar 26 03:00:54 2026 GMT
Not After : Mar 27 03:00:54 2026 GMT
Subject: CN=c2a6dd10987361c87811167f1feba14f01e34fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c7:28:5d:08:6a:d9:9c:60:53:cb:d6:27:5b:
9f:d9:78:93:26:e4:11:8e:9b:3f:9d:f5:f3:07:60:
08:3a:40:fb:b6:11:70:81:e8:02:ac:4c:8e:6d:35:
ef:54:1a:32:4c:23:2d:84:3a:ee:10:45:69:87:92:
46:8b:56:11:de:d2:22:ea:94:56:a8:99:57:26:56:
e7:a7:f2:16:51:4a:c4:45:6b:96:e6:de:d1:78:52:
b3:a1:20:24:61:d3:c2:29:a8:fa:e0:ef:a8:a4:c0:
35:15:71:fe:b5:0f:d3:ce:72:0d:b6:f6:cc:4e:09:
53:d0:67:09:1f:29:99:02:23:7f:46:3f:bc:07:a4:
31:37:87:9d:a3:29:07:9f:ba:23:61:8f:b6:49:a1:
61:63:1b:b4:22:07:bf:1b:b3:8f:fe:1c:61:1c:f1:
9b:e9:2f:93:a8:1e:d3:7e:5a:64:b5:0f:4b:43:4f:
02:41:1c:b2:5c:a5:18:f0:22:9a:d9:27:81:9a:0d:
4c:10:fe:bf:47:5a:3f:c4:0d:7e:14:2c:ca:2c:ba:
17:34:d9:ac:d1:55:5f:f9:1b:0f:88:7e:3f:23:49:
a2:1f:2a:29:92:f4:82:e3:c5:f4:d9:d4:2c:6a:03:
5b:19:a2:9c:d4:e8:79:2c:a0:33:c5:ca:9c:71:8f:
fe:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A6:DD:10:98:73:61:C8:78:11:16:7F:1F:EB:A1:4F:01:E3:4F:BA
X509v3 Authority Key Identifier:
keyid:28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:be:12:6a:58:25:28:c6:d0:62:39:ef:59:2c:f8:69:bd:c3:
6b:77:1b:14:f2:ef:01:1e:55:46:05:98:c2:9b:e9:89:fc:75:
33:97:03:af:28:ec:50:83:fe:d4:a6:e0:f9:89:dd:67:8a:7e:
8e:e6:c7:de:4e:19:9f:cc:62:4a:37:2f:da:a8:98:9a:8e:6b:
6e:93:ab:b5:9a:f3:9b:e6:62:3f:94:73:4e:46:f1:c2:52:00:
33:c3:62:42:6a:29:e6:e1:63:b2:94:7a:76:0d:32:6b:e7:9e:
ff:0e:5a:af:c8:62:bb:25:e2:ff:4d:b8:27:18:d8:db:3d:c7:
69:91:bd:2f:8c:3e:f6:1d:22:70:f9:69:26:f6:02:14:94:d1:
c7:1a:e7:ce:ed:85:60:bc:c1:21:b6:6f:79:29:f2:57:b2:05:
27:c9:0b:be:91:7b:47:f7:b3:04:59:fb:04:b2:f7:78:f9:ba:
61:a9:10:77:7e:d6:e5:db:33:53:67:8f:04:db:e1:50:5a:c7:
4e:40:e3:8b:dd:69:c8:d9:d3:34:6c:1e:37:36:f3:72:0f:50:
44:21:cc:4e:e6:25:f8:fc:7d:5d:a1:41:48:0c:2a:0d:26:37:
3e:1d:f8:0a:85:44:57:70:66:c1:d8:31:85:a4:63:3c:19:f4:
2a:f8:47:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:37:54 2026 by rpki-client