Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
File: KPIqU5CbUnc1JGNA8EF-vv0yazE.mft (raw, json)
Hash identifier: jOL9vE44HCnDbqZVxC56pFzcy3zFSx2sHLtcS+8r854=
Subject key identifier: 3F:A8:E2:BC:0F:53:ED:A6:C8:5F:4D:A0:71:D8:48:BB:D2:20:A3:6C
Authority key identifier: 28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
Certificate issuer: /CN=28f22a53909b527735246340f0417ebefd326b31
Certificate serial: 01A0CB59D56322FF6EE79C60CD7F5349214F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
Manifest number: 0194
Signing time: Tue 22 Sep 2026 23:00:57 +0000
Manifest this update: Tue 22 Sep 2026 23:00:57 +0000
Manifest next update: Wed 23 Sep 2026 23:00:57 +0000
Files and hashes: 1: KPIqU5CbUnc1JGNA8EF-vv0yazE.crl (hash: OfQP/k1lKlFSW5Tit/L2Hr7PtZUMbaUg0/C9tTqhjE4=)
2: w0e6jkiUX1sni-XsVknCS6jjnrs.asa (hash: dlOu1937WJHpDAsAncwHV+rfvJq6GFUalmkUWER/diE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:d5:63:22:ff:6e:e7:9c:60:cd:7f:53:49:21:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f22a53909b527735246340f0417ebefd326b31
Validity
Not Before: Sep 22 23:00:57 2026 GMT
Not After : Sep 23 23:00:57 2026 GMT
Subject: CN=3fa8e2bc0f53eda6c85f4da071d848bbd220a36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e7:3f:67:bb:57:24:0b:93:99:39:f9:b3:41:
8d:0e:7a:4e:57:41:ab:3f:b1:9e:05:56:2e:c6:90:
f6:47:f4:ab:c0:2b:03:9a:d3:1f:41:d6:1a:d4:09:
88:65:b9:7d:63:49:c1:8b:bd:7a:d8:66:5a:3c:ec:
eb:76:92:14:a3:76:8f:e5:56:26:7a:7d:09:d2:26:
42:d2:98:43:70:fd:51:62:57:8d:b4:b6:55:8a:2d:
75:0d:30:62:72:e8:71:bf:27:de:34:c4:61:ec:66:
14:1a:3c:25:cd:41:cf:9b:a3:a8:71:30:3a:e1:be:
72:2f:23:91:40:88:3d:c5:f9:3b:0e:a4:96:67:ca:
00:cc:5a:27:56:82:dd:cc:01:65:8c:24:ef:d1:ba:
e3:00:a6:f9:00:67:33:b0:59:8b:fe:ff:57:d4:82:
be:ed:02:e1:4a:df:ed:7a:c4:1a:e6:ce:88:b4:3e:
2b:f4:bb:88:c4:ae:a4:1d:ff:92:0e:90:37:16:e5:
ba:e7:94:06:b5:d8:4b:18:d5:d1:e6:30:99:34:71:
17:ab:3a:41:c6:3a:a1:05:99:1d:51:58:06:db:bf:
7b:f7:5a:f3:06:38:62:23:42:fa:e3:8a:ee:aa:91:
f5:e2:41:87:e6:36:90:5f:06:b3:8e:73:42:7a:95:
21:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A8:E2:BC:0F:53:ED:A6:C8:5F:4D:A0:71:D8:48:BB:D2:20:A3:6C
X509v3 Authority Key Identifier:
keyid:28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:98:8f:80:92:a4:70:c8:0e:c0:0b:ec:bc:9b:d0:c7:3c:22:
76:79:e6:ef:a1:03:e3:3f:1c:74:b6:ed:f1:ce:ac:fa:42:2d:
66:e3:8b:19:92:40:44:d3:53:7e:91:74:57:ab:dc:00:f4:df:
0b:6d:0d:cd:3a:9e:59:39:f0:7a:cd:a6:3f:1d:e4:ae:26:58:
c0:ee:ca:17:6d:16:51:1d:d0:f9:e3:b6:8a:58:e5:03:24:eb:
4e:1a:90:ab:2b:5a:7d:ce:4d:79:cf:00:ec:68:07:d7:bf:d1:
46:cf:fa:bf:c4:b7:49:67:78:dc:f3:fd:e7:41:f2:41:a5:f5:
c4:9e:56:15:6f:02:7a:df:0a:63:28:0c:b2:fa:f7:e8:dc:d8:
f8:6f:e3:bf:d8:20:ae:bc:7f:18:a0:ed:cc:98:d7:b2:7a:80:
10:09:a6:32:cb:2f:3d:65:c5:03:f5:68:bc:1b:5d:b5:cf:b9:
da:40:45:d2:16:09:4b:1d:27:d1:51:84:6c:29:f2:f2:b5:f1:
7e:e1:1a:a5:0e:9c:f3:14:67:4a:95:04:c2:d6:40:5d:98:ca:
39:da:e7:33:d8:2d:4f:cd:83:b9:56:8b:6f:ed:97:76:a4:6c:
5f:9b:7f:13:0c:a2:cc:2a:7f:fb:1f:76:40:75:51:30:fd:1f:
01:db:5e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 06:55:05 2026 by rpki-client