Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
File: KMaADXS8QQW0DnfqCFugJtvuw18.mft (raw, json)
Hash identifier: 1fXtqbEauGaekbvviDwi/dKWQ/OJapnJnqWv226Wpo8=
Subject key identifier: FA:F6:75:B3:65:DD:3E:89:87:C7:51:E7:0C:B7:48:49:C5:2C:76:AB
Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
Certificate issuer: /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Certificate serial: 019D2703CB8015DB3A7FB784942E31E54651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
Manifest number: 12C6
Signing time: Wed 25 Mar 2026 22:00:53 +0000
Manifest this update: Wed 25 Mar 2026 22:00:53 +0000
Manifest next update: Thu 26 Mar 2026 22:00:53 +0000
Files and hashes: 1: KMaADXS8QQW0DnfqCFugJtvuw18.crl (hash: ktBSsXM2rh7c5oleXcjPGrjC25AKQhCrzOcNv+RrLM8=)
2: QSEA24W-jJh0kwyMga3SDhfm0mU.roa (hash: oB/S9QQ/OX6lPuAGVG5qR2duSEJnIXuFNYHPn1v0/Ps=)
3: qU2Uxsa9OcphCZGNqnBFa2jyqCY.roa (hash: aLe2FX6wmJtGZLPPBo86FvVeGPLBBM9MJiBEGdjzEKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:cb:80:15:db:3a:7f:b7:84:94:2e:31:e5:46:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Validity
Not Before: Mar 25 22:00:53 2026 GMT
Not After : Mar 26 22:00:53 2026 GMT
Subject: CN=faf675b365dd3e8987c751e70cb74849c52c76ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:05:63:4f:e3:bf:8c:04:87:76:e5:6b:79:
84:e6:55:0c:da:c1:1d:cf:e2:46:49:87:c7:dd:f9:
70:2c:bb:95:bf:d8:88:fa:95:65:66:9b:fc:4c:58:
c8:7f:15:ce:37:59:64:0b:a3:6c:4c:d0:3f:38:ed:
5f:46:b4:c7:0f:1b:2d:a9:17:a3:31:56:90:0b:27:
fa:eb:15:47:e2:67:01:ed:20:e7:8e:81:b6:f3:d8:
6d:d7:a3:91:09:78:b9:f5:ff:c0:34:bc:67:92:08:
da:d0:7c:8e:f6:2c:8e:26:c0:51:6c:10:33:6c:b4:
a4:53:5b:1e:b5:15:6a:a5:28:20:10:48:4c:eb:1b:
f9:b4:67:7a:98:b9:14:f4:ce:0f:4a:99:df:f7:8f:
38:52:7f:bf:0d:d7:92:b3:87:79:df:2d:42:05:48:
e6:ea:2b:a2:53:9f:fb:7e:1d:4e:51:e4:c8:5a:52:
20:16:bc:2a:62:32:26:2d:d0:da:e8:07:6b:e3:0b:
b1:e0:3c:8d:7e:f7:20:c3:bb:c6:14:76:ad:c0:dd:
21:67:e2:b6:c1:1b:a2:98:60:0c:4a:07:81:6c:b1:
cd:12:f5:35:52:0d:81:94:ff:3b:68:18:c5:7e:06:
4b:9c:e0:8d:1e:18:61:cf:ce:50:7f:e0:4a:27:3f:
f0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F6:75:B3:65:DD:3E:89:87:C7:51:E7:0C:B7:48:49:C5:2C:76:AB
X509v3 Authority Key Identifier:
keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:dc:9c:87:25:7f:8c:f5:31:c1:b2:92:d0:e5:9a:7a:ad:68:
3b:e0:2a:f6:5b:aa:f6:6b:8b:38:73:91:c4:c1:9b:f6:e9:f9:
26:c3:de:4c:36:e2:19:ac:66:73:d9:39:9e:bd:64:91:77:45:
4d:32:d4:f2:38:d3:86:da:19:16:e4:9d:24:da:06:24:e4:26:
78:ce:fd:66:be:11:bf:0d:d0:f3:9d:48:eb:4f:48:e6:22:bd:
ef:f9:38:16:01:09:bd:a7:7e:63:ec:9e:f1:cd:7f:75:e1:a5:
1d:07:b0:8d:a6:7b:81:c5:5a:74:2c:16:43:5f:b0:89:8f:52:
d9:56:e0:aa:5e:18:62:54:d6:dd:a7:93:34:5e:e9:4a:16:5e:
62:a0:a1:2d:2f:0f:0a:37:a2:82:ad:03:7d:c8:d8:2e:10:6e:
dc:11:ad:34:2c:fb:15:5b:99:58:e4:52:db:be:32:e2:83:74:
97:69:28:4c:77:be:d3:3c:64:7f:e9:ee:e4:a3:ae:c7:c2:8e:
98:08:76:98:67:b7:52:39:1d:44:ef:1c:84:a5:2f:3f:20:9e:
80:16:c9:f2:73:d3:b9:ac:24:e5:b2:3f:ea:0c:fe:8d:2d:7f:
ba:b3:1b:70:3b:20:72:9c:b2:1d:f7:a6:e5:c6:5d:be:11:d9:
42:3e:a0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:18:54 2026 by rpki-client