Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
File: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json)
Hash identifier: MGT1dLrWf7RbsKG21r4JxIAoQxv/rJatewohuMEdn+Q=
Subject key identifier: B0:2D:F2:EA:54:BA:70:6F:FD:84:F7:70:7C:24:98:86:B4:11:81:8D
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial: 019CACEBDAA8EBC7711F0D98F15380557289
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
Manifest number: 0FD2
Signing time: Mon 02 Mar 2026 05:01:03 +0000
Manifest this update: Mon 02 Mar 2026 05:01:03 +0000
Manifest next update: Tue 03 Mar 2026 05:01:03 +0000
Files and hashes: 1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: 96HDPvb3S0K+IJIGKW/pT8oR34uCih7wCuKK2uJZzvY=)
2: OQqEEAJAiPU1Ypg4_ug8x9-Hajs.roa (hash: SD+uKA8/a0U2/wxdSCNkq74UMq0JRQPbJacchqGYw20=)
3: glf2RLsF1blKne8DsYrjLp0dv0E.roa (hash: 9xOA/W8QJQTfjVt2oAPBotD9rA+lAklAdSAciHQpc54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:da:a8:eb:c7:71:1f:0d:98:f1:53:80:55:72:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
Validity
Not Before: Mar 2 05:01:03 2026 GMT
Not After : Mar 3 05:01:03 2026 GMT
Subject: CN=b02df2ea54ba706ffd84f7707c249886b411818d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0c:e9:be:bf:f5:6e:86:05:00:1a:09:64:32:
b4:17:7a:fc:cb:fe:d8:9e:1b:5c:a1:f8:4c:a4:77:
7f:f9:be:a3:5b:cf:f5:03:7f:83:64:14:c7:45:9e:
76:58:6b:93:db:ee:e7:ba:95:a5:d2:8a:38:3e:16:
f8:41:5a:af:5e:a0:32:ca:12:7d:d2:cd:5f:a9:ff:
00:60:f9:2a:95:13:97:4a:d0:f2:17:e3:9e:e9:02:
36:24:a2:43:12:c9:07:5d:28:6e:70:3f:d9:e8:a7:
a3:b6:34:c6:bd:4b:a7:26:03:a1:62:50:a8:e8:b0:
f7:d4:8a:e5:be:58:c7:8d:38:5b:63:8e:07:5c:7b:
c6:31:3f:7f:77:42:5d:0e:a5:c6:30:7c:10:f6:06:
a8:30:18:db:f4:da:8c:83:db:cb:dc:98:d1:a9:80:
53:dd:2b:9b:94:2d:7a:ec:fd:ea:3e:c3:60:fc:4f:
c5:38:45:04:f9:e0:60:07:2f:23:3c:1c:93:d7:07:
8e:24:f8:47:21:84:d9:2a:4d:8c:49:e0:36:79:79:
f7:18:e2:14:a6:ab:a3:5b:3a:09:17:23:c7:b5:57:
5f:fe:c0:d4:80:4d:87:d0:cf:f3:9d:be:45:a7:c6:
95:39:b5:8f:a4:ea:e5:59:2b:ea:8f:16:d0:44:f5:
78:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2D:F2:EA:54:BA:70:6F:FD:84:F7:70:7C:24:98:86:B4:11:81:8D
X509v3 Authority Key Identifier:
keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8c:62:be:f0:b1:0c:4e:2d:17:ea:10:6f:e5:f2:17:38:fd:
39:12:26:89:26:ef:f4:34:09:62:fc:9b:06:5b:2c:aa:39:aa:
a9:b6:4a:42:c7:23:4c:8f:ed:75:3b:66:75:70:80:15:12:bd:
80:c2:5d:35:08:7b:ac:82:38:9b:ff:2f:ad:a6:9e:36:ba:47:
b2:e4:6d:eb:f0:5a:17:b8:61:d5:15:16:15:02:81:9b:fb:c9:
42:ea:b3:44:74:ec:ff:05:a0:9d:42:3a:37:2f:a8:52:85:c2:
90:24:db:f8:77:81:70:7f:d5:4f:9d:a1:80:b4:20:35:98:0d:
d7:05:c3:77:f3:d6:01:36:e3:18:e4:7b:08:4a:65:ec:01:48:
47:ef:c0:0b:6f:c1:53:e6:9f:86:33:93:37:2d:a6:5d:84:36:
af:7a:c8:37:0d:42:c6:46:7f:97:94:ab:64:e6:b1:6b:6d:29:
fb:6c:2e:32:86:c7:0f:fc:24:23:76:92:93:10:3d:e8:c5:54:
2c:42:77:85:b2:bd:e2:f6:df:a5:8a:07:d5:61:52:78:81:dc:
ab:4a:8a:2c:2f:a4:11:ec:57:03:8d:07:f3:03:67:a2:87:e2:
ce:19:9b:40:4c:f4:02:40:66:80:ee:b6:0b:80:f4:cf:3f:7d:
e3:e7:53:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:57 2026 by rpki-client