Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: Do2Yghgx06nIUzJHQwNtni4r5nZtPHR3IG/jGF5MK7I=
Subject key identifier: 43:13:73:3B:B2:E7:85:C9:3A:7D:5B:68:EC:01:D6:26:B8:2E:C8:EB
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 01A0D15C106E1E418E74B3763A1C651B2F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0ED4
Signing time: Thu 24 Sep 2026 03:01:06 +0000
Manifest this update: Thu 24 Sep 2026 03:01:06 +0000
Manifest next update: Fri 25 Sep 2026 03:01:06 +0000
Files and hashes: 1: 29v_UvGTzrv0FNNyLrzzEifxUDQ.roa (hash: JBQnXvjqAFsHEoG0C+AGJp4xr36OJCXqWBYzwVT8SB4=)
2: 6qGh1CWEL5urT7KqlTeQZmDgafw.roa (hash: OCUd2zNoXwmHcdVRlj45FZmejRsmzHfWho56l2ASAPc=)
3: ERqoMB1EdTu-WuTzFfa9zq0xENU.roa (hash: JBCpcS00xzJTn3hkHBlQy1mjAraFDf4IIBmEBDuwd58=)
4: H8ur06ZzMoUo1Gt7mOEKMDQJafY.roa (hash: zkR8SvftOg6UL5t5sXessXOzxmjo2b7nS9dxJ1c+yR4=)
5: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: 9htj8RJuI3rWJUzF/SVY2FtN/1kcmErFL+4QmVsveyQ=)
6: YGGcoMwgnXgQhZlFiELK4BMadGs.roa (hash: YXm7yk6lZ9RL1Uc7MqGLkZ8Gibptwurwo1w5xqii1FU=)
7: sreC2wgD7tfWbcxeKGmM8jbVMK0.roa (hash: 3TdsfIYOJaGfNZoP9ydUNXZCTzbuK4Zf2Wc7FFSRaFU=)
8: yjjbe9KP85kt8Ob2oDHDR9MXIMg.roa (hash: wJzFwpkYh/4OlhPxLRY+Af3Zi8uNHB0MPLWQeMahMl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5c:10:6e:1e:41:8e:74:b3:76:3a:1c:65:1b:2f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Sep 24 03:01:06 2026 GMT
Not After : Sep 25 03:01:06 2026 GMT
Subject: CN=4313733bb2e785c93a7d5b68ec01d626b82ec8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:e0:86:0e:d5:23:a4:60:bd:99:a7:7a:a8:
dc:e9:ad:78:8d:6f:31:c8:b9:06:8d:2e:a5:65:d7:
e6:bd:81:cd:2b:01:79:b4:20:0f:bc:23:b0:eb:8d:
d4:f9:82:ab:a5:8a:15:88:c9:a9:c9:a1:24:36:ba:
dc:60:01:5c:a4:cb:06:cc:db:db:78:d5:29:af:bb:
ad:0c:c8:de:60:a8:0f:17:cb:f8:ef:61:2e:79:79:
03:1d:e9:d6:5c:dd:1b:87:6a:ee:b3:41:50:30:a0:
09:12:41:14:86:e5:e0:e8:e2:36:8f:26:e5:4e:f2:
cd:eb:b9:d1:04:8e:66:ea:53:f6:15:f5:b1:f7:c9:
ad:35:5b:c7:2a:fe:d5:7b:be:d2:5e:9a:ce:c2:5f:
c5:3e:af:22:20:29:34:ab:cd:b2:b8:57:02:f8:97:
9b:12:9e:82:0a:b5:4d:b4:e4:c0:f2:47:e1:23:e5:
03:19:51:f1:77:3e:80:dd:95:ff:d5:f8:60:e4:0e:
91:a6:bc:37:c0:5c:bc:d1:e3:3b:88:2f:38:e4:71:
77:80:14:31:de:39:79:fb:40:75:98:3f:fc:36:74:
77:07:95:41:41:bf:5a:45:92:55:f6:19:10:d9:00:
df:60:4a:34:4e:6e:16:88:d4:84:ce:9d:52:63:e8:
c1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:13:73:3B:B2:E7:85:C9:3A:7D:5B:68:EC:01:D6:26:B8:2E:C8:EB
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f0:e8:d4:63:b7:f4:59:bd:3d:14:df:1f:a7:5e:d9:80:40:
39:7d:fd:cc:c7:56:23:a3:e7:24:39:f6:4b:6d:aa:f2:49:a4:
bf:bd:2f:6b:5d:4f:e5:fa:e2:f1:63:4e:3f:bd:71:28:98:12:
97:25:6a:e7:d7:c0:83:02:f6:50:87:1c:95:b8:89:93:20:13:
23:3c:1c:31:5f:9e:94:49:b4:2f:68:d0:00:22:36:10:c7:29:
d3:35:68:f4:c4:87:de:d7:22:da:f3:1b:db:c4:0b:84:ae:4c:
77:c4:ac:6c:16:1c:82:36:c7:6d:1b:d4:6c:0c:dc:1c:42:3c:
b0:f6:df:78:b7:76:b3:00:b0:d1:dc:40:3e:00:3a:dd:75:34:
aa:df:4e:fe:af:b5:9f:a7:a0:cb:65:00:60:f3:e5:70:db:43:
d2:65:e1:f3:60:c9:88:f9:97:e9:ea:46:71:c3:0f:67:cb:fe:
a2:91:82:f9:80:36:41:08:9d:a7:ee:50:17:45:c3:c0:79:5f:
78:bc:fa:a2:ef:2b:5e:e8:93:f8:1e:16:ca:3a:00:a8:34:43:
46:b0:3a:2b:aa:a3:18:a0:e6:9e:a8:cc:41:e8:d1:08:b2:49:
81:d5:45:70:eb:0d:d6:7e:44:aa:aa:1e:93:d1:ad:dd:89:51:
4e:c3:7e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:07:02 2026 by rpki-client