Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
File: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json)
Hash identifier: gdkP+8h/tGFArUdqHh6jB4xRV7ek/9tX8HqS70QiyGs=
Subject key identifier: 45:E1:17:9F:D2:09:31:72:CE:A7:60:8C:D0:1D:84:E1:80:B7:04:45
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial: 01A14ACFCA5B5A01C42BDE8EB52D795F8BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
Manifest number: 1236
Signing time: Sat 17 Oct 2026 17:01:34 +0000
Manifest this update: Sat 17 Oct 2026 17:01:34 +0000
Manifest next update: Sun 18 Oct 2026 17:01:34 +0000
Files and hashes: 1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: MfD80QljPj+BiHHfW3dnwtcjeQVGNA4xnuFXPob2v2k=)
2: OQqEEAJAiPU1Ypg4_ug8x9-Hajs.roa (hash: SD+uKA8/a0U2/wxdSCNkq74UMq0JRQPbJacchqGYw20=)
3: glf2RLsF1blKne8DsYrjLp0dv0E.roa (hash: 9xOA/W8QJQTfjVt2oAPBotD9rA+lAklAdSAciHQpc54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:cf:ca:5b:5a:01:c4:2b:de:8e:b5:2d:79:5f:8b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
Validity
Not Before: Oct 17 17:01:34 2026 GMT
Not After : Oct 18 17:01:34 2026 GMT
Subject: CN=45e1179fd2093172cea7608cd01d84e180b70445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1c:1b:9d:a0:bd:47:f3:4b:1b:d7:d4:64:9c:
81:77:0c:fd:8b:c0:14:36:e2:f3:98:b4:8a:21:33:
2d:8e:f1:3b:20:c4:5a:ee:70:47:a7:02:9c:ba:08:
44:8f:ec:73:55:d9:a4:a6:f7:9e:49:93:07:87:9d:
22:5a:b8:34:d4:01:c2:dd:ae:7c:bc:d9:e6:9b:98:
92:16:3b:9e:0f:5c:33:b6:a9:40:18:10:fc:19:2f:
86:c3:01:a5:6e:99:fc:51:af:c8:a9:cd:b1:6a:b6:
03:89:d5:7e:b1:8b:0b:79:90:fe:db:3f:ca:1c:15:
ed:b9:7a:2e:a7:89:64:2c:2f:79:97:91:ce:5e:08:
8f:fd:ba:5c:b3:56:f3:52:72:be:e7:1b:74:51:32:
c9:7e:6a:23:ae:97:8d:2a:f3:6f:3f:8a:a8:7a:1b:
46:db:7f:31:9f:45:ca:03:a3:a8:28:c4:fd:ef:3b:
26:fb:c1:d8:df:30:93:9d:f8:b7:d4:44:d3:54:94:
e8:71:c7:48:c3:31:fb:7f:32:61:73:07:3e:1e:04:
07:cc:e5:dd:dc:a6:f6:a0:ac:7d:28:4f:81:97:1d:
a1:c8:8c:4e:7a:89:45:5b:ed:8d:52:37:af:33:cf:
8b:bd:3e:df:a5:fc:8a:1f:8d:4e:ba:7a:76:3c:32:
2e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E1:17:9F:D2:09:31:72:CE:A7:60:8C:D0:1D:84:E1:80:B7:04:45
X509v3 Authority Key Identifier:
keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a3:e6:f5:2c:1f:f3:6b:2f:64:fe:74:9b:c7:9e:91:24:0b:
ee:0e:e0:59:92:a0:21:a3:65:88:33:43:67:b6:ba:29:14:bb:
c4:53:8b:a1:7e:bd:63:d2:00:28:fc:ec:f1:70:ec:ba:08:b9:
3b:55:0c:25:c1:6b:ee:0e:28:c8:93:ec:dc:6d:fc:2f:e6:6f:
f5:9d:6e:48:6e:2c:1b:9f:5b:1e:55:c4:c6:ef:10:84:4b:99:
03:5a:04:f1:d5:6e:5b:5d:d8:02:2b:5b:12:16:a7:c4:a6:2c:
ef:c3:50:b4:75:30:03:12:89:39:7c:2a:ad:59:59:dd:05:65:
f3:f9:7c:14:b4:ff:63:00:ff:17:d4:52:6d:c5:01:e6:5d:5f:
4c:1b:24:f9:ab:ad:2c:c7:aa:a9:cb:5a:6a:18:83:5f:be:72:
d1:04:b7:3a:0e:7c:7e:67:11:84:a4:20:49:70:68:0d:d5:9d:
31:62:87:31:2a:62:11:1b:1d:6d:d1:f9:a4:0e:43:a8:17:37:
e2:bd:76:eb:9f:32:35:67:85:31:45:5b:5c:8a:8a:3b:6d:27:
77:33:4a:ae:14:60:50:12:d1:2d:e8:05:b4:be:fc:79:97:08:
2d:51:c0:5f:b6:2c:39:5a:7b:11:e7:15:d8:ba:1b:5b:71:76:
06:57:c4:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 02:11:06 2026 by rpki-client