Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
File: KL69RlhhhHPtTIN2fFHejiM8MpI.mft (raw, json)
Hash identifier: Zy6BiAnj6+bX40gDMfcyR/PAh2Svb0KfIAStQMvm3bE=
Subject key identifier: C8:B3:D2:B2:1A:1F:10:2F:E1:DE:9D:53:85:B5:96:54:32:1D:94:3D
Authority key identifier: 28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
Certificate issuer: /CN=28bebd4658618473ed4c83767c51de8e233c3292
Certificate serial: 019CABA1E7C1662FACB0EEB5649ACF8FE19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
Manifest number: 11C4
Signing time: Sun 01 Mar 2026 23:00:40 +0000
Manifest this update: Sun 01 Mar 2026 23:00:40 +0000
Manifest next update: Mon 02 Mar 2026 23:00:40 +0000
Files and hashes: 1: KL69RlhhhHPtTIN2fFHejiM8MpI.crl (hash: cekiKmKSZGlKoqUEwQeIDeRfyo7NOxgItnhle2nfiFY=)
2: NNW9fBL9fFAJGVwGGKC0u4xaMBk.roa (hash: QeuasZLkGWjhmBmI2lmaeg2T0aIzvZFSj+N457z3Xik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:e7:c1:66:2f:ac:b0:ee:b5:64:9a:cf:8f:e1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bebd4658618473ed4c83767c51de8e233c3292
Validity
Not Before: Mar 1 23:00:40 2026 GMT
Not After : Mar 2 23:00:40 2026 GMT
Subject: CN=c8b3d2b21a1f102fe1de9d5385b59654321d943d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:19:10:53:98:d1:1f:bc:be:f4:17:58:e6:1f:
2c:c6:26:b4:fb:bf:88:0e:78:1f:39:64:36:49:ff:
5c:f0:c8:c4:51:9a:6c:8f:4f:eb:96:b6:b2:20:a0:
af:d6:47:f4:37:f2:1b:5c:60:7f:85:3d:47:c3:9a:
52:75:8f:2a:6f:53:50:72:6c:1e:c0:d6:92:39:b0:
8b:d9:b0:55:e3:51:2d:8c:6f:82:da:d6:b2:5e:20:
5c:7a:d1:40:db:4d:c8:48:85:c6:94:28:27:35:5e:
09:7f:a7:a5:3c:00:35:51:76:5e:3f:f2:5f:71:ed:
72:96:2f:5f:42:ae:ca:ca:40:26:1b:03:43:6c:73:
79:b3:77:29:87:98:9c:a9:fc:3c:81:c2:19:19:31:
0f:7a:ff:cc:0d:bd:8a:60:7f:17:81:51:c1:9f:f4:
53:b0:c6:eb:7f:23:35:98:84:b1:8d:3d:a7:f1:55:
04:44:5a:de:20:69:15:da:9c:37:5e:5b:5d:21:37:
91:11:81:5b:e9:b6:90:d0:1f:fa:52:a3:df:52:12:
9c:b5:16:e0:64:0e:1d:ee:4c:3f:d8:bb:bd:ca:71:
60:fd:36:48:fd:a1:50:9e:e9:a0:fd:47:af:c1:2d:
08:8c:14:7c:a1:94:6e:e0:46:a8:50:f7:35:fa:27:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B3:D2:B2:1A:1F:10:2F:E1:DE:9D:53:85:B5:96:54:32:1D:94:3D
X509v3 Authority Key Identifier:
keyid:28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:cb:02:c4:9b:1d:c6:6d:46:61:2b:e4:f4:5c:00:74:9e:72:
31:93:30:87:7b:cf:86:3a:00:7c:6e:56:42:33:05:6b:de:96:
ee:e1:03:54:7f:f7:22:29:8a:b1:7f:24:a8:ce:8c:9b:d0:27:
26:b9:f7:3a:2b:c3:01:84:00:fb:a2:c6:9d:bb:4b:eb:eb:71:
f5:e8:12:bb:8d:98:b7:68:ae:12:29:74:78:4f:42:25:bc:a2:
37:aa:75:64:9c:4b:58:2c:e0:3d:de:69:63:7b:df:81:06:2a:
ee:c4:f5:c0:d7:4a:fb:46:1c:8e:07:c6:b6:dc:67:f7:1a:00:
75:1f:43:2f:ca:96:59:bb:77:d3:d1:69:d8:4d:32:8c:6c:fe:
41:2a:52:85:f0:ef:78:d5:b6:21:90:59:86:dd:70:3b:5b:10:
c8:5b:3d:cc:bb:0c:75:a8:84:8b:ce:3f:1d:fb:37:5a:45:0a:
4e:f4:b5:2a:74:11:4b:7b:b3:2f:66:96:6b:49:ea:e1:58:b3:
fc:5c:df:e0:77:10:ce:16:40:93:df:fd:ee:9d:48:e3:7c:e2:
85:56:36:bd:e0:43:93:e3:72:c7:c1:37:9c:e6:8d:df:4a:2c:
5c:3e:24:66:81:4c:4c:25:bd:50:17:77:49:86:85:c9:38:42:
60:d5:e6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:05 2026 by rpki-client