Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
File: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft (raw, json)
Hash identifier: HnOt8x0ujhyqSITFVfR8aq5dcpJgNZ3sY8U57r/25hA=
Subject key identifier: 07:A9:ED:20:D2:C4:DE:5E:2D:24:2F:16:EB:E2:7D:6E:16:E1:B4:AF
Authority key identifier: 28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
Certificate issuer: /CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Certificate serial: 019D29CE6BBC5D899282F13CA4F35C3833E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
Manifest number: 162E
Signing time: Thu 26 Mar 2026 11:01:26 +0000
Manifest this update: Thu 26 Mar 2026 11:01:26 +0000
Manifest next update: Fri 27 Mar 2026 11:01:26 +0000
Files and hashes: 1: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl (hash: T+UYWlTviyt8HEhPX4+ZX9hvaHbmd/OBdqPc/BbmsK4=)
2: jJO0sxZTcZ6JEt0Fk0adQwE8ax8.roa (hash: zoeDpAsCDg15ZqeXjdLWt/zPvQ+0f3jQu+TzTt0DwhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:6b:bc:5d:89:92:82:f1:3c:a4:f3:5c:38:33:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Validity
Not Before: Mar 26 11:01:26 2026 GMT
Not After : Mar 27 11:01:26 2026 GMT
Subject: CN=07a9ed20d2c4de5e2d242f16ebe27d6e16e1b4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:23:de:a5:63:30:81:b4:27:b7:50:84:d4:fa:
32:9f:07:e3:b0:76:ed:ac:f5:d5:51:1f:0a:36:e3:
43:28:ba:fd:05:0f:d5:cb:dc:0c:a0:00:ea:f5:05:
a9:98:20:1e:58:93:c9:ae:86:a0:f5:42:cb:bc:99:
0d:5e:07:91:89:10:95:bf:b9:75:ab:47:79:b5:13:
93:17:36:6d:89:d2:cd:39:2d:74:1d:60:76:75:c9:
e4:3e:e5:b4:38:42:21:bb:7e:30:33:2f:2c:a9:ac:
34:07:bd:15:c5:19:34:91:15:bb:9a:90:12:69:86:
fd:9a:64:fb:52:b3:ed:ce:d3:6f:4f:39:d6:65:f5:
cd:15:2e:3a:c5:3e:32:3c:e1:7d:07:ff:68:d8:df:
71:36:0e:19:0b:71:3b:a0:6c:5e:f9:f4:d5:4d:bd:
0d:2c:0c:43:f7:04:2f:38:05:9f:d6:64:eb:1d:94:
d7:4c:90:ad:81:37:29:57:69:ac:e4:a0:a8:8b:34:
1d:09:dd:b3:36:58:9f:f9:bd:13:aa:e3:da:08:0f:
23:ed:e4:a6:33:92:5f:a9:4a:a4:1f:38:a0:a6:8c:
ec:16:0b:56:b0:ea:cf:8e:e2:d2:69:01:22:32:07:
c5:69:1e:f1:4e:a5:cd:bf:44:be:b4:fa:8d:5a:c0:
06:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A9:ED:20:D2:C4:DE:5E:2D:24:2F:16:EB:E2:7D:6E:16:E1:B4:AF
X509v3 Authority Key Identifier:
keyid:28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:74:87:b5:8e:d1:d2:76:fd:32:66:ba:14:11:44:59:0f:8e:
b1:5e:6c:c5:28:0c:14:fd:34:a5:9b:5b:33:69:83:bd:86:9c:
21:8f:14:57:db:f8:9f:fb:89:90:b4:f7:6c:ce:02:c4:c4:d2:
40:72:e9:dc:2f:c5:f5:4f:6d:23:3e:5b:c0:eb:aa:95:df:05:
0e:8f:76:9b:3c:f2:25:55:79:70:5f:af:79:9d:ce:59:f5:61:
74:24:ea:49:76:24:fa:07:e1:c1:6a:36:1b:54:45:4c:a9:e9:
ef:87:92:44:95:95:cb:23:b5:ee:b7:2c:a3:ba:4b:d6:2c:c5:
3c:e2:3a:27:56:33:9b:2a:30:b3:72:cd:a0:ca:89:e7:ad:a5:
fb:51:a0:42:29:a6:e7:5c:b0:fa:e6:bd:8e:cf:68:b6:5f:38:
9f:4f:6d:1c:03:8d:09:2a:c3:4c:73:fc:49:9a:11:ad:d4:1e:
97:4c:b6:44:6a:0c:8f:0c:75:61:1f:2f:88:07:c3:07:26:83:
d7:68:a8:d9:d5:7d:61:9b:6b:93:3e:8b:10:f7:95:7e:eb:8f:
7f:24:e7:43:76:bf:e3:87:8c:33:26:23:2b:c5:c2:1c:5b:e4:
2b:f1:3b:07:0d:10:d9:1c:7f:46:21:a2:2a:1b:4e:1b:72:a8:
02:74:7d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:17:48 2026 by rpki-client