Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
File: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft (raw, json)
Hash identifier: ODn6mzq917PR7dmI+hZ23Ekv9HEj63xAM31f9nbxnTY=
Subject key identifier: EF:91:EB:7A:14:46:6B:98:D1:EB:E6:60:59:9C:0D:F0:E5:A8:C8:6B
Authority key identifier: 28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
Certificate issuer: /CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Certificate serial: 019FAC08497949864C6A1F7A5F197D238C81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
Manifest number: 141E
Signing time: Wed 29 Jul 2026 04:00:51 +0000
Manifest this update: Wed 29 Jul 2026 04:00:51 +0000
Manifest next update: Thu 30 Jul 2026 04:00:51 +0000
Files and hashes: 1: 6Rn-wxtOzItHCQZfTf_aB44eX3w.roa (hash: CLsXfryDKRJpVOl8XMFhcPTYQSBV9e1dqAwQW92Ka+4=)
2: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl (hash: jMp4lvW0glTTGMbShvMOggnlylrTlekB7xIFJROKvz0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:49:79:49:86:4c:6a:1f:7a:5f:19:7d:23:8c:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Validity
Not Before: Jul 29 04:00:51 2026 GMT
Not After : Jul 30 04:00:51 2026 GMT
Subject: CN=ef91eb7a14466b98d1ebe660599c0df0e5a8c86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b3:0d:79:5e:0c:d5:9e:88:e9:bb:4c:b7:63:
33:e6:0f:79:5a:12:0a:b0:02:00:c8:da:73:2f:e8:
69:76:c5:93:0f:a6:d7:88:1f:94:92:73:b0:ff:7b:
0c:6a:82:78:80:4f:2d:0b:3f:78:4e:0f:2e:68:d4:
2b:54:11:29:5d:49:95:e6:ff:4c:38:74:9d:8d:03:
7b:6d:ba:d2:98:c7:01:83:71:37:b5:f8:d2:b5:f6:
d4:b2:d3:00:38:ce:75:0e:c2:3a:cb:03:aa:2b:6a:
f9:ba:36:19:66:d0:bf:c8:9f:5d:ad:66:3a:7d:c3:
46:93:9d:a9:67:77:56:97:ea:73:7f:7d:2d:8f:c7:
fc:f4:97:49:90:f5:69:48:c3:f6:e2:69:8e:2c:e4:
39:a5:bf:7b:01:73:4c:09:0f:ff:79:37:e9:82:48:
39:9b:d1:63:bc:6c:5f:e9:a1:33:55:46:79:5b:87:
4e:89:fd:44:ee:df:ee:b7:6e:2f:66:4e:03:90:d1:
b4:64:e9:dd:02:9f:11:1b:01:64:83:45:ee:30:1b:
7a:a8:ca:19:ae:c9:69:3f:47:9e:93:e0:ea:92:b9:
ee:03:38:fd:0b:24:35:b2:0e:d2:a0:0d:85:c2:a2:
89:94:db:e7:93:50:bf:ce:70:a3:dd:f3:4c:cf:7e:
b5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:91:EB:7A:14:46:6B:98:D1:EB:E6:60:59:9C:0D:F0:E5:A8:C8:6B
X509v3 Authority Key Identifier:
keyid:28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:81:a8:79:95:01:7b:18:1a:ad:73:a8:b6:91:42:48:0d:45:
a2:12:37:a9:12:4c:ef:94:f7:ae:ff:d0:6e:38:8f:79:43:b2:
41:3f:f8:32:2b:92:65:04:c9:9a:de:22:e0:75:20:a1:e4:5c:
48:1b:1b:d6:90:a2:a9:11:c8:bf:50:eb:b3:ef:cd:a8:18:1f:
ce:87:b2:7a:aa:fd:2a:5a:6e:65:2b:f7:79:73:23:3b:8d:25:
8b:04:e0:9d:0b:5f:df:ff:db:e5:3f:d9:e3:e1:1d:7b:f2:be:
07:20:5e:9c:5b:99:63:99:19:75:f0:1e:98:e0:ed:9f:6c:bc:
ee:b8:9c:64:c8:5d:1c:66:c0:83:5c:a9:96:05:24:1b:09:68:
1e:96:fc:e2:01:01:51:95:60:ef:ff:81:d2:08:5c:a9:eb:c5:
44:2e:e6:1a:68:92:d3:48:c0:79:85:38:1a:51:a6:3a:aa:78:
1a:21:c6:f7:12:e8:08:cb:d1:e9:7b:81:4a:b9:b6:6a:81:17:
ac:ee:2a:4d:a1:30:ba:fb:51:25:20:95:46:28:db:64:12:2c:
19:14:7c:e0:bf:6b:84:ef:32:fe:3c:73:23:44:40:d9:ea:8a:
8f:69:7d:da:75:83:38:ca:11:0f:b3:43:cd:03:25:4e:e6:88:
1a:05:7f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:58:34 2026 by rpki-client