Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
File: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json)
Hash identifier: XQlGk8BVm0R/Dklks34yvXxpC7eMkqrNb8Lg3OkoTvg=
Subject key identifier: EE:F5:A7:CA:B3:FD:8A:12:86:F3:E3:26:7E:32:F6:59:84:CC:53:A9
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial: 019EC3DCC3430ABE185BFB6C75585E03A82A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
Manifest number: 10E7
Signing time: Sun 14 Jun 2026 02:01:25 +0000
Manifest this update: Sun 14 Jun 2026 02:01:25 +0000
Manifest next update: Mon 15 Jun 2026 02:01:25 +0000
Files and hashes: 1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: dg/ycKAWhy3tmwiSZqO3mmUbyw6y3v17er9S3BP0HmQ=)
2: OQqEEAJAiPU1Ypg4_ug8x9-Hajs.roa (hash: SD+uKA8/a0U2/wxdSCNkq74UMq0JRQPbJacchqGYw20=)
3: glf2RLsF1blKne8DsYrjLp0dv0E.roa (hash: 9xOA/W8QJQTfjVt2oAPBotD9rA+lAklAdSAciHQpc54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:c3:43:0a:be:18:5b:fb:6c:75:58:5e:03:a8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
Validity
Not Before: Jun 14 02:01:25 2026 GMT
Not After : Jun 15 02:01:25 2026 GMT
Subject: CN=eef5a7cab3fd8a1286f3e3267e32f65984cc53a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f1:a9:98:7e:06:33:1e:69:93:25:2a:97:f4:
95:b1:2b:90:95:db:a2:12:e2:2e:d4:5b:51:56:0a:
20:f9:aa:ae:9d:3c:19:bf:f3:86:22:cc:8e:76:2c:
7a:74:77:7a:17:d5:59:c2:ed:04:a4:56:e5:fd:4d:
e1:33:23:be:c1:e5:2c:1d:eb:82:bf:87:da:ef:d3:
fb:58:79:0b:65:79:62:24:6f:d2:e6:69:39:15:4a:
0e:5b:d4:37:e4:db:29:c1:5a:3f:2e:7c:78:c7:f1:
ad:94:15:78:d4:12:d3:1e:f9:ff:08:35:62:7d:4b:
8e:37:51:2a:9c:fd:b0:c6:c5:8c:50:68:0e:90:f1:
10:53:fd:e0:81:44:79:41:73:3a:8a:8e:01:25:17:
86:84:8e:d0:3f:37:5b:6f:64:4b:84:dc:e8:67:dd:
8a:26:4f:1a:b1:45:8c:5f:aa:1a:2c:28:9b:c3:27:
95:43:20:0b:ff:ff:0a:48:4a:8c:26:ef:86:ba:e2:
1b:78:2c:e5:31:45:71:cb:22:1b:f7:40:b7:2b:0f:
86:13:e2:4e:e3:87:7a:60:4d:91:c8:d3:b8:28:dc:
07:eb:d4:6e:a5:41:ea:51:60:d8:b7:6c:ba:01:d2:
22:2c:b1:9c:3b:ca:9a:5f:d6:21:98:b9:93:7d:76:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F5:A7:CA:B3:FD:8A:12:86:F3:E3:26:7E:32:F6:59:84:CC:53:A9
X509v3 Authority Key Identifier:
keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:69:66:e3:7c:ec:29:5d:2c:b3:bf:19:ad:4d:0d:82:c6:88:
c2:be:67:e7:47:fa:f7:29:61:a0:57:66:d8:bc:67:80:18:99:
6a:f4:30:50:34:e3:0f:db:e8:08:94:64:51:6a:93:dd:c3:56:
fd:cf:f8:8f:38:52:44:10:3f:d0:80:18:cc:71:80:50:d4:5b:
e2:c1:cc:2c:96:de:e5:d0:6b:45:06:a0:9e:db:1e:66:a4:27:
5f:7b:b3:a3:71:b7:b4:16:34:ec:32:c9:e9:e2:9e:9b:d3:dc:
b0:db:37:df:13:7c:27:40:a6:e1:84:8c:c0:b5:de:23:b2:ad:
7e:58:f3:63:e8:76:f4:cc:6a:68:8d:b4:a3:ff:f5:54:ef:67:
75:2b:0d:dd:36:45:54:5c:75:2a:98:ed:6e:98:2d:7e:43:b7:
6c:77:c1:7e:f5:a0:34:30:7e:b0:b1:fd:3e:3e:79:58:14:dd:
fd:3f:30:00:f3:24:a9:c1:32:c4:b9:9d:63:38:ad:5c:aa:d7:
cb:74:3f:03:7a:84:2b:47:8c:77:b9:e0:ba:af:70:48:4b:7d:
93:3a:e2:69:e3:fb:3d:7c:13:11:7a:17:c9:57:a6:40:7e:20:
d2:b4:fd:31:25:4d:44:1b:38:43:62:24:46:08:18:86:2e:24:
f1:3e:0f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 10:46:51 2026 by rpki-client