Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
File: KD3ro7EwXJpI03S6Rzab8fgn7gg.mft (raw, json)
Hash identifier: b97vbYmBqT8jdLphlFopurgnh9Davpv4gD0RFDXbjnY=
Subject key identifier: 95:84:DF:45:55:D3:E8:FF:F6:04:A2:0D:9A:09:01:AA:14:F9:71:97
Authority key identifier: 28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
Certificate issuer: /CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Certificate serial: 019EBFC7FFF6706FA0C78F5CA52EB835BAB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
Manifest number: 0CA8
Signing time: Sat 13 Jun 2026 07:00:15 +0000
Manifest this update: Sat 13 Jun 2026 07:00:15 +0000
Manifest next update: Sun 14 Jun 2026 07:00:15 +0000
Files and hashes: 1: KD3ro7EwXJpI03S6Rzab8fgn7gg.crl (hash: ypF47yyz3w+ib7oia/N56eb4n5wzMx90M8CvqwrJbwk=)
2: OQ2Ehq2LNnkoW69ybvSmF7Wii1o.roa (hash: R70NXYY+s+0zLQXH0/qTZ8MSPj794apmQlMiNuT9CX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c7:ff:f6:70:6f:a0:c7:8f:5c:a5:2e:b8:35:ba:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Validity
Not Before: Jun 13 07:00:15 2026 GMT
Not After : Jun 14 07:00:15 2026 GMT
Subject: CN=9584df4555d3e8fff604a20d9a0901aa14f97197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fa:fb:4a:c6:75:bd:b4:00:6e:7d:15:76:0a:
82:6f:0e:17:3f:ac:ff:b6:a3:f9:67:ae:b4:b7:1f:
c2:b7:94:5f:60:8e:bf:55:b5:f9:66:12:f8:36:83:
01:81:d9:85:10:1c:fa:cf:41:87:36:92:e1:a2:5a:
f2:50:73:8d:ad:49:28:31:26:61:c8:97:e7:a7:61:
16:f2:81:ac:5e:63:68:05:e8:1a:fa:94:25:eb:ba:
44:60:3f:23:bc:37:0e:bb:9f:ac:25:82:34:99:c4:
84:8a:a0:4e:61:2b:17:9a:7f:0c:73:c4:ac:0f:e1:
5c:e7:83:f7:a3:cd:ee:53:33:a4:fd:29:84:27:e6:
1b:bc:2a:14:5e:4b:ea:d5:b6:31:9b:91:1e:58:d3:
04:23:a5:30:d1:67:45:fd:25:93:1e:d6:e0:b4:e7:
a4:0e:dd:61:d3:a5:02:4d:54:39:b7:6b:aa:d2:d6:
f9:20:ad:2f:7b:02:8f:d1:50:0d:42:60:86:9f:55:
cb:39:0b:d8:7e:c5:5b:65:2b:5f:f5:f5:8a:27:cc:
ca:22:81:9b:d8:46:b1:cd:6e:ee:2f:ba:9d:1e:57:
76:8c:69:1c:81:ba:a8:be:70:0a:a5:29:2a:9c:46:
6e:25:9d:cb:b2:e1:0b:46:e7:6a:01:fc:c3:bf:4c:
60:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:84:DF:45:55:D3:E8:FF:F6:04:A2:0D:9A:09:01:AA:14:F9:71:97
X509v3 Authority Key Identifier:
keyid:28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ff:98:04:3c:73:ad:ac:54:f4:a0:fa:de:85:d5:c4:cf:d8:
b7:97:e9:12:7c:a8:04:79:81:fa:c9:79:c0:64:67:65:ba:b6:
b8:9e:8e:db:f1:48:44:52:7a:d3:87:c0:c0:4c:f0:0d:b3:7c:
87:8f:3d:9c:cf:d1:ad:e0:40:23:12:bc:45:e1:46:62:37:e9:
bc:ed:f5:19:8a:a1:42:52:24:0c:00:46:ab:6d:68:d1:f6:3c:
b5:f2:d9:42:74:72:d7:26:c6:db:6f:ed:91:3c:53:47:00:64:
ea:f1:2e:09:eb:a7:70:7a:21:9c:cb:ea:ef:f6:a4:fa:7b:5f:
ab:86:27:08:6f:12:a9:e4:cc:82:a2:51:50:5e:c7:f5:fe:2e:
d0:d9:4d:a1:0b:bb:d9:68:8f:5e:40:9e:f8:4f:98:4e:6e:0a:
b9:6c:59:31:e6:3c:3e:7c:1b:66:e3:ee:c9:54:f9:36:57:b1:
0a:f8:ab:94:a7:63:28:02:84:5c:81:67:0f:91:f5:f7:5c:70:
9e:b9:20:f0:b2:40:0d:90:81:cf:93:b7:f0:8d:93:7f:85:12:
2d:fb:76:59:64:8a:c6:dc:53:4a:59:82:9c:7b:aa:01:dd:07:
56:42:5c:58:9f:81:b0:c4:14:57:7a:f1:68:0f:ed:7f:b0:6f:
55:b6:8a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:34:40 2026 by rpki-client