Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
File: KPev7E0_BvgNaHKm1iRs0B5z1qY.mft (raw, json)
Hash identifier: jl9OgGSPcZfTzXn7HvtmVnzxzV8EhidFrNzNFVs8cyc=
Subject key identifier: 16:0F:35:90:2D:A5:E7:CB:77:0E:F5:42:20:79:66:8C:D5:0E:C9:4D
Authority key identifier: 28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
Certificate issuer: /CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Certificate serial: 019CAD228B7E5EBC22160A66988A7B49B459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 06:00:48 +0000
Manifest this update: Mon 02 Mar 2026 06:00:48 +0000
Manifest next update: Tue 03 Mar 2026 06:00:48 +0000
Files and hashes: 1: KPev7E0_BvgNaHKm1iRs0B5z1qY.crl (hash: Kna9Ogt/8uIqN9rYygVSAWOg78Ut8orKGO7A3hgly54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:8b:7e:5e:bc:22:16:0a:66:98:8a:7b:49:b4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Validity
Not Before: Mar 2 06:00:48 2026 GMT
Not After : Mar 3 06:00:48 2026 GMT
Subject: CN=160f35902da5e7cb770ef5422079668cd50ec94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0b:e0:b9:82:04:96:ee:4f:13:95:76:9c:93:
73:e3:63:cc:c4:39:e5:a1:38:66:30:03:20:4c:ea:
76:cb:91:f5:80:7e:e5:de:3d:c3:3a:f5:38:b4:e8:
58:b0:8d:03:a0:0e:66:9b:09:ae:04:17:c9:90:7a:
47:4a:8c:7e:82:1a:24:57:24:39:c3:f9:4d:45:a1:
86:cf:69:55:ab:1b:88:41:09:22:49:4d:0e:2d:85:
90:d4:c2:26:3f:92:b8:14:44:dd:19:41:ff:e5:bd:
a4:f8:f7:90:7e:3a:f0:46:7b:6e:aa:6a:4d:0a:4e:
e0:66:54:03:81:b3:96:35:cc:77:2e:4d:4e:2e:dc:
e9:ca:16:5b:94:17:d6:43:9e:dc:dc:66:a9:9f:3c:
42:7e:5d:74:7a:ef:89:de:74:64:da:fe:9b:c0:f5:
10:76:f0:b0:0e:ec:68:d2:d7:1f:59:52:e4:01:8e:
af:d8:6e:ce:0c:94:61:d0:b1:86:9b:cc:86:d5:5b:
19:e3:93:97:3e:fb:6b:21:1b:b6:48:10:30:6a:68:
8c:c2:90:02:a7:ef:48:3a:3c:cb:98:f7:0d:bb:57:
28:b9:d9:f0:39:6b:b7:88:42:99:bf:60:4c:d0:0b:
b9:40:fd:d0:12:50:a7:b2:fe:99:b7:90:32:86:ef:
40:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0F:35:90:2D:A5:E7:CB:77:0E:F5:42:20:79:66:8C:D5:0E:C9:4D
X509v3 Authority Key Identifier:
keyid:28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e8:c6:75:4e:b3:98:75:f8:83:ad:b0:b4:d6:f8:31:34:cb:3e:
56:37:64:dd:ca:7d:ba:23:1b:98:b1:b7:14:50:cb:81:61:03:
ad:b9:b4:84:48:23:cb:47:46:45:82:59:5d:b3:60:19:b0:6a:
54:90:ec:58:5e:ce:d1:21:d2:84:38:a7:fb:fb:43:69:75:82:
d0:de:6a:b6:63:67:08:4a:b5:9e:87:50:12:1b:8e:24:06:7d:
39:e6:73:88:e2:e3:33:5c:bd:3a:7f:04:38:95:77:4f:ed:93:
da:72:c8:83:31:04:f7:d8:be:a8:03:6c:0b:e0:5e:0c:2a:1b:
a5:23:51:aa:04:3e:04:bd:d7:54:fc:ce:1e:d1:ab:19:0e:cc:
bf:51:36:bb:50:81:3a:a0:e2:77:ce:0e:3c:e1:0c:2e:b1:f6:
62:cd:db:6e:89:d6:d1:7d:7d:3b:f9:05:67:0f:4c:35:54:c7:
b0:7c:13:a8:3f:45:63:37:55:e5:fd:0b:13:ba:2b:2f:e4:aa:
91:cc:ff:dc:bc:10:1c:96:98:e9:d7:16:e5:22:91:7c:73:bb:
62:b0:0b:2e:12:f5:58:24:94:ce:37:e3:b6:22:5f:bb:7b:e5:
6c:40:a2:03:9d:d9:64:e2:ae:42:ca:e0:bb:4f:a1:a7:37:93:
26:92:95:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:17:20 2026 by rpki-client