Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: HCefKBQBU6DHZEo/BRi1nS1OXvpS4lFLfzqdTPAtT3M=
Subject key identifier: 49:E2:3E:FB:1A:0B:03:47:F1:F2:9A:22:C3:05:D7:CD:17:56:05:0C
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 019FA78642960F89C37BA6A8388D486FDBA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 0A17
Signing time: Tue 28 Jul 2026 07:00:21 +0000
Manifest this update: Tue 28 Jul 2026 07:00:21 +0000
Manifest next update: Wed 29 Jul 2026 07:00:21 +0000
Files and hashes: 1: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: HrZAzYsq1CiELo6VyN9wKM0CBf19/d5X/D5d9iSDBA8=)
2: Maj2D8cSqrB3CLI5LyrvNUbe9TI.roa (hash: b021eDbkKPvvVAW1JJTFEOe1gdVYy/RtiqJ/4iLcPI4=)
3: p1ccrCra_00L6gD8dPHnVWnovDk.asa (hash: Tkz+LG7gpA+z7CdE6VRu1V3RZMUT7S6Od/VEYzShauI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:86:42:96:0f:89:c3:7b:a6:a8:38:8d:48:6f:db:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Jul 28 07:00:21 2026 GMT
Not After : Jul 29 07:00:21 2026 GMT
Subject: CN=49e23efb1a0b0347f1f29a22c305d7cd1756050c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:37:0e:43:5d:00:b8:46:f4:de:df:34:a9:
9e:28:11:d2:bc:d8:e3:ad:0e:2c:a9:97:b2:0b:28:
8b:3e:d7:cf:94:2b:f3:be:97:97:4b:78:ba:e0:67:
fa:85:6e:b9:50:b7:06:31:8c:d8:b5:89:fd:dd:88:
2f:7e:2e:6b:74:a3:79:be:af:1e:f2:b3:61:ba:2f:
8a:1c:80:7a:82:e5:a5:35:3a:60:bb:96:4a:ef:b8:
df:bd:5d:f0:44:a2:4c:b0:47:af:ca:66:e1:9a:79:
19:27:6e:26:e1:8d:7d:95:f5:02:e7:b0:3d:cd:ff:
7c:86:2e:c4:70:11:d0:3e:dc:a0:15:72:89:e9:c9:
3d:80:47:90:96:fd:ff:57:09:e7:c8:f4:63:fb:a2:
ad:32:0a:7b:11:fe:f2:0e:15:41:ac:db:09:27:e5:
f8:5c:53:5f:36:c1:c8:91:b0:ee:cf:9c:ef:70:a6:
5b:20:4d:8e:d3:a5:02:f0:8d:5c:b5:1d:49:67:78:
8f:34:91:35:02:9c:ad:55:5e:40:db:53:4c:f8:db:
90:bf:a1:2a:da:d9:48:67:d5:52:48:4d:16:ed:c0:
8f:b2:f2:f6:d9:14:47:13:c7:54:86:97:55:ea:f9:
40:b4:1f:d7:80:56:17:16:99:64:1c:35:e4:27:81:
b5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E2:3E:FB:1A:0B:03:47:F1:F2:9A:22:C3:05:D7:CD:17:56:05:0C
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:06:75:da:7c:28:07:98:d3:a7:5a:0f:d8:ad:1c:35:d5:d5:
e2:8f:b2:fb:19:9c:fc:a5:85:f5:50:3f:42:21:bd:62:ef:14:
17:39:d8:28:69:9e:0b:af:a9:83:16:f1:3c:40:8c:ef:64:d4:
95:6f:91:e3:b0:6a:23:de:ee:f8:07:06:60:03:4e:d4:9b:79:
46:18:f5:79:83:ef:48:de:e2:ec:6b:ba:e7:4e:37:fe:38:c8:
de:e9:04:da:6a:2d:ba:b7:8c:69:39:86:6e:80:60:62:d3:67:
5f:d3:ca:92:43:23:88:23:00:61:72:95:b8:86:3d:86:da:5f:
76:18:fe:dc:fb:80:57:35:16:16:0a:0c:05:3c:7f:bf:e8:8d:
a2:a2:f8:d3:42:7a:58:1a:83:25:57:e7:e8:2c:79:77:c4:23:
d6:56:c9:bc:1d:44:e5:23:52:f7:82:b4:db:9a:e6:07:8b:4b:
ab:d8:aa:3a:98:4b:7f:d5:23:5c:cf:3b:79:3e:72:6f:86:7c:
6d:7a:e9:4a:76:09:0c:39:45:ea:50:28:6a:06:3f:9f:e1:14:
b0:4b:bb:fc:da:ed:b5:5e:db:62:c7:c2:57:9d:c2:d3:b2:c0:
b2:f7:72:80:32:c6:fd:66:f1:ad:e3:9a:16:34:e1:79:ce:9b:
56:b9:13:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 13:38:28 2026 by rpki-client