Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: InId9eWJpJRmXxmohSIHAvtrWu9JPWD1GmnmTFmsG1I=
Subject key identifier: 86:55:33:CB:56:9E:54:3F:33:29:E0:CD:E9:A4:11:91:3A:B1:69:15
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 019FA9E268A0FA0A8F6C0B90619D23915F29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0E3B
Signing time: Tue 28 Jul 2026 18:00:15 +0000
Manifest this update: Tue 28 Jul 2026 18:00:15 +0000
Manifest next update: Wed 29 Jul 2026 18:00:15 +0000
Files and hashes: 1: 29v_UvGTzrv0FNNyLrzzEifxUDQ.roa (hash: JBQnXvjqAFsHEoG0C+AGJp4xr36OJCXqWBYzwVT8SB4=)
2: 6qGh1CWEL5urT7KqlTeQZmDgafw.roa (hash: OCUd2zNoXwmHcdVRlj45FZmejRsmzHfWho56l2ASAPc=)
3: ERqoMB1EdTu-WuTzFfa9zq0xENU.roa (hash: JBCpcS00xzJTn3hkHBlQy1mjAraFDf4IIBmEBDuwd58=)
4: H8ur06ZzMoUo1Gt7mOEKMDQJafY.roa (hash: zkR8SvftOg6UL5t5sXessXOzxmjo2b7nS9dxJ1c+yR4=)
5: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: EaUxHPgHYmvSy2KI8P0ZzV8IfBetbk01Ko7U1o3p+as=)
6: YGGcoMwgnXgQhZlFiELK4BMadGs.roa (hash: YXm7yk6lZ9RL1Uc7MqGLkZ8Gibptwurwo1w5xqii1FU=)
7: sreC2wgD7tfWbcxeKGmM8jbVMK0.roa (hash: 3TdsfIYOJaGfNZoP9ydUNXZCTzbuK4Zf2Wc7FFSRaFU=)
8: yjjbe9KP85kt8Ob2oDHDR9MXIMg.roa (hash: wJzFwpkYh/4OlhPxLRY+Af3Zi8uNHB0MPLWQeMahMl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:68:a0:fa:0a:8f:6c:0b:90:61:9d:23:91:5f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Jul 28 18:00:15 2026 GMT
Not After : Jul 29 18:00:15 2026 GMT
Subject: CN=865533cb569e543f3329e0cde9a411913ab16915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:10:c9:9d:64:c7:a6:67:bd:46:fd:f4:2f:8f:
1a:a5:06:d0:ca:80:39:a8:c5:d8:8b:a8:66:18:df:
1a:fb:5c:0a:e1:37:04:f9:a9:7d:59:91:2f:74:4b:
7e:78:19:ec:2a:43:6d:02:04:66:07:de:3e:60:94:
21:7d:f0:50:06:44:ed:b8:ba:55:cb:42:cd:02:b3:
71:5f:e1:df:cb:65:9a:74:62:ab:19:cb:71:1b:9b:
9a:cc:58:a9:c7:5c:01:66:aa:1f:3a:bd:95:6e:4e:
07:d6:f5:8a:3e:74:69:62:dc:60:c9:4e:c3:45:03:
cc:45:c4:d6:8a:fb:7d:19:0f:5f:c0:93:db:76:76:
86:7c:c9:99:cc:d8:92:93:7e:98:b6:0f:4e:c6:22:
8b:7c:cb:ee:7c:d2:44:ef:0f:ef:9c:af:f7:b4:24:
00:d5:30:a8:d9:e5:d8:fa:ee:13:c8:80:db:08:49:
ca:ac:ac:7b:2f:b6:62:d1:c9:e3:81:e5:6a:14:69:
83:00:df:d2:a9:72:b7:a8:60:df:68:6f:e6:6a:e3:
6d:67:4e:7d:74:6d:70:30:3d:c3:a4:74:5f:2f:76:
4d:5e:9c:1e:f7:f1:91:64:55:40:ac:ea:73:50:a6:
64:6d:0c:a2:b2:46:12:a1:55:28:15:bb:28:79:d5:
62:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:55:33:CB:56:9E:54:3F:33:29:E0:CD:E9:A4:11:91:3A:B1:69:15
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:49:ba:a3:80:67:c3:de:36:66:49:53:28:11:b5:4a:8f:05:
94:48:3d:45:e6:36:3e:17:08:2e:9c:7b:20:65:7e:94:81:2e:
ba:1d:2f:39:2b:ee:91:4a:c9:cd:35:29:ea:e6:3b:c4:82:e8:
bf:1b:ad:bb:57:75:6b:39:07:6f:0c:a2:f6:08:a6:d6:98:a9:
7d:de:da:74:9d:24:3a:0e:cb:18:da:ab:9c:93:c5:b9:c6:e4:
09:43:26:96:4c:cb:97:17:dc:01:23:60:d5:f1:be:2e:f3:49:
ff:74:26:e5:8b:f8:cd:24:48:0a:2e:79:73:64:4a:30:28:4c:
57:b8:e8:3b:50:7f:86:2f:9f:19:af:fe:8f:cd:ac:57:10:67:
cc:bf:68:ed:ae:85:51:53:f9:12:aa:31:3b:6a:02:01:a0:b2:
c6:d9:0b:59:d6:8c:6f:a2:0d:fd:f9:6f:d6:28:32:1f:19:4b:
1a:8f:e2:37:d4:b0:13:6f:2e:3f:57:b0:8f:cc:97:37:75:af:
1e:a5:c2:b1:49:fa:29:4b:aa:6c:01:d2:c4:10:5a:05:f9:2c:
fa:c5:39:ca:dd:36:6b:9b:0d:55:95:5b:14:4a:28:7b:69:28:
29:62:2b:98:b6:a6:13:7b:50:01:b4:0a:24:04:93:7d:b6:01:
56:ab:e5:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:44:49 2026 by rpki-client