Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: ZFNiqUTVFhkOxZmnULKWS98+qfa4/uq6xCnr3TgKdeI=
Subject key identifier: 21:3D:11:94:74:D9:A0:9E:0A:76:E3:0F:C1:87:6E:41:19:A2:1B:09
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 01A0C557F21AF84662511B099094D97FFCE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 0AAB
Signing time: Mon 21 Sep 2026 19:01:10 +0000
Manifest this update: Mon 21 Sep 2026 19:01:10 +0000
Manifest next update: Tue 22 Sep 2026 19:01:10 +0000
Files and hashes: 1: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: +x+1hmcG1otV9XQPPGvCAcDPIFeVZxILZmaWqUH3Jis=)
2: Maj2D8cSqrB3CLI5LyrvNUbe9TI.roa (hash: b021eDbkKPvvVAW1JJTFEOe1gdVYy/RtiqJ/4iLcPI4=)
3: p1ccrCra_00L6gD8dPHnVWnovDk.asa (hash: Tkz+LG7gpA+z7CdE6VRu1V3RZMUT7S6Od/VEYzShauI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:f2:1a:f8:46:62:51:1b:09:90:94:d9:7f:fc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Sep 21 19:01:10 2026 GMT
Not After : Sep 22 19:01:10 2026 GMT
Subject: CN=213d119474d9a09e0a76e30fc1876e4119a21b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a6:f2:ec:2a:7a:bd:57:0e:a9:f9:6e:47:e4:
38:f6:fe:73:86:8c:e8:40:bb:22:ac:8a:47:92:48:
03:7f:e5:ab:fb:eb:00:da:3c:fd:da:f7:9c:10:a3:
19:20:33:10:65:2c:78:18:c0:83:71:ac:e9:ca:6f:
39:bd:4c:e6:a2:84:11:44:ba:27:e9:e7:0a:50:0b:
84:90:09:65:61:e7:d3:5c:c7:74:4b:f0:27:28:a9:
18:73:c4:78:72:4f:59:ef:17:71:c9:8f:ae:16:81:
f2:c8:ec:df:58:19:86:77:2c:a4:b6:7d:90:4e:a7:
80:bc:7a:0c:4b:97:fe:20:d2:e0:bf:7f:b7:9e:24:
f0:c0:e9:f4:a7:18:40:a9:aa:ef:cd:d7:45:64:a2:
91:a6:cc:5f:ab:6b:7a:21:35:87:a0:cb:ba:a8:86:
48:12:80:90:3b:7c:df:fa:3a:13:ba:f2:a6:3f:69:
a8:b3:bf:85:a5:23:76:53:37:5c:7c:f9:3b:c1:ef:
dd:f5:8e:17:db:33:e7:c6:f6:15:d3:a1:3b:cc:f5:
ea:cf:5e:c5:d6:1f:d1:7d:51:bc:82:b5:f3:9a:ec:
8c:bc:a0:52:af:13:ce:0e:f5:48:4f:38:ef:4b:75:
c2:40:0a:82:ff:51:23:56:f2:b3:d4:d9:b9:d2:e6:
56:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3D:11:94:74:D9:A0:9E:0A:76:E3:0F:C1:87:6E:41:19:A2:1B:09
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:be:0f:f3:7e:b6:35:45:94:0a:94:74:90:30:b4:3c:a8:14:
7d:9e:e7:f6:80:39:a9:4b:4e:cc:fe:df:ae:20:f6:7a:23:97:
83:31:5f:a6:b6:54:47:37:53:ca:1b:ed:d5:4f:37:d5:cf:f1:
f0:51:c1:db:62:19:b8:9b:87:2e:0c:28:3a:b9:36:8e:81:07:
b5:ed:03:24:10:81:2e:8c:59:8b:57:e9:eb:29:00:a4:5d:56:
b7:9c:b6:a1:5c:f0:57:00:74:2a:89:f6:ad:a7:ab:30:b8:09:
f8:2f:2a:52:a5:e3:ec:ea:64:db:23:e2:12:e2:4a:ae:4d:7f:
2e:61:9f:ef:38:9f:f5:b7:a0:15:f2:4a:16:7c:dd:78:09:a4:
de:7c:f5:92:c5:61:8f:e8:96:38:e9:49:04:ee:4b:64:5f:7b:
72:43:5c:a4:fc:f6:96:23:84:81:5b:7f:2e:16:40:68:cc:d2:
01:f6:a1:e3:b1:e6:f5:af:71:9e:e9:2d:64:be:6e:e1:61:0a:
9d:29:a9:5b:9e:d4:d8:36:d6:49:3f:82:0c:8f:00:22:ee:01:
dc:44:3f:3f:ea:69:35:a4:97:fc:61:07:2e:b4:e0:d3:4b:d1:
c7:23:4e:64:49:0d:65:b9:d9:b4:a2:fd:43:13:24:e0:1b:98:
9f:ab:ec:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:29:20 2026 by rpki-client