Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
File: KlMwgTe0VbZabCiesDxNTg-2_P4.mft (raw, json)
Hash identifier: w/vpy9AMIXNjXlJ3bJirGqmqnAoxa6PJ9UJ5knnbQC4=
Subject key identifier: CD:AF:F4:9C:12:15:83:D5:CE:B0:DB:99:87:07:F4:2D:5A:26:77:DF
Authority key identifier: 2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
Certificate issuer: /CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Certificate serial: 01A0FF7F31DC093FFE5050BCCD5C81F22E8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
Manifest number: 028F
Signing time: Sat 03 Oct 2026 02:02:00 +0000
Manifest this update: Sat 03 Oct 2026 02:02:00 +0000
Manifest next update: Sun 04 Oct 2026 02:02:00 +0000
Files and hashes: 1: 0yV_DKUM90E6Draf6I0oRvAGk5k.asa (hash: boBdEash/+gMRRolhUIvtQKVyOAE9aAji0xpmGHbJLM=)
2: 1F3gSPk9CehJkH52NcE3lwEYTNQ.roa (hash: I/Gn2SsvQsJ4q7Do0ZCiSfy8dqZTMoRdU3nRnkWYAHM=)
3: 6XE4eDrC06d690GkRlprAnwbaW8.roa (hash: Z/suCundDH9/bsBWs3cumJthJ+NNEyWRNKToq4XePhk=)
4: KlMwgTe0VbZabCiesDxNTg-2_P4.crl (hash: XXmrLdNU+b/81DcrAX+vaqgQSitTDG88DI7NfEgPbKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ff:7f:31:dc:09:3f:fe:50:50:bc:cd:5c:81:f2:2e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a53308137b455b65a6c289eb03c4d4e0fb6fcfe
Validity
Not Before: Oct 3 02:02:00 2026 GMT
Not After : Oct 4 02:02:00 2026 GMT
Subject: CN=cdaff49c121583d5ceb0db998707f42d5a2677df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:41:45:41:07:f1:6c:29:b0:d3:e6:08:dd:94:
64:bc:4a:dd:01:fa:ce:35:85:1f:37:68:fe:ee:44:
dc:33:34:7d:3c:7c:c2:da:4d:2a:a4:f1:7b:b3:e5:
02:01:40:4b:4a:14:63:fc:cb:0f:a4:94:6f:79:5f:
fb:c6:4e:c0:ed:83:80:1e:ec:dc:33:d1:c5:ee:5e:
cb:55:bd:ad:1b:b8:c5:7a:83:9c:9f:3d:77:cc:f1:
28:b0:fb:3e:d9:49:07:00:d1:32:c5:4d:46:35:8f:
e6:52:22:ae:e2:46:1c:df:af:41:1c:f1:7b:90:e2:
0c:b8:91:5c:99:fd:e7:99:76:fe:d9:58:93:2a:c2:
b1:40:a8:b3:ca:8c:8c:f8:96:f2:e9:e0:ca:da:5f:
53:81:4d:b9:81:62:4c:35:8b:db:cd:db:0e:76:b3:
48:3a:33:7e:81:77:d5:07:fd:cc:ad:d8:a8:15:73:
c8:65:ae:e9:00:f0:cd:6b:d7:85:36:ef:e9:f2:13:
67:af:de:c3:fb:ab:81:57:0e:bc:d1:46:94:9f:a5:
a5:52:9c:d6:d5:f8:27:6b:36:72:fc:1c:3d:d0:cb:
22:d3:1a:08:94:cd:92:2f:8d:0c:48:8d:fc:39:65:
87:81:1b:77:50:cb:b9:6a:9b:03:4e:8e:93:1f:e4:
45:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AF:F4:9C:12:15:83:D5:CE:B0:DB:99:87:07:F4:2D:5A:26:77:DF
X509v3 Authority Key Identifier:
keyid:2A:53:30:81:37:B4:55:B6:5A:6C:28:9E:B0:3C:4D:4E:0F:B6:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlMwgTe0VbZabCiesDxNTg-2_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f51950-b912-4ab8-9a58-782281515907/1/KlMwgTe0VbZabCiesDxNTg-2_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ce:71:f7:cb:6e:a2:d4:98:32:e5:c3:b7:20:72:ac:75:0b:
aa:43:a4:8d:5f:2f:62:96:90:78:df:13:4c:da:57:1e:6a:b5:
c6:bf:d0:d5:8d:a0:ad:70:68:9a:6a:c1:30:18:4b:3e:06:62:
49:81:36:13:2b:8b:76:d0:5b:5f:b9:bb:36:b0:aa:c0:02:48:
6a:83:57:1b:5a:32:9c:12:81:63:b4:74:b1:70:d1:9d:28:17:
8f:d6:87:8d:68:75:85:be:31:74:78:cb:d6:a2:e2:20:6e:63:
50:fc:e1:91:f3:e1:51:88:23:49:34:3a:30:3e:cb:d8:91:57:
1f:e7:6e:78:5e:b8:c2:c7:40:dd:bd:c9:d0:e2:26:58:ee:ce:
e4:c4:4a:9d:1f:2e:8e:42:30:7c:54:2b:83:73:3a:cd:6b:8b:
a9:6b:de:ea:5e:80:24:80:f8:96:6e:49:72:07:20:01:a7:0f:
6c:d2:99:00:e1:8e:96:d1:14:f4:e3:3c:f0:e7:d6:c6:c7:7a:
88:a2:1f:41:73:13:29:8e:8d:2f:7f:de:30:d0:39:fd:f6:72:
72:54:37:f2:2a:d3:53:cb:21:e3:ac:c5:3a:53:f6:87:dd:8b:
06:58:b7:9e:fc:84:1e:79:f7:48:b4:df:cc:8c:1b:77:69:83:
16:a0:59:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:04:26 2026 by rpki-client