Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: RW1JK9x/w1nJ3guNcYvZj6Xf59/hsWJGDnfsZNW6IO0=
Subject key identifier: FA:3E:A4:70:D2:CD:1C:72:A4:7E:C4:39:FC:F6:51:EE:99:51:69:D2
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 019EC0DACE9E40C86D7429EF87EC2207A920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0DC0
Signing time: Sat 13 Jun 2026 12:00:25 +0000
Manifest this update: Sat 13 Jun 2026 12:00:25 +0000
Manifest next update: Sun 14 Jun 2026 12:00:25 +0000
Files and hashes: 1: 6qGh1CWEL5urT7KqlTeQZmDgafw.roa (hash: OCUd2zNoXwmHcdVRlj45FZmejRsmzHfWho56l2ASAPc=)
2: 8xs8XCRJdNPyL9gpjmSYqUlvaDU.roa (hash: 5NXvRg6jd6XpCSNvlKufUP5Iq4iqGRVh+6EUgzg+7Wo=)
3: H8ur06ZzMoUo1Gt7mOEKMDQJafY.roa (hash: zkR8SvftOg6UL5t5sXessXOzxmjo2b7nS9dxJ1c+yR4=)
4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: lKiGR9QaeOy8GzPQ1d+ogyMJ0MKB5cJRrGADdp82W4s=)
5: YGGcoMwgnXgQhZlFiELK4BMadGs.roa (hash: YXm7yk6lZ9RL1Uc7MqGLkZ8Gibptwurwo1w5xqii1FU=)
6: dpXdts3AfZLIoFXIbwsOROmN3kw.roa (hash: uqPS9mBkXJrgKSVn6k1BG32CndZwaIOx9TRcsPuY0+4=)
7: sreC2wgD7tfWbcxeKGmM8jbVMK0.roa (hash: 3TdsfIYOJaGfNZoP9ydUNXZCTzbuK4Zf2Wc7FFSRaFU=)
8: upFBJ1-blKi1hPEsB5UUCJux19I.roa (hash: lAsTTr8C/PJQgbSJ4pgl6HP1xqpS4XO7lEwlziU+2A8=)
9: yjjbe9KP85kt8Ob2oDHDR9MXIMg.roa (hash: wJzFwpkYh/4OlhPxLRY+Af3Zi8uNHB0MPLWQeMahMl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:ce:9e:40:c8:6d:74:29:ef:87:ec:22:07:a9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Jun 13 12:00:25 2026 GMT
Not After : Jun 14 12:00:25 2026 GMT
Subject: CN=fa3ea470d2cd1c72a47ec439fcf651ee995169d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:12:67:02:7d:72:04:9e:e0:52:15:c8:c0:
8e:1b:3a:45:a8:80:d9:19:d7:0d:43:be:8f:9a:5a:
67:fa:48:4f:60:03:b3:ba:32:5e:25:f7:dc:1b:79:
5f:ff:10:bd:12:24:bb:37:ec:bb:a5:db:a4:2c:d2:
5e:3f:47:5a:0f:80:5c:39:59:15:06:35:4e:4c:8c:
35:7b:56:97:22:e8:fa:74:c5:bf:1c:76:ee:ec:4e:
0f:65:e4:30:c7:e4:39:7e:a2:fd:ae:39:e3:ad:bd:
84:a2:10:29:7c:83:da:72:de:a8:a3:66:d0:a2:1e:
3c:45:03:42:07:99:91:eb:01:03:94:f5:42:a5:11:
55:3d:45:d0:f8:1b:89:cc:71:16:64:31:a1:4d:de:
e7:34:c2:fb:c7:f3:f3:b4:ad:e6:95:0c:6b:c0:1b:
6f:ad:a6:48:59:71:29:1d:84:b9:1e:08:a0:41:ea:
fc:42:45:08:24:f8:e2:80:30:60:29:a9:9f:53:8c:
c1:d4:50:06:d6:0d:6f:92:45:c8:c1:c7:30:73:05:
38:1e:9c:ba:58:f8:f4:30:5d:e8:46:7b:1c:d9:40:
2d:cc:d0:72:0e:17:a6:21:fd:72:9e:82:00:b8:d1:
b2:50:ad:25:ad:d6:ff:17:ae:cd:74:fc:6f:a1:d8:
39:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3E:A4:70:D2:CD:1C:72:A4:7E:C4:39:FC:F6:51:EE:99:51:69:D2
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a7:cd:bb:c0:56:cb:a8:5b:12:ea:01:82:bc:24:4f:33:71:
3a:54:ea:f1:74:fa:f7:af:bd:ad:c6:75:08:2b:ea:eb:c0:70:
ee:99:d7:a1:5c:04:07:61:7e:0e:23:c1:29:fb:14:04:d7:ac:
f5:b7:cd:07:fe:c9:da:06:12:46:72:02:16:2a:09:13:19:d8:
f1:c7:6b:ab:c2:fa:7e:50:f3:93:75:01:d8:91:ae:c2:bf:7b:
a5:c5:e5:90:40:06:d5:02:e8:c0:76:29:c6:67:b3:95:7f:64:
f3:17:18:21:51:92:a5:62:3f:02:c9:a9:9f:f2:1c:e1:9a:68:
0c:dc:bb:43:e1:d0:b5:c7:83:ac:66:29:19:d8:fe:5a:17:dc:
cf:d9:4f:1e:46:29:e5:ee:6f:a6:b7:c3:97:20:84:4d:db:b4:
6f:cd:f3:a7:18:83:78:07:24:1d:34:c3:c5:9a:52:11:bc:c7:
85:9a:d5:8d:af:e7:da:94:80:dc:c1:62:e3:17:68:84:31:82:
64:02:e7:95:4c:4d:30:64:b6:9e:3d:f0:4f:ef:0d:84:77:88:
7a:0c:58:a0:fa:aa:b1:4d:e7:e2:54:25:25:f2:79:6b:cc:0f:
8d:69:95:6b:27:5a:7e:93:08:86:51:89:7c:0b:e4:70:02:b6:
62:4f:8a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:49:24 2026 by rpki-client