Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: NSlr9dgfE1qqU3Kumo2FNbDL1Z6mplXvLLLkJYuegx0=
Subject key identifier: 65:27:2F:EB:C0:A7:E1:53:F5:96:0F:67:67:80:B0:A7:41:67:5F:44
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 019CA9EAA70FD52992DFC1EDE9B3BE31FB88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0CAB
Signing time: Sun 01 Mar 2026 15:00:53 +0000
Manifest this update: Sun 01 Mar 2026 15:00:53 +0000
Manifest next update: Mon 02 Mar 2026 15:00:53 +0000
Files and hashes: 1: 6qGh1CWEL5urT7KqlTeQZmDgafw.roa (hash: OCUd2zNoXwmHcdVRlj45FZmejRsmzHfWho56l2ASAPc=)
2: 8xs8XCRJdNPyL9gpjmSYqUlvaDU.roa (hash: 5NXvRg6jd6XpCSNvlKufUP5Iq4iqGRVh+6EUgzg+7Wo=)
3: H8ur06ZzMoUo1Gt7mOEKMDQJafY.roa (hash: zkR8SvftOg6UL5t5sXessXOzxmjo2b7nS9dxJ1c+yR4=)
4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: +W2vYu2qDsAypSHdFtwAanlVnexWR9XvFs8WRIYKxEc=)
5: YGGcoMwgnXgQhZlFiELK4BMadGs.roa (hash: YXm7yk6lZ9RL1Uc7MqGLkZ8Gibptwurwo1w5xqii1FU=)
6: dpXdts3AfZLIoFXIbwsOROmN3kw.roa (hash: uqPS9mBkXJrgKSVn6k1BG32CndZwaIOx9TRcsPuY0+4=)
7: sreC2wgD7tfWbcxeKGmM8jbVMK0.roa (hash: 3TdsfIYOJaGfNZoP9ydUNXZCTzbuK4Zf2Wc7FFSRaFU=)
8: upFBJ1-blKi1hPEsB5UUCJux19I.roa (hash: lAsTTr8C/PJQgbSJ4pgl6HP1xqpS4XO7lEwlziU+2A8=)
9: yjjbe9KP85kt8Ob2oDHDR9MXIMg.roa (hash: wJzFwpkYh/4OlhPxLRY+Af3Zi8uNHB0MPLWQeMahMl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:a7:0f:d5:29:92:df:c1:ed:e9:b3:be:31:fb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Mar 1 15:00:53 2026 GMT
Not After : Mar 2 15:00:53 2026 GMT
Subject: CN=65272febc0a7e153f5960f676780b0a741675f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:82:08:eb:df:bc:cb:f8:c2:d1:13:8c:e6:
ac:d6:96:4e:58:93:76:5b:1f:cc:8a:cf:80:cf:0d:
7a:f2:13:ea:51:7c:61:63:dc:8b:63:14:b0:f5:a4:
66:f6:52:ed:60:74:66:48:86:b1:df:ea:53:e3:bf:
67:95:d4:8f:3e:c8:06:1d:25:27:7a:e9:35:b4:a4:
02:c3:04:eb:48:fd:69:23:6d:f6:84:63:8b:4a:8e:
0a:fb:e8:d7:63:bc:7b:72:b9:9d:2b:80:ce:a6:35:
24:a3:cf:6b:d4:7c:88:99:ed:9e:28:a4:ee:7f:3e:
7d:37:90:b3:e3:2e:86:a5:40:e7:8d:cf:b5:36:a6:
a0:e2:60:a5:c0:59:66:f4:4c:f2:c1:76:7d:41:e0:
d7:a7:eb:28:50:44:ac:98:7f:86:f2:40:22:9e:73:
8a:25:7c:d1:47:06:cc:5f:80:92:64:d4:49:a3:ac:
9f:03:8f:c1:19:06:6e:0b:61:06:a4:48:ca:fc:59:
9d:18:95:f4:2c:0c:f0:6e:82:e1:73:4e:a8:ba:e6:
f8:69:af:d8:f2:e4:c4:24:c2:36:d7:45:b2:e4:05:
0c:41:1d:7c:30:9f:b3:ec:8d:2c:be:eb:b8:43:7f:
0e:61:43:55:7d:4e:77:71:03:e9:2b:a9:c1:e5:d0:
c9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:27:2F:EB:C0:A7:E1:53:F5:96:0F:67:67:80:B0:A7:41:67:5F:44
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f6:85:54:91:46:41:bf:2d:4a:37:64:8d:2e:50:b4:b9:6b:
d0:4c:ff:7f:f3:c9:73:86:7e:a0:b5:f0:cc:61:21:13:2d:a0:
f5:1a:fd:84:4a:8f:09:bb:76:e4:01:8d:f1:a5:3c:1f:06:30:
6a:f3:24:37:9f:97:ae:1d:1c:b9:07:b1:54:3a:5e:55:b4:27:
fc:89:b3:b4:52:4a:fa:43:3e:74:a5:ae:f4:9b:4c:d1:d2:ec:
c1:51:65:e5:06:58:53:6b:62:2a:a7:5b:a8:9f:99:28:f3:91:
10:3d:3c:37:76:5b:ce:62:e1:a3:04:f2:c4:1b:8a:b5:ad:a8:
f3:a5:cd:9e:eb:1a:bb:90:96:ea:76:1f:f4:18:1b:a0:03:51:
1a:0f:f3:52:8c:1b:82:65:db:5e:2e:5c:2b:69:99:17:d9:fc:
bb:0c:d8:26:11:a7:2f:4f:90:9c:bf:07:f6:54:2d:43:35:82:
c8:78:df:3a:af:a8:29:c2:cc:5a:99:f2:8c:0a:be:3f:07:08:
56:28:d6:92:9b:f8:7b:79:6a:fb:f6:8f:cb:f7:01:7e:fc:c1:
9d:cf:9a:11:a5:fc:0c:78:62:3d:d0:92:3d:64:f5:fa:8c:0d:
40:73:39:a5:d3:b3:8f:b1:ad:9a:45:22:d7:67:b0:fc:1b:a8:
d3:9c:69:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:24:11 2026 by rpki-client