Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
File: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json)
Hash identifier: AqueVRgaUtvXI+gCtvXhUagXVsxG5mnwC2M8SrMSXG8=
Subject key identifier: A0:CB:D3:84:DF:63:87:22:5B:2A:BD:46:8E:50:BC:0A:2B:F2:4A:0A
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial: 019DA41D263F13AE83CEFA96948B821E9C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
Manifest number: 1052
Signing time: Sun 19 Apr 2026 05:01:06 +0000
Manifest this update: Sun 19 Apr 2026 05:01:06 +0000
Manifest next update: Mon 20 Apr 2026 05:01:06 +0000
Files and hashes: 1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: SPs+8rUVOHmoxL/IgjVG7Jd4SFmrQplyv4eSYytTwIQ=)
2: OQqEEAJAiPU1Ypg4_ug8x9-Hajs.roa (hash: SD+uKA8/a0U2/wxdSCNkq74UMq0JRQPbJacchqGYw20=)
3: glf2RLsF1blKne8DsYrjLp0dv0E.roa (hash: 9xOA/W8QJQTfjVt2oAPBotD9rA+lAklAdSAciHQpc54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:26:3f:13:ae:83:ce:fa:96:94:8b:82:1e:9c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
Validity
Not Before: Apr 19 05:01:06 2026 GMT
Not After : Apr 20 05:01:06 2026 GMT
Subject: CN=a0cbd384df6387225b2abd468e50bc0a2bf24a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4b:b0:b0:b3:3b:71:a1:70:04:05:cd:76:71:
51:7c:18:ef:c4:66:b4:0c:5f:72:e9:03:74:16:b6:
db:f2:f6:3b:dd:3b:1f:46:20:d0:5e:75:93:98:59:
a8:36:9b:f5:d6:fa:4e:eb:3b:48:43:ec:85:52:a2:
0a:92:f8:33:71:6b:04:dc:c1:56:25:b2:1e:31:e3:
99:a4:06:20:50:d0:ab:32:a4:74:4e:0f:2b:f9:6a:
24:03:5c:01:5c:f2:e6:dd:96:2e:fb:c2:75:d8:69:
34:3b:03:de:60:b8:e6:0d:1e:4b:13:68:7b:fa:1f:
55:53:76:03:f7:89:48:8e:2e:f2:0d:91:82:13:bc:
0f:47:08:87:42:1e:1e:c5:06:9f:c3:0b:9d:f7:6f:
f8:8c:85:b7:56:8d:e7:35:ac:df:9e:c8:cb:29:8e:
90:45:97:ff:1d:6e:06:f1:0b:b5:ea:21:9d:61:34:
1c:a8:7c:f0:33:05:b7:36:1c:89:85:ef:d2:89:cf:
07:4b:90:d7:8a:61:3c:da:31:18:64:6e:fa:8e:b1:
f1:85:c8:b7:be:6d:82:d9:79:dc:f1:cd:bb:f1:c9:
db:1c:2a:71:c6:84:4c:ce:c6:a5:15:b7:c6:88:ed:
4f:6f:ac:ea:59:0d:ee:70:93:39:7f:d8:52:32:85:
4d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CB:D3:84:DF:63:87:22:5B:2A:BD:46:8E:50:BC:0A:2B:F2:4A:0A
X509v3 Authority Key Identifier:
keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:97:aa:8c:81:bb:7f:7a:4f:d7:d1:35:fa:fb:58:e6:03:10:
9c:35:1c:49:6c:29:6a:26:59:56:d3:69:df:2a:a0:05:53:d7:
dd:1a:c8:0d:85:55:cf:1e:53:52:9b:ce:f4:2a:61:86:84:08:
a5:a9:b8:56:7f:41:2c:e3:4b:b4:43:80:c4:fd:38:01:79:c2:
61:6a:c1:eb:6f:ee:da:cf:66:db:f5:9e:b7:61:d7:20:e1:33:
ed:9b:73:cd:eb:01:f4:5f:3c:d1:26:c5:8d:31:fc:b4:22:f0:
c9:f7:d7:94:63:c5:fb:32:fb:ef:c2:f7:d6:43:6d:16:73:9e:
0d:b3:78:0d:4c:fd:7a:35:a5:06:be:6c:e5:4c:12:d5:66:0f:
50:46:a1:ed:5b:5a:2a:b8:b0:ee:aa:5c:2c:35:32:0a:c4:7c:
fc:23:55:7e:9c:83:0f:a2:fd:e1:0d:14:16:11:2b:64:3d:f5:
97:02:87:bb:78:2a:55:13:91:a2:2f:14:b2:b3:3f:7f:92:79:
50:ad:e0:70:dc:37:f4:d3:8d:50:5e:11:9c:07:04:da:41:4b:
a5:92:14:3c:1f:33:99:ad:33:4b:05:20:9b:28:5a:6a:92:69:
53:5d:51:2f:f2:cb:be:19:1f:0d:d6:80:93:a1:c0:b3:46:cd:
f5:d6:b2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:04:44 2026 by rpki-client