Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
File: KMID1l3y1lvbzzyINELdq1WjvN4.mft (raw, json)
Hash identifier: sR44T64f7WJ1Ym1xaxFMQxxB3oEbBcM+Qx+EaBqBKR8=
Subject key identifier: 7C:4A:52:ED:A3:69:0C:10:07:07:1E:55:63:59:57:34:4C:A9:39:21
Authority key identifier: 28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
Certificate issuer: /CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Certificate serial: 01A10E83611E20C0FF91A591F7BC57743B0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
Manifest number: 107A
Signing time: Tue 06 Oct 2026 00:00:53 +0000
Manifest this update: Tue 06 Oct 2026 00:00:53 +0000
Manifest next update: Wed 07 Oct 2026 00:00:53 +0000
Files and hashes: 1: 4Okejz2k1ubGfI-GRgB_ARKBmuk.roa (hash: wHN9epTREmpbGi1iOO1PMq2WQBeGFf6WjNTcLZ9jeLg=)
2: KMID1l3y1lvbzzyINELdq1WjvN4.crl (hash: oGGpAh8GaXTAfZG5wfyw7ZwVGyIMQl8GUYpfb5t+xHs=)
3: PcKBEnG4Fc83PTLXnIgOvRcy3V4.roa (hash: dksZAzhosBbHaXLsuDmV40VTdGY6aq3NK9xY13PmQvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 20:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0e:83:61:1e:20:c0:ff:91:a5:91:f7:bc:57:74:3b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Validity
Not Before: Oct 6 00:00:53 2026 GMT
Not After : Oct 7 00:00:53 2026 GMT
Subject: CN=7c4a52eda3690c1007071e55635957344ca93921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:a1:0e:fb:9b:b1:52:e6:60:e8:af:ca:99:
2c:8a:72:09:2b:69:68:aa:9f:ad:ca:f9:e6:01:32:
1b:78:ae:6e:89:ed:79:78:fe:14:50:66:ce:3b:d7:
64:7e:d6:fe:62:8f:c6:5c:d9:a3:5a:0e:0e:f3:12:
91:77:e7:45:ea:f9:53:76:04:f7:24:0e:90:6c:14:
f3:86:2f:7f:5e:da:04:f6:64:a3:1e:18:fb:71:f0:
d9:0a:61:84:99:f4:35:ad:4c:b7:ce:0c:0b:57:75:
0e:44:83:b1:7e:6f:ac:74:64:59:b3:c6:9f:2a:0c:
8f:92:c6:8d:34:ae:8c:22:b0:21:c5:60:d9:b5:14:
f4:d4:de:be:01:52:c0:08:77:30:4b:44:0b:26:60:
12:c2:cf:52:99:83:0d:09:84:77:ed:25:71:76:c3:
08:e9:b2:f9:8d:34:32:f3:78:77:ed:72:c9:52:ae:
22:33:6b:f1:f7:6d:fd:c0:00:9a:a7:67:bd:6e:36:
75:3b:da:a4:5f:31:ed:ce:7f:ec:3c:6d:bf:4b:b1:
d7:8d:ec:03:77:f7:86:70:31:a7:98:9b:b2:8c:7b:
bc:6e:7d:f7:e7:bf:5f:3b:30:2e:15:44:60:a6:76:
fb:32:c1:95:f1:2b:18:15:cf:d1:e6:eb:db:f4:dd:
23:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4A:52:ED:A3:69:0C:10:07:07:1E:55:63:59:57:34:4C:A9:39:21
X509v3 Authority Key Identifier:
keyid:28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:37:4e:36:d2:6f:2b:82:99:22:3c:a2:65:25:7c:3c:b1:e1:
