Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
File: KPIqU5CbUnc1JGNA8EF-vv0yazE.mft (raw, json)
Hash identifier: DwDvXZR1xWbjZihOL5/piYZ2NUy0yVgeG2AlyjB4i6o=
Subject key identifier: 11:F7:A5:42:1C:05:6A:E8:D9:CF:A9:7E:01:1F:F4:32:29:FC:A9:56
Authority key identifier: 28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
Certificate issuer: /CN=28f22a53909b527735246340f0417ebefd326b31
Certificate serial: 019EC036772441EC1AC68760129FB1FA2365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
Manifest number: 85
Signing time: Sat 13 Jun 2026 09:00:55 +0000
Manifest this update: Sat 13 Jun 2026 09:00:55 +0000
Manifest next update: Sun 14 Jun 2026 09:00:55 +0000
Files and hashes: 1: KPIqU5CbUnc1JGNA8EF-vv0yazE.crl (hash: 5WbtpVpG5zWlvufiEA+NPN1OlUJz69OZxMRRaW1ddAI=)
2: w0e6jkiUX1sni-XsVknCS6jjnrs.asa (hash: dlOu1937WJHpDAsAncwHV+rfvJq6GFUalmkUWER/diE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:77:24:41:ec:1a:c6:87:60:12:9f:b1:fa:23:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f22a53909b527735246340f0417ebefd326b31
Validity
Not Before: Jun 13 09:00:55 2026 GMT
Not After : Jun 14 09:00:55 2026 GMT
Subject: CN=11f7a5421c056ae8d9cfa97e011ff43229fca956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:81:42:9b:22:41:1a:db:93:31:7d:27:50:
f3:4b:b4:ae:77:d2:30:31:66:a3:fa:cd:47:1e:c0:
f0:77:e6:64:02:98:e2:ae:68:bf:a4:cf:f7:f5:6a:
dc:09:04:fa:84:83:4a:c4:b5:59:ff:00:6f:2e:62:
8d:79:13:d3:ef:8d:87:d0:f8:fc:f6:9d:00:ff:95:
c0:22:db:7d:c5:b8:56:67:95:27:c0:dd:1a:9d:fe:
bf:d9:66:68:cf:92:ce:48:dc:c3:2f:9b:b2:9d:d2:
63:24:0e:21:08:fe:9f:91:b8:ad:d1:cc:6f:af:61:
10:06:db:8d:d0:1c:2c:68:22:77:da:56:a1:a2:18:
6c:7d:66:d3:a7:51:15:a4:c3:17:03:67:0b:7a:0a:
5a:29:38:d8:a0:a0:6c:81:a1:58:00:92:6b:a8:9d:
75:72:2c:a9:ab:f5:b2:37:9d:ba:e2:1c:91:90:a4:
35:24:0f:08:55:73:d7:39:94:51:0c:16:69:97:74:
20:07:cc:f8:e0:78:ab:02:3f:26:c9:d4:68:71:ef:
53:fd:60:2e:79:1a:53:d5:56:e4:d9:68:af:d0:e8:
96:98:c1:36:2f:de:a5:5a:64:fe:29:3b:c5:9f:ef:
71:d5:90:e5:de:bd:dd:fd:47:27:1b:72:4e:a0:81:
e0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F7:A5:42:1C:05:6A:E8:D9:CF:A9:7E:01:1F:F4:32:29:FC:A9:56
X509v3 Authority Key Identifier:
keyid:28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:52:39:37:2c:ff:c2:d7:9a:89:d9:f7:97:41:f6:cf:38:71:
68:8a:a0:ae:71:67:fa:d7:fb:87:c8:58:a3:23:48:65:51:70:
60:c1:15:fe:71:a9:b4:73:99:80:22:70:d7:30:d4:cc:a9:33:
b3:3b:d4:e6:76:53:3a:dc:55:06:27:61:e8:88:cf:b7:0c:b4:
f3:70:be:ab:f7:79:e9:11:51:c0:8c:20:e4:68:70:01:bf:b3:
8f:a1:e1:00:e1:e9:9a:e6:52:5c:d0:06:c1:46:e7:e3:3b:76:
7d:05:9a:4b:62:ae:5b:ad:47:c0:d1:0c:61:61:a0:31:4a:d7:
63:27:de:fe:90:db:98:7f:35:55:83:05:8a:35:09:71:95:ea:
2c:21:1f:34:f0:c0:0a:1e:b5:ce:fd:dc:35:8b:5c:14:85:dc:
2b:5e:84:09:29:a4:25:f5:17:ad:e4:20:cc:d1:e0:89:08:63:
27:bd:12:69:72:ea:22:a2:26:e6:8b:aa:56:75:a8:a4:23:57:
4b:e0:43:ac:c5:0a:f6:62:6b:34:ff:23:63:fd:4b:6a:f9:96:
a6:64:95:50:0e:e5:f7:f1:f8:54:3d:92:7a:dd:98:7e:82:21:
14:f5:07:90:81:2d:05:9a:9c:cc:2f:da:76:a6:37:77:fe:dd:
38:8c:df:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:53:32 2026 by rpki-client