Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
File: KJkuu4Pri3Oioh5bAz296x308j0.mft (raw, json)
Hash identifier: 5frjqGQOb6SdtSh12I5xumQ9temNY6ZUcAME1Avsi5Q=
Subject key identifier: 7B:34:5D:7E:64:C8:0E:12:F5:AE:8D:C1:8A:56:92:E8:5A:16:9C:6F
Authority key identifier: 28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
Certificate issuer: /CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Certificate serial: 019CABD952AA9442EF7F0221AB1F19474F89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
Manifest number: 0C26
Signing time: Mon 02 Mar 2026 00:01:12 +0000
Manifest this update: Mon 02 Mar 2026 00:01:12 +0000
Manifest next update: Tue 03 Mar 2026 00:01:12 +0000
Files and hashes: 1: HVowXrdOWYwIxGgjLmeAVFsb2JY.roa (hash: hYRe+VklsUZJL10nJgEreFr/d/IK6lzb5yYEfqhUAdI=)
2: KJkuu4Pri3Oioh5bAz296x308j0.crl (hash: kNkXy9ZjMNbYZAhyaEFfM1WVU1bgbcTcztIpvxkJu8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:52:aa:94:42:ef:7f:02:21:ab:1f:19:47:4f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Validity
Not Before: Mar 2 00:01:12 2026 GMT
Not After : Mar 3 00:01:12 2026 GMT
Subject: CN=7b345d7e64c80e12f5ae8dc18a5692e85a169c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c9:ce:9d:27:2e:f5:b5:c0:b8:29:1b:82:85:
71:c7:c5:65:f8:c7:c8:35:7c:55:80:4a:92:80:67:
f3:ae:4a:f5:5a:06:6c:9a:08:87:5b:ff:d8:18:3d:
23:3b:0b:4a:eb:07:28:7a:b9:64:b2:0c:6c:7e:19:
e0:f9:76:72:f0:b8:b0:8a:f3:65:4d:8b:35:3b:34:
c6:08:c7:5a:1c:98:5c:b9:c0:00:d8:ec:51:72:53:
47:a7:a4:9a:04:25:69:da:2a:e2:41:ec:0f:69:2e:
c3:61:bf:38:8e:e9:ce:dc:e8:ea:70:2d:59:8b:56:
e2:b3:e9:65:ae:c7:e7:cd:04:6e:de:b5:9c:bc:ae:
4f:e4:b7:0e:fe:6b:78:90:d9:a4:86:30:40:a6:1c:
dd:c4:10:c7:7b:d5:a8:45:62:e9:e1:37:56:e7:fc:
5b:0c:be:85:cb:e5:d8:ea:3c:4a:5b:4c:d4:3e:0b:
3d:1f:ae:9e:bb:20:a6:09:ab:86:59:2e:4f:be:d5:
53:17:9d:6c:81:8a:92:d5:d8:89:b7:78:75:72:0a:
27:41:90:a2:11:c3:03:08:48:20:cf:1b:bc:6b:9a:
55:df:f1:69:93:94:9e:66:1b:2d:7d:8a:e0:30:58:
bd:77:f1:b9:1c:a1:e6:3a:1d:52:0c:82:9d:c1:0c:
de:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:34:5D:7E:64:C8:0E:12:F5:AE:8D:C1:8A:56:92:E8:5A:16:9C:6F
X509v3 Authority Key Identifier:
keyid:28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:78:d4:85:90:89:2a:fe:e5:6d:f1:56:64:81:40:a3:14:b8:
85:5c:84:df:cf:1d:60:bd:d6:f3:83:de:95:ef:52:5e:14:f5:
1a:14:f7:2d:48:5e:a1:37:40:ed:ff:20:04:e0:6e:ba:8c:8e:
d2:89:46:75:ce:72:df:8b:b9:d5:f5:05:e5:40:f3:e7:80:02:
54:c7:ab:0a:ac:ad:78:15:8c:a8:89:09:1d:ee:f4:5a:20:e7:
94:0d:4c:75:27:0b:b0:5d:8c:e2:30:0b:bd:df:51:2f:3b:87:
ad:9d:02:d5:4b:2a:33:a7:8e:12:65:7b:88:0d:04:42:fa:fa:
40:43:38:38:62:1c:a7:bb:bd:57:ee:1b:25:de:da:97:b2:e4:
c7:f0:d1:3c:63:bf:2e:0f:a2:35:51:5f:33:21:1c:85:41:ad:
c6:cc:0d:45:50:f3:58:f6:b5:df:85:f9:7d:31:7e:0a:0e:f2:
ff:49:3f:f3:62:67:84:37:27:f5:bd:12:18:3c:cc:fc:3b:ff:
fa:39:b3:c7:a3:62:ff:ed:27:10:38:58:dc:44:ba:bd:04:2d:
21:b9:bb:8d:ae:56:83:41:12:c5:25:49:3e:0e:d8:fd:ad:21:
81:86:2a:29:ac:35:b3:92:e3:53:97:0d:16:e6:1a:3c:7d:e8:
a5:64:f9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:03 2026 by rpki-client