Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
File: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft (raw, json)
Hash identifier: hOsgSTtYCjCyECkk6SS6zqOUxXuw79H2hMbhUz9HFak=
Subject key identifier: 50:FB:0A:49:67:9B:EC:C1:A5:56:94:C6:F5:CE:FB:A3:CC:16:89:07
Authority key identifier: 28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
Certificate issuer: /CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Certificate serial: 019EC25B81440D8C687D88342664615AEDB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
Manifest number: 13A5
Signing time: Sat 13 Jun 2026 19:00:37 +0000
Manifest this update: Sat 13 Jun 2026 19:00:37 +0000
Manifest next update: Sun 14 Jun 2026 19:00:37 +0000
Files and hashes: 1: 6Rn-wxtOzItHCQZfTf_aB44eX3w.roa (hash: CLsXfryDKRJpVOl8XMFhcPTYQSBV9e1dqAwQW92Ka+4=)
2: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl (hash: DE4ZiWrGFgHmmbEiOFAqigaRnRaz2nH45sma+wPhxqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:81:44:0d:8c:68:7d:88:34:26:64:61:5a:ed:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Validity
Not Before: Jun 13 19:00:37 2026 GMT
Not After : Jun 14 19:00:37 2026 GMT
Subject: CN=50fb0a49679becc1a55694c6f5cefba3cc168907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:d3:b2:8e:60:89:b5:df:f0:33:3e:76:82:
ab:a2:37:81:68:1e:70:a0:cb:83:b4:9d:e0:fe:59:
5a:8b:2f:43:6e:63:52:17:10:aa:e5:55:da:89:ea:
c1:92:27:13:d8:1f:15:46:4a:25:da:42:d1:57:31:
8e:2f:2d:81:a4:9f:14:a2:43:c3:50:82:c3:9f:10:
a5:18:54:82:e2:ae:15:1b:b7:df:70:e3:f0:fa:60:
44:47:1e:90:53:2f:8a:28:6d:3e:08:a0:29:ff:2c:
20:07:dd:4d:9a:92:f5:4b:fd:6d:dd:04:fa:9d:31:
38:a8:0e:8f:14:5b:db:e9:14:6f:03:cc:a0:92:78:
47:2c:4f:2c:da:df:2e:12:57:97:73:1a:3f:6a:1c:
ab:51:35:90:5a:42:ac:45:7f:37:71:0e:29:52:91:
fa:a1:cd:b5:cd:b8:41:07:46:06:d8:61:20:28:ec:
59:ee:b8:90:88:d5:34:ff:40:c6:ee:01:09:ae:6a:
85:d9:a6:d7:ea:8c:19:bf:b9:fa:f2:78:d5:c1:71:
e5:3d:0c:2b:87:99:8c:05:ad:63:1c:23:1d:70:2c:
58:9a:40:71:5c:ac:0d:17:8b:46:0e:c4:c3:70:00:
01:d6:29:f2:58:69:cb:20:47:1d:d0:65:52:ef:c1:
aa:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FB:0A:49:67:9B:EC:C1:A5:56:94:C6:F5:CE:FB:A3:CC:16:89:07
X509v3 Authority Key Identifier:
keyid:28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:2e:61:53:50:b6:52:af:72:2d:9c:8e:b5:ec:c1:b6:ee:b8:
32:4b:0d:18:dd:ca:81:11:50:7d:8e:4d:22:9c:26:5a:0c:32:
ce:35:3b:87:d3:3b:45:53:d8:88:6a:8a:50:2e:25:c1:71:d2:
19:10:89:2f:97:71:5c:5a:ce:87:da:b0:e2:16:5d:54:41:ff:
bd:0d:2d:a8:08:3d:6a:ad:57:e6:88:01:ca:bc:1a:e0:70:8e:
c4:27:12:d4:02:9c:75:e6:8c:99:f8:87:a8:48:dc:18:0d:8e:
e8:9a:a1:27:91:63:37:e2:67:81:2d:53:1b:07:89:d2:c4:91:
6d:42:5d:b9:08:3a:97:f9:b1:7d:e1:bf:87:99:f7:c8:7d:00:
c3:a9:c5:64:39:11:90:a4:a8:e3:d0:ee:4f:92:c6:a4:22:60:
91:ff:a4:ef:77:71:b4:ee:7d:f3:a0:f3:a2:78:6c:6e:fa:f9:
30:a7:b6:00:9a:19:f7:0f:c3:c9:20:94:48:e7:78:4f:ba:f3:
35:38:58:73:9c:a1:96:6d:a2:79:13:0e:6a:4d:57:fa:1f:9a:
13:3d:bd:d9:a9:7a:64:b5:4e:5e:a4:f1:4d:c4:78:02:bf:2e:
13:1a:71:84:42:a7:6e:b9:25:46:44:1a:5e:0d:e4:6d:c7:17:
12:6d:2c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:45:04 2026 by rpki-client