a4:d6:09:f1:e4:c2:b9:8d:31:24:f0:d6:eb:b5:9f:26:a3:ba:
47:be:3e:c3:e1:5d:e4:00:e0:ef:a6:8f:73:f8:6b:72:8a:ab:
b2:ac:86:0e:d6:54:a8:eb:9a:8d:7e:c6:30:13:3b:d2:c2:8d:
22:20:c1:6a:82:f2:98:63:30:e9:1c:60:62:a8:35:82:82:b6:
ed:7e:36:c4:e7:46:f6:04:04:72:b5:93:70:65:5d:48:dc:6f:
fb:df:55:73:36:5a:a2:23:f1:d2:96:a6:61:f1:4f:a8:3c:74:
4b:f5:09:c0:26:d5:d4:47:c8:49:b4:3e:c1:38:c0:8e:e4:8d:
79:92:15:60:f3:0e:da:2d:34:cd:18:42:32:fe:a3:33:56:21:
df:32:54:17:00:2f:e0:9d:b9:25:be:ba:48:65:3f:b5:64:56:
84:a0:2d:e1:db:aa:80:28:cd:95:df:b6:22:da:64:26:da:60:
7a:a8:14:6c:59:f7:f4:38:7e:92:2a:68:6b:5b:03:a8:1d:7f:
6d:88:06:09:a9:e9:b2:41:2f:05:ef:0a:53:fc:b2:32:7a:03:
73:79:70:1b:5d:1f:c2:2a:5d:68:55:7e:22:2f:9f:c6:36:41:
e7:22:73:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEOg2EeIMD/kaWR97xXdDsNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YzIwM2Q2NWRmMmQ2NWJkYmNmM2M4ODM0NDJkZGFiNTVh
M2JjZGUwHhcNMjYxMDA2MDAwMDUzWhcNMjYxMDA3MDAwMDUzWjAzMTEwLwYDVQQD
Eyg3YzRhNTJlZGEzNjkwYzEwMDcwNzFlNTU2MzU5NTczNDRjYTkzOTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeihDvubsVLmYOivypksinIJK2lo
qp+tyvnmATIbeK5uie15eP4UUGbOO9dkftb+Yo/GXNmjWg4O8xKRd+dF6vlTdgT3
JA6QbBTzhi9/XtoE9mSjHhj7cfDZCmGEmfQ1rUy3zgwLV3UORIOxfm+sdGRZs8af
KgyPksaNNK6MIrAhxWDZtRT01N6+AVLACHcwS0QLJmASws9SmYMNCYR37SVxdsMI
6bL5jTQy83h37XLJUq4iM2vx9239wACap2e9bjZ1O9qkXzHtzn/sPG2/S7HXjewD
d/eGcDGnmJuyjHu8bn33579fOzAuFURgpnb7MsGV8SsYFc/R5uvb9N0jdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxKUu2jaQwQBwceVWNZVzRMqTkhMB8GA1UdIwQY
MBaAFCjCA9Zd8tZb2888iDRC3atVo7zeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS01JRDFsM3kxbHZienp5SU5FTGRxMVdqdk40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80OWMzZTEtMWY3Zi00ZTU4LWIwMmIt
ODg1OTIwNDMwMjZmLzEvS01JRDFsM3kxbHZienp5SU5FTGRxMVdqdk40Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS80OWMzZTEtMWY3Zi00ZTU4LWIwMmItODg1OTIwNDMwMjZm
LzEvS01JRDFsM3kxbHZienp5SU5FTGRxMVdqdk40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANjdONtJv
K4KZIjyiZSV8PLHhpNYJ8eTCuY0xJPDW67WfJqO6R74+w+Fd5ADg76aPc/hrcoqr
sqyGDtZUqOuajX7GMBM70sKNIiDBaoLymGMw6RxgYqg1goK27X42xOdG9gQEcrWT
cGVdSNxv+99VczZaoiPx0pamYfFPqDx0S/UJwCbV1EfISbQ+wTjAjuSNeZIVYPMO
2i00zRhCMv6jM1Yh3zJUFwAv4J25Jb66SGU/tWRWhKAt4duqgCjNld+2ItpkJtpg
eqgUbFn39Dh+kipoa1sDqB1/bYgGCanpskEvBe8KU/yyMnoDc3lwG10fwipdaFV+
Ii+fxjZB5yJzPA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 04:09:39 2026 by rpki-client