Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
File: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft (raw, json)
Hash identifier: uNMpSdRvgXqX6BLfHJdMEI61Hmac8WugG0tp7HmOmPs=
Subject key identifier: 8B:0C:07:53:78:65:3C:4A:1C:53:47:A5:35:C8:07:81:10:0B:CC:66
Authority key identifier: 28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
Certificate issuer: /CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Certificate serial: 01A0F2689143F88986DB305F0E9E785853B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
Manifest number: 14C7
Signing time: Wed 30 Sep 2026 13:02:14 +0000
Manifest this update: Wed 30 Sep 2026 13:02:14 +0000
Manifest next update: Thu 01 Oct 2026 13:02:14 +0000
Files and hashes: 1: 6Rn-wxtOzItHCQZfTf_aB44eX3w.roa (hash: CLsXfryDKRJpVOl8XMFhcPTYQSBV9e1dqAwQW92Ka+4=)
2: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl (hash: GDiAW5dChyPI8bT4CJIGGk9Pkoc/rdcUdqPBg4uMK9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:68:91:43:f8:89:86:db:30:5f:0e:9e:78:58:53:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Validity
Not Before: Sep 30 13:02:14 2026 GMT
Not After : Oct 1 13:02:14 2026 GMT
Subject: CN=8b0c075378653c4a1c5347a535c80781100bcc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:7b:19:2d:96:f0:f9:f4:9f:13:85:5f:7d:
d4:0e:66:a7:4a:e9:1e:f2:70:02:c4:4b:2b:a2:52:
0e:6d:77:5c:3e:d8:02:af:4c:69:cb:6c:43:09:bf:
7a:41:df:8a:0f:5b:ca:9c:16:4e:6d:53:51:42:21:
08:a4:95:a4:dd:a9:c2:82:b3:a3:10:3b:5f:a9:9e:
a5:ea:62:02:f9:ab:45:52:4b:c7:6d:a0:2f:a0:dd:
26:ee:42:da:f7:a0:10:93:e2:d9:0d:e6:bf:c1:12:
09:6e:ec:aa:0d:8a:1f:3c:fd:2c:1e:27:72:1d:9c:
9b:55:4f:bc:50:1f:9f:a6:33:7f:e8:0a:9a:dc:8f:
92:7d:3f:f5:f4:b4:1a:11:25:8b:80:70:2f:39:1c:
c2:3e:b2:74:b0:1d:d3:f0:89:fd:9d:d2:9e:3e:e6:
81:bc:af:f4:f9:da:04:f4:85:c0:04:3b:95:1c:6d:
72:e2:6c:37:d7:2a:3d:b6:67:ef:bc:58:1d:b5:f5:
76:07:5f:10:a6:29:58:d7:a7:9b:ac:9b:2c:79:41:
4f:68:7c:c0:89:7c:9f:28:f0:95:e5:0a:e9:41:0b:
1e:b3:9a:4e:e7:b5:a7:af:87:34:e2:7b:a5:ce:16:
4c:5a:b5:2c:12:fd:3f:15:2a:29:26:75:5e:e8:04:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0C:07:53:78:65:3C:4A:1C:53:47:A5:35:C8:07:81:10:0B:CC:66
X509v3 Authority Key Identifier:
keyid:28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:21:44:70:48:d1:3e:5b:96:63:48:47:f6:88:98:89:72:5e:
45:0c:4b:b7:05:69:09:13:53:e8:11:50:1d:c9:1e:89:fa:eb:
3b:3f:f8:ed:35:7a:06:4d:a8:61:54:b1:f9:d0:3b:9b:10:03:
c3:20:18:1b:4b:e2:3f:ff:20:0f:65:4a:fb:2c:0e:28:fd:2c:
d4:93:f3:2d:82:95:d3:28:cb:7f:6e:1f:fc:25:a2:fd:ed:04:
22:80:db:3a:98:0b:6c:9f:5d:99:31:ca:88:7e:8f:77:7d:92:
d5:82:46:01:7c:a8:56:aa:15:06:9b:96:5e:f6:fb:54:f3:e4:
e0:3b:24:89:ae:d0:b0:a6:0c:3c:44:ec:ca:ae:64:b5:c6:a2:
e7:52:07:fe:24:e2:7c:ef:1b:44:8c:c5:31:99:de:fe:d2:f1:
30:ba:ff:0f:2a:fa:53:9b:b0:57:46:83:f5:22:fe:03:5e:9e:
65:56:3e:c8:01:e0:a0:8f:16:9e:e7:7d:09:a0:f6:1c:05:a8:
05:6b:81:4b:59:1e:9c:23:ef:94:c0:bf:70:94:64:d3:a9:28:
d1:50:d7:67:7b:2a:fc:a0:c7:74:f9:07:71:de:3f:b4:9c:22:
7b:14:c9:56:2a:1a:9a:80:df:76:86:36:59:36:8b:fc:28:37:
80:0c:99:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 18:14:40 2026 by rpki-client