Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: kxi3l6GRPy6Txqb+FaNkhpwU3/ZqF1J2CnemgRb7hjE=
Subject key identifier: 9C:65:DC:8D:1E:54:02:AE:31:41:4C:88:7F:FF:0C:45:F2:42:9B:82
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 019CAC7DDA3FCBB0854C23A8447541F37083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 088A
Signing time: Mon 02 Mar 2026 03:00:54 +0000
Manifest this update: Mon 02 Mar 2026 03:00:54 +0000
Manifest next update: Tue 03 Mar 2026 03:00:54 +0000
Files and hashes: 1: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: KcsXF4vlhQChNtUmYTlvXf8E5XvaVxJ2t9qeRp7/Qy8=)
2: Maj2D8cSqrB3CLI5LyrvNUbe9TI.roa (hash: b021eDbkKPvvVAW1JJTFEOe1gdVYy/RtiqJ/4iLcPI4=)
3: cHGfrQ2RRCrzMuQN1_zdwWiDk3I.roa (hash: EJXHDQe6ZDkATsWeN7+btkC/hG9y8A/gHxLok69CX5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:da:3f:cb:b0:85:4c:23:a8:44:75:41:f3:70:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Mar 2 03:00:54 2026 GMT
Not After : Mar 3 03:00:54 2026 GMT
Subject: CN=9c65dc8d1e5402ae31414c887fff0c45f2429b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:74:4a:b0:6c:58:53:4e:d5:ef:8d:d8:20:e8:
ee:c9:24:74:35:cc:a4:08:7a:4d:cb:17:80:6d:20:
4d:58:b0:22:99:89:79:03:de:07:a7:24:f2:0f:a0:
d4:85:39:7e:65:ae:be:f7:cd:c7:a5:db:60:07:db:
83:92:1f:b7:42:22:8d:8d:c8:e5:12:eb:30:4c:77:
c5:6a:f6:ac:93:ea:f5:07:cb:39:0d:a7:b8:d0:a7:
82:fb:8a:8d:7a:ea:70:85:71:27:d0:d5:28:75:99:
e9:58:40:05:fa:8b:52:23:b5:81:a0:a9:97:a1:53:
cb:13:4a:a4:80:51:75:a2:bf:d0:a2:f7:9f:ae:6a:
e3:f8:14:73:52:6e:7e:09:7a:ed:ec:21:38:1b:3b:
12:c6:7f:5a:11:2b:77:bb:a8:f2:39:1e:6a:16:fe:
fd:92:a7:40:46:9f:82:eb:60:d8:f1:70:5e:47:e5:
d5:f3:a3:5b:2c:03:95:0b:01:a3:b7:fb:6e:66:15:
52:7b:92:4b:ea:3a:00:3f:ed:ba:14:95:45:57:9d:
39:ef:b9:a3:13:81:27:54:61:46:bf:d4:06:9c:64:
3e:0e:d2:dc:b4:da:87:03:61:fa:12:94:cb:21:1f:
62:b3:f1:f9:06:e1:68:a4:5a:0f:42:fc:dd:09:45:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:65:DC:8D:1E:54:02:AE:31:41:4C:88:7F:FF:0C:45:F2:42:9B:82
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:76:93:eb:74:30:a9:3d:fe:85:d7:ba:8d:bf:d1:64:af:c1:
b6:a1:60:53:0a:c0:17:07:64:93:e4:b5:2b:fa:df:2b:f3:00:
8a:84:68:98:71:89:7c:70:a9:13:d6:a1:58:9c:9d:01:cf:cc:
f9:a1:b4:ce:95:39:12:03:ae:02:3b:86:6c:7d:f2:a2:3f:b7:
4d:47:83:08:7d:d0:03:95:e6:0f:1d:41:2b:06:b4:5f:a6:13:
a5:d7:7d:2f:2e:cf:9a:c8:04:55:ef:e4:45:ce:61:79:fa:d2:
d8:31:09:5a:88:79:ad:98:46:f2:23:3f:52:15:bd:5e:c6:b0:
3b:e6:66:c6:e8:51:5d:01:07:e5:97:d8:a6:07:2f:64:2b:93:
cf:37:da:c2:0c:4c:b8:8a:97:5c:06:65:3a:6b:c0:10:26:43:
a6:14:66:51:f6:c9:4b:2d:54:92:ac:33:2b:7b:dd:b8:c3:44:
a0:56:3c:7d:bc:20:a9:a5:ea:3f:0a:68:89:7d:aa:d2:47:8e:
f2:79:52:af:59:3f:67:fa:e4:5d:0b:96:20:05:46:01:c0:bc:
9b:56:fb:93:9a:21:39:cf:6a:81:e4:53:b1:2d:f1:c1:74:b8:
02:1d:d7:99:75:06:69:2c:61:20:e8:32:98:33:a5:37:29:df:
a0:8b:c3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:37 2026 by rpki-client