Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
File: KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft (raw, json)
Hash identifier: WswWuxFoVagOjOYS80sENsgkXJMBjDX42DvB8lHpph0=
Subject key identifier: 81:36:F6:B4:36:06:FF:E3:C9:A4:E4:A1:4E:57:5B:02:F2:46:61:D1
Authority key identifier: 28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
Certificate issuer: /CN=28fa456d1c23678621954ffbf493a323de2c4484
Certificate serial: 019D28F29C090E633D8BD7E5F831EA5EBD2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
Manifest number: 0DC2
Signing time: Thu 26 Mar 2026 07:01:21 +0000
Manifest this update: Thu 26 Mar 2026 07:01:21 +0000
Manifest next update: Fri 27 Mar 2026 07:01:21 +0000
Files and hashes: 1: KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl (hash: FWPq0QnyyoyRNphiGeMzbnXyo7tM7HqExEn3NQU+CDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:9c:09:0e:63:3d:8b:d7:e5:f8:31:ea:5e:bd:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fa456d1c23678621954ffbf493a323de2c4484
Validity
Not Before: Mar 26 07:01:21 2026 GMT
Not After : Mar 27 07:01:21 2026 GMT
Subject: CN=8136f6b43606ffe3c9a4e4a14e575b02f24661d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:f7:10:cd:60:a8:2d:d9:0b:a6:65:f9:b9:
09:db:47:1a:e1:3a:d3:0b:79:42:22:b0:c6:da:23:
90:d6:3a:79:38:80:28:95:c1:f2:40:b3:5f:23:fa:
24:2d:6b:4d:74:f6:fd:8a:a2:9c:52:5e:e3:c9:79:
dc:92:ca:40:f4:a0:b2:60:87:c6:45:49:b1:d1:57:
a8:3d:8a:15:0a:62:60:9e:56:36:49:f1:d9:61:8b:
f6:e4:bb:7d:9e:d5:8a:14:50:95:ad:d4:31:4b:cc:
5d:3d:09:57:95:e2:fd:dd:8f:20:bc:0a:b7:65:e2:
97:53:fb:ac:ee:ff:6e:04:ea:9e:6a:71:eb:11:52:
35:e9:8e:7d:93:6c:6f:04:86:7e:36:e3:74:82:1f:
37:e7:82:8c:b7:1c:cb:cd:c4:d7:26:c2:d1:44:75:
ef:66:d2:a4:05:11:37:c7:e1:29:83:91:c7:46:5c:
9c:cd:8f:05:2c:d2:80:7d:8f:93:dc:13:bf:6a:34:
4b:ef:02:13:c2:98:93:df:52:6e:63:44:f7:bb:85:
8b:ea:6f:8f:4c:7a:a6:57:39:ef:f3:23:ad:ec:e8:
2d:0c:12:55:27:96:1a:cd:b9:80:e2:33:b5:d4:f6:
04:aa:ae:86:16:8d:9d:22:29:7d:2e:07:a6:32:31:
89:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:36:F6:B4:36:06:FF:E3:C9:A4:E4:A1:4E:57:5B:02:F2:46:61:D1
X509v3 Authority Key Identifier:
keyid:28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:31:23:22:57:12:3a:09:87:1f:a3:d6:dc:2b:0e:5f:83:03:
8d:ca:44:28:ce:25:d9:df:27:76:4a:e0:dc:97:cf:92:e0:01:
7b:5d:74:16:2f:0b:1a:5d:47:e5:a9:a6:4a:15:52:d7:3e:96:
51:1c:ac:9d:29:4e:3d:d2:07:40:c3:0e:99:0d:b6:5a:90:77:
1d:26:9c:60:6f:95:cd:d2:66:c9:0d:01:10:24:d1:d0:b7:77:
39:e3:86:e0:af:51:7d:86:97:26:fc:d0:c8:ae:63:3d:83:22:
83:fa:ec:b6:94:cd:86:a5:f9:53:a1:55:5d:5f:56:45:d7:30:
66:e3:53:70:3a:03:19:e4:38:54:a5:c9:5d:72:1e:e8:1a:f9:
b8:3e:4e:43:e0:52:4e:f1:6a:cb:6f:fb:7a:74:27:46:7a:de:
ee:71:32:b1:5b:ec:92:17:d8:08:c9:a2:a3:89:ae:20:33:d7:
69:69:2e:e5:75:22:b2:0e:3d:17:90:8b:d5:c4:51:d6:9a:3e:
76:97:4e:db:17:85:ea:e4:e1:5c:83:f8:5c:cb:f8:8d:46:66:
77:bf:ff:b5:bf:74:f6:e9:eb:a6:8b:1c:11:21:21:78:1b:cd:
20:2c:6c:2b:c7:9f:43:b7:cb:d6:e6:b0:3f:5f:25:96:b3:02:
d1:2b:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:45 2026 by rpki-client