Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
File: KMaADXS8QQW0DnfqCFugJtvuw18.mft (raw, json)
Hash identifier: DYO7fHKcCVzog9fnvaBqARwE8PtLZdkgxeHLNzJ/7Ns=
Subject key identifier: B3:1E:48:8F:86:90:C3:BF:81:ED:BE:96:E0:5D:1C:9D:E5:41:81:77
Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
Certificate issuer: /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Certificate serial: 019E1EA33DA1BC1A8BBC6E89516F7817C7E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
Manifest number: 1348
Signing time: Wed 13 May 2026 00:01:15 +0000
Manifest this update: Wed 13 May 2026 00:01:15 +0000
Manifest next update: Thu 14 May 2026 00:01:15 +0000
Files and hashes: 1: KMaADXS8QQW0DnfqCFugJtvuw18.crl (hash: AWGLFeOoM2h3v5yl3b0LXiszgQSpX24GGp1I4BeW4jI=)
2: etmHXHHHLtcS91uDngOtEabkiBg.roa (hash: RSzmWtizgbjdSjkpsRPkAgQwWXoqPbD9+Fp30azxzoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:3d:a1:bc:1a:8b:bc:6e:89:51:6f:78:17:c7:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Validity
Not Before: May 13 00:01:15 2026 GMT
Not After : May 14 00:01:15 2026 GMT
Subject: CN=b31e488f8690c3bf81edbe96e05d1c9de5418177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:18:f1:32:7d:52:78:9f:bb:38:40:a8:71:91:
02:7d:85:dd:3f:f7:4a:40:76:2f:21:0f:71:dd:1d:
65:50:b0:79:ee:d3:f0:a8:58:52:52:53:90:b9:85:
6f:53:67:eb:c8:4b:d3:b5:63:b9:36:e9:58:af:21:
bd:2c:1d:9e:92:d2:bd:24:62:f8:f4:9a:95:33:3f:
ab:55:ab:91:c0:3f:f8:d1:a0:56:b9:de:b0:38:34:
d0:73:a5:b3:84:8c:a5:7e:ee:a1:de:e4:06:40:e4:
c5:39:14:f5:84:80:80:c7:40:f3:02:70:b7:b6:eb:
a7:df:08:f1:ba:89:b5:3b:00:ad:8e:90:1b:68:6a:
2b:f9:48:f0:29:53:3f:98:43:93:a2:66:a5:50:2f:
30:d0:57:13:fc:92:2f:80:ea:4e:48:38:a4:4d:5e:
59:f4:af:7a:4b:3f:f2:81:a3:3a:42:77:ac:47:3b:
88:35:a0:bb:b2:79:61:cd:83:3e:98:23:e4:3d:8a:
9e:b5:ad:fd:4e:a7:91:3d:0d:68:34:2f:48:a1:0a:
63:6b:5b:34:e1:f8:00:2b:05:39:1d:1f:ec:5a:0d:
9d:b5:5b:8a:5e:d9:bc:28:91:e8:e2:82:83:bd:35:
4e:71:e0:84:c2:31:a6:0c:33:e2:35:8a:85:3a:7b:
07:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1E:48:8F:86:90:C3:BF:81:ED:BE:96:E0:5D:1C:9D:E5:41:81:77
X509v3 Authority Key Identifier:
keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d0:af:61:83:f8:ee:5f:1d:12:a2:52:60:25:bb:38:59:05:
68:73:b3:d9:f9:64:a5:96:66:39:60:e6:2a:fd:3b:f4:cd:f6:
ea:a3:bb:09:c5:da:ee:ef:e1:b7:8d:63:cb:82:bb:1e:8b:52:
36:8d:09:f0:71:f0:42:fa:24:b6:e7:19:33:c9:a7:02:bc:55:
27:f7:be:0e:7c:d7:e5:24:7f:df:28:64:44:bb:e5:a6:8d:e1:
c9:bf:f0:b9:6f:0b:24:1e:dd:3f:3e:e2:51:a2:60:a7:69:4b:
12:f1:9a:06:2e:8f:b6:96:b0:8b:6b:55:6c:88:2e:df:35:c8:
62:8d:60:d0:6d:fc:d7:89:06:66:cd:f1:d2:71:75:36:40:cb:
6d:9d:cd:17:25:db:07:83:49:1a:5f:02:f8:ca:26:a8:2e:fa:
2c:a5:15:1d:99:cd:6e:54:3e:03:e7:a3:9c:4d:a0:a8:ac:c3:
e4:d9:9c:21:15:6c:ad:a8:81:73:9e:91:7d:d5:85:e2:98:3c:
32:b7:c3:47:78:a8:84:0c:d3:c1:cd:33:bc:b1:4a:15:25:23:
ef:f5:9b:65:67:d0:68:10:e2:d4:4a:43:14:e7:73:0f:44:b0:
11:59:46:eb:34:43:5d:a2:60:95:03:c9:74:d7:80:d0:e8:41:
6d:39:67:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:23:26 2026 by rpki-client