Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
File: KL69RlhhhHPtTIN2fFHejiM8MpI.mft (raw, json)
Hash identifier: UXpNfqhCe/Y7llrD/4FCoM9gjmP+FbZHOHsqZKKYLxY=
Subject key identifier: 56:F8:F8:50:4A:39:5F:99:4A:61:CF:9D:18:B0:83:29:37:91:BF:71
Authority key identifier: 28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
Certificate issuer: /CN=28bebd4658618473ed4c83767c51de8e233c3292
Certificate serial: 01A0D3B8CBAAD98C9BF6664C79AEDEDC6F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
Manifest number: 13EB
Signing time: Thu 24 Sep 2026 14:01:38 +0000
Manifest this update: Thu 24 Sep 2026 14:01:38 +0000
Manifest next update: Fri 25 Sep 2026 14:01:38 +0000
Files and hashes: 1: KL69RlhhhHPtTIN2fFHejiM8MpI.crl (hash: 8HNPpzxdL/AEw/tAnlsH2L8Zwlxy9fMXXoJhNa0bnS4=)
2: NNW9fBL9fFAJGVwGGKC0u4xaMBk.roa (hash: QeuasZLkGWjhmBmI2lmaeg2T0aIzvZFSj+N457z3Xik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:cb:aa:d9:8c:9b:f6:66:4c:79:ae:de:dc:6f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bebd4658618473ed4c83767c51de8e233c3292
Validity
Not Before: Sep 24 14:01:38 2026 GMT
Not After : Sep 25 14:01:38 2026 GMT
Subject: CN=56f8f8504a395f994a61cf9d18b083293791bf71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:75:d9:76:50:13:4f:db:0d:84:e3:a0:c5:02:
7e:1a:7a:fd:8d:96:60:e0:ca:50:70:18:75:f0:eb:
92:fe:fa:e6:f4:f1:42:6b:27:29:ad:f1:39:ad:7b:
e0:c9:74:bf:b5:6c:be:1b:e8:fc:cb:20:1e:f0:9c:
a9:1d:23:3e:e6:29:18:5f:d5:35:c0:f1:14:b9:ec:
cb:15:e4:71:cc:b7:2e:56:c5:5b:ed:e2:69:82:c9:
75:b4:d6:52:90:66:5f:72:6d:16:1b:8a:c3:63:0c:
5b:c6:fc:bb:fd:f6:12:11:bd:8d:ba:14:7f:d9:58:
4d:93:a8:06:ec:3c:92:0f:c7:52:3b:c9:71:04:6e:
0f:87:98:ad:07:4e:2a:b8:cd:29:02:ec:fc:00:e2:
07:3b:03:a7:28:46:21:4c:77:0b:e8:62:30:32:6c:
a7:0f:2b:be:f9:11:9f:92:ce:47:21:ba:c2:4d:2d:
84:6a:b8:48:66:af:da:cc:29:3a:c1:9e:2d:26:d3:
af:54:67:28:ba:8b:61:f0:f1:e7:80:5a:b6:98:33:
ed:6d:ce:81:da:cc:18:1a:02:55:20:ed:a0:ae:4a:
a2:a8:47:16:51:cc:91:69:0c:97:0a:ad:26:c3:76:
99:ee:0e:4a:f3:3b:9e:1e:f6:f5:8f:ce:9e:bf:5c:
9b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F8:F8:50:4A:39:5F:99:4A:61:CF:9D:18:B0:83:29:37:91:BF:71
X509v3 Authority Key Identifier:
keyid:28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:7b:7a:57:25:90:7b:9d:ec:65:74:49:3f:a7:d9:3e:3e:3a:
85:d6:7a:7c:9b:c7:98:ac:5b:6c:50:e9:8e:a8:b9:3a:f3:96:
55:3a:3b:a2:f6:da:12:62:fa:30:d6:af:d1:98:0e:5c:3d:b1:
2e:f6:0d:80:fd:ac:c5:b5:f9:eb:7e:58:eb:80:f0:62:8e:16:
53:27:18:09:a3:10:e7:48:65:fb:d7:ba:66:c7:84:bf:79:24:
15:9d:ce:c8:b7:87:35:65:89:72:e9:36:d3:1c:d1:da:88:aa:
d8:e4:8b:f4:12:bf:b1:49:d1:53:7f:4b:9b:cd:04:c4:e2:52:
26:9a:68:2d:69:61:11:fd:ad:3b:7f:4f:22:fa:a4:3a:b7:23:
3b:d8:54:d5:b8:26:76:5c:c3:5c:40:0f:e9:b2:d7:f4:12:6a:
82:22:b4:3d:d7:5c:a2:79:d4:5b:2c:35:c4:66:2b:7e:bc:74:
8e:30:f0:de:be:39:66:3d:06:9d:f0:53:10:2d:49:1d:29:4d:
89:c0:2c:0f:a8:b6:0e:3f:d6:79:5f:46:73:f3:67:dd:4c:65:
00:ed:dd:b8:b6:9e:44:d5:0f:35:58:b7:6d:0e:56:a3:0c:e8:
57:4f:8a:17:28:3e:68:63:61:1a:1f:06:b7:68:3a:1a:81:27:
3e:c5:b1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:47:45 2026 by rpki-client