Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
File: KMID1l3y1lvbzzyINELdq1WjvN4.mft (raw, json)
Hash identifier: 5sNg4VqDQpnxhnZ+8qo6hEetTC2f1B2fHjkfrTRkKfc=
Subject key identifier: 48:15:5A:76:6C:0C:21:AF:02:02:A6:08:08:7A:87:89:C7:54:61:A0
Authority key identifier: 28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
Certificate issuer: /CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Certificate serial: 019F95EE029B304E6130EF4F61DC79C6A26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
Manifest number: 0FB7
Signing time: Fri 24 Jul 2026 21:00:31 +0000
Manifest this update: Fri 24 Jul 2026 21:00:31 +0000
Manifest next update: Sat 25 Jul 2026 21:00:31 +0000
Files and hashes: 1: 4Okejz2k1ubGfI-GRgB_ARKBmuk.roa (hash: wHN9epTREmpbGi1iOO1PMq2WQBeGFf6WjNTcLZ9jeLg=)
2: KMID1l3y1lvbzzyINELdq1WjvN4.crl (hash: JAftboTAs7Hk6u9+QY9oBJ17EcMpR7eeonaDFaNwWSg=)
3: PcKBEnG4Fc83PTLXnIgOvRcy3V4.roa (hash: dksZAzhosBbHaXLsuDmV40VTdGY6aq3NK9xY13PmQvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:ee:02:9b:30:4e:61:30:ef:4f:61:dc:79:c6:a2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Validity
Not Before: Jul 24 21:00:31 2026 GMT
Not After : Jul 25 21:00:31 2026 GMT
Subject: CN=48155a766c0c21af0202a608087a8789c75461a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:b4:cb:98:81:0c:00:1f:cd:76:07:7f:d5:
cf:20:66:f6:3f:8e:59:a9:a1:bb:2e:96:c2:a2:2b:
0f:65:c0:b4:81:37:74:4d:09:b9:67:90:4e:2f:e1:
36:51:d4:c2:83:64:2c:e4:12:9b:13:d8:c0:14:63:
86:26:45:f7:34:56:2f:d2:14:0d:81:0f:f5:34:65:
df:95:b6:6e:3e:ea:37:05:a5:c2:df:4b:2c:c4:97:
41:2d:63:4d:6c:8f:66:4c:99:6d:7e:59:4c:1e:2f:
35:b2:f2:00:1e:7b:67:64:b8:77:d7:e9:7a:e3:1f:
40:be:49:49:01:45:f2:0b:5b:82:bf:e8:fc:0f:85:
64:e1:4c:20:df:a6:d4:e5:0b:00:18:c8:8f:e8:06:
40:f8:83:b1:78:4c:12:14:f6:4e:93:63:92:ed:d9:
51:42:26:f9:1e:3d:68:6b:6f:bd:ea:d6:a8:11:68:
8f:d5:40:d1:9e:74:ad:91:10:91:b2:ef:57:f6:3b:
ad:c4:30:79:86:4f:c2:3c:e0:4c:33:28:52:00:48:
29:c2:3a:61:f7:95:55:5b:05:b4:60:39:ff:6f:28:
39:2a:f7:3e:7e:98:00:3c:1b:4c:11:e4:25:32:95:
3d:8f:c0:82:67:28:c1:32:a2:d5:20:f6:05:c1:72:
ae:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:15:5A:76:6C:0C:21:AF:02:02:A6:08:08:7A:87:89:C7:54:61:A0
X509v3 Authority Key Identifier:
keyid:28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c6:ed:9f:15:d6:ec:9c:d5:3d:6f:09:e7:8a:ea:9e:8c:81:
91:d7:df:c6:65:2b:d0:48:e1:c5:45:f2:f7:50:31:9d:22:b9:
b7:bf:a5:59:ea:fc:29:62:02:ca:54:dd:34:54:15:dd:b6:08:
7b:2d:9f:6c:a1:a3:19:f8:80:a4:4b:55:02:b4:cd:6b:80:75:
6f:e7:27:f6:bb:22:47:4f:3e:4d:17:70:41:ea:e5:c0:39:6e:
71:4d:c0:dc:68:c2:95:22:8a:61:a0:47:6d:8d:e1:83:97:e8:
a0:cd:3d:76:5a:f5:0f:b4:cb:5e:a3:bc:6f:c9:8a:71:f9:a7:
d1:f5:8b:64:07:ad:b1:48:dc:0d:7f:a4:dc:d3:b7:41:5b:c0:
f1:be:bc:61:2e:79:7e:2b:4e:5d:0f:69:b0:5a:8e:4d:aa:22:
37:6d:21:90:86:24:f9:d3:d5:c9:c7:8d:c9:a1:22:c9:2b:dd:
5a:a0:d2:be:32:47:d1:7c:4d:bd:f9:7d:7a:8b:c4:b5:52:b5:
40:c7:ff:f6:46:64:32:6e:67:c7:97:4f:57:bb:2c:a0:78:69:
5d:ef:0e:d9:e8:ce:ae:ad:46:bb:60:20:f5:be:92:b0:ed:7b:
29:e3:55:d2:de:7f:98:e6:21:80:0a:9d:a8:6c:87:3f:09:9f:
78:30:84:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:50:05 2026 by rpki-client