Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier: AGA+bSPC5c+o/eZLVXVwdHhjAGnOZAKdwK2iGylV0fE=
Subject key identifier: 12:AD:18:F4:EC:B3:B0:ED:85:DD:DE:4A:02:99:E0:EF:5D:AA:4E:D8
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 019FA9AC012EA9AE7013B5AF51D11A4A9E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number: 0EF0
Signing time: Tue 28 Jul 2026 17:00:49 +0000
Manifest this update: Tue 28 Jul 2026 17:00:49 +0000
Manifest next update: Wed 29 Jul 2026 17:00:49 +0000
Files and hashes: 1: 1ObfCdLE7dKk-d-Joasz4Il0A1o.roa (hash: p/QxJngDf+aUBVUX1Y9rupN0VdWFzSbmnVUDpsP2Y34=)
2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: 1MuQrbfmz5ywUaL0oKueAvQCMrMjkJsyer8PrZJR9C8=)
3: h28P9psTB0BJCTdOtSuL769CZEY.roa (hash: WnzE0ULZO+Ns9cDIOM8A2gQx3rSBVndAJ664fi5lHZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:01:2e:a9:ae:70:13:b5:af:51:d1:1a:4a:9e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Jul 28 17:00:49 2026 GMT
Not After : Jul 29 17:00:49 2026 GMT
Subject: CN=12ad18f4ecb3b0ed85ddde4a0299e0ef5daa4ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:a5:e6:47:22:a1:50:fc:65:5b:61:a1:f0:
5b:a1:4b:65:49:51:18:86:9a:72:3c:8c:ac:2a:49:
0f:1b:01:c5:1c:87:05:c2:c7:50:80:8e:53:06:41:
4b:63:03:0f:2b:d9:0e:dd:3f:10:9c:5d:7d:94:0d:
b2:bf:3f:24:63:b2:6f:ce:0c:c8:27:3e:84:2a:93:
36:c3:b7:34:ae:c2:9e:7e:53:cd:e0:1a:bb:50:c1:
17:27:40:54:2e:eb:95:5f:27:de:86:50:3e:4b:32:
f5:c2:eb:fa:14:2c:72:d6:d6:25:97:11:04:33:f0:
67:5c:55:d9:de:cc:50:c9:d4:c2:e3:33:6b:36:3c:
c6:bc:90:57:46:47:b4:48:cf:94:4e:f5:ab:bd:ce:
54:d1:2e:48:a0:f1:7d:f3:87:3b:24:44:43:55:44:
bb:f1:13:17:46:23:a0:d3:30:49:2c:98:70:7a:6f:
25:80:3c:33:96:0d:be:6f:3b:fd:7b:1e:18:c7:29:
fa:f4:31:9d:b7:af:f2:0d:35:a4:3e:cb:8a:a9:74:
a3:18:3c:ba:70:c1:ad:f9:44:a5:e0:1c:d6:ba:7f:
33:e7:ea:bd:80:10:8f:54:81:26:da:59:44:aa:7a:
0b:b1:59:f2:8d:52:a5:76:1b:60:e3:11:fa:65:f9:
19:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AD:18:F4:EC:B3:B0:ED:85:DD:DE:4A:02:99:E0:EF:5D:AA:4E:D8
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e8:bb:25:8d:51:d5:e2:32:4a:51:36:41:64:b3:d1:ac:7c:
4b:82:20:0d:19:c6:fc:6e:5c:8b:60:b2:29:71:1e:20:50:76:
fc:8b:b1:b4:31:6d:29:f0:48:64:0a:9f:cb:f9:c6:08:b9:b9:
73:ca:a7:28:43:5c:e0:8b:9e:27:a7:91:75:4a:1d:c0:6e:cc:
bd:00:e6:3f:72:9b:e5:b2:0c:b6:c9:11:92:62:c0:0e:8e:4a:
f1:d4:0f:37:05:8e:c1:ca:1d:c3:b5:83:bf:b9:79:4f:ab:5e:
aa:15:b6:ef:74:8a:68:fe:44:57:1c:d6:2f:9a:13:d7:f5:74:
9e:87:ea:0f:fb:46:cf:d4:bd:84:69:00:38:48:10:ca:88:02:
5a:61:8f:2d:a2:35:62:bf:cd:3e:ed:b8:02:25:3b:66:99:ab:
4c:e8:5a:01:5a:60:24:d4:88:06:b2:d7:70:07:9c:38:8d:06:
11:70:a2:21:59:04:d8:47:73:f4:6e:8b:a6:49:8c:ee:ed:c5:
79:a1:e5:46:ff:3a:8c:8c:45:05:f7:a1:d8:36:f5:f4:7e:8d:
fa:72:a3:ff:00:20:1f:ec:44:2c:70:5b:50:fd:04:a7:4d:15:
fc:19:86:86:9b:72:9a:13:b4:af:98:55:26:b8:e6:c4:b6:f9:
08:7b:5d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:32:40 2026 by rpki-client