Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: wpwm+uJCIpfUjhvpKmhKqbjbaDFk85PR29ExHHreL8Q=
Subject key identifier: 2C:80:F4:0C:35:64:71:BA:BF:5C:5F:E1:0F:FE:8C:79:AD:62:E7:39
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 019DA30AC606776BF7BDE83A9BDA9CE4C531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0D2C
Signing time: Sun 19 Apr 2026 00:01:25 +0000
Manifest this update: Sun 19 Apr 2026 00:01:25 +0000
Manifest next update: Mon 20 Apr 2026 00:01:25 +0000
Files and hashes: 1: 6qGh1CWEL5urT7KqlTeQZmDgafw.roa (hash: OCUd2zNoXwmHcdVRlj45FZmejRsmzHfWho56l2ASAPc=)
2: 8xs8XCRJdNPyL9gpjmSYqUlvaDU.roa (hash: 5NXvRg6jd6XpCSNvlKufUP5Iq4iqGRVh+6EUgzg+7Wo=)
3: H8ur06ZzMoUo1Gt7mOEKMDQJafY.roa (hash: zkR8SvftOg6UL5t5sXessXOzxmjo2b7nS9dxJ1c+yR4=)
4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: yIq0P5zwV5PoX/yMYJEcVVBCcgTcgE4BlKqJ1Cp4zlI=)
5: YGGcoMwgnXgQhZlFiELK4BMadGs.roa (hash: YXm7yk6lZ9RL1Uc7MqGLkZ8Gibptwurwo1w5xqii1FU=)
6: dpXdts3AfZLIoFXIbwsOROmN3kw.roa (hash: uqPS9mBkXJrgKSVn6k1BG32CndZwaIOx9TRcsPuY0+4=)
7: sreC2wgD7tfWbcxeKGmM8jbVMK0.roa (hash: 3TdsfIYOJaGfNZoP9ydUNXZCTzbuK4Zf2Wc7FFSRaFU=)
8: upFBJ1-blKi1hPEsB5UUCJux19I.roa (hash: lAsTTr8C/PJQgbSJ4pgl6HP1xqpS4XO7lEwlziU+2A8=)
9: yjjbe9KP85kt8Ob2oDHDR9MXIMg.roa (hash: wJzFwpkYh/4OlhPxLRY+Af3Zi8uNHB0MPLWQeMahMl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:c6:06:77:6b:f7:bd:e8:3a:9b:da:9c:e4:c5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Apr 19 00:01:25 2026 GMT
Not After : Apr 20 00:01:25 2026 GMT
Subject: CN=2c80f40c356471babf5c5fe10ffe8c79ad62e739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0f:91:54:9b:2f:6f:55:1f:78:98:f7:c9:d7:
eb:f8:45:ba:cf:94:54:d3:05:19:a0:81:44:ec:81:
c3:fa:7e:dc:23:ab:5f:ab:b1:81:51:bc:7a:94:a8:
75:83:f8:62:e9:f8:72:5d:3c:d4:3d:6d:33:be:f7:
b9:54:72:06:cb:51:fd:9d:bf:bc:5d:95:a2:cf:45:
79:6d:67:5e:a9:44:d1:f1:26:10:5c:d3:6f:6d:21:
e0:58:4e:d2:45:94:aa:19:46:32:48:a3:02:fc:62:
e1:9b:23:bb:74:9d:12:3c:6a:02:9b:0f:ea:39:ed:
b0:52:67:b4:2b:52:69:2a:14:71:a9:29:05:6b:ca:
cb:60:7b:75:19:95:ce:fb:f3:82:b6:d0:8c:5e:26:
21:b2:5e:f8:22:f3:2d:4c:d2:b8:c1:54:b8:38:01:
15:29:b6:8c:4a:c9:d3:e7:a9:36:3f:e9:d7:e0:9e:
80:fb:5f:44:bc:fd:3c:d5:48:34:93:93:f6:65:c8:
76:ff:9a:43:bc:64:60:46:db:74:f0:22:fc:c0:e5:
6e:03:bd:19:87:9b:2e:2a:c3:18:8c:51:c6:f7:43:
35:c5:c6:af:b7:b0:34:67:78:b1:3e:b2:f2:46:ec:
8c:03:ff:1f:09:7b:87:60:25:2c:fd:3c:7e:0f:b7:
fb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:80:F4:0C:35:64:71:BA:BF:5C:5F:E1:0F:FE:8C:79:AD:62:E7:39
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:7f:32:a6:ad:66:44:26:a7:29:27:ef:91:6f:77:b1:8a:6d:
2f:2f:75:4d:c2:90:97:d5:35:51:0b:07:a2:72:c1:69:77:2a:
44:b5:d0:79:63:d9:30:f3:b0:77:0f:40:a6:ad:05:4a:f8:66:
d3:c5:67:d3:eb:7b:07:95:bf:d9:07:56:ad:c4:07:16:f0:b3:
81:70:7c:37:fa:33:08:fd:0e:cd:3b:4d:45:b4:54:bb:d8:9a:
7c:b8:4b:78:86:73:8e:96:5b:b2:bc:23:08:64:52:eb:3b:cd:
16:2b:44:2a:56:cc:23:3a:32:5e:6a:99:c7:fc:0e:d8:4a:c3:
8f:c2:b1:66:63:62:52:05:44:e7:b9:8b:81:ff:81:c3:06:6a:
58:c0:77:b5:f4:12:c3:9e:fc:d1:19:ff:28:ce:fb:95:3a:60:
ce:d8:b5:ea:89:0e:bb:a1:87:3d:59:75:f5:95:c8:e4:63:eb:
2d:53:c9:5d:e7:bf:6a:93:1a:79:94:e7:d9:67:cf:af:e6:da:
13:7b:97:26:07:56:dc:c6:ef:1d:7d:28:6e:44:50:14:78:e9:
f2:cd:4a:33:d2:d2:37:d6:12:18:a4:8f:94:7b:4a:70:fb:a4:
eb:ba:18:4e:69:15:29:6e:a2:91:10:02:8a:46:d7:63:e3:1f:
24:21:8c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:48 2026 by rpki-client