Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
File: KPIqU5CbUnc1JGNA8EF-vv0yazE.mft (raw, json)
Hash identifier: edyONrPQ2ejUjuAoh8GtZk9pJzMEzdX7bk/qAl0/L60=
Subject key identifier: 9E:78:AC:07:C6:A5:1A:1F:70:21:92:01:CE:D8:D6:FB:5B:47:D7:25
Authority key identifier: 28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
Certificate issuer: /CN=28f22a53909b527735246340f0417ebefd326b31
Certificate serial: 01A0C58EDE15320BFAC0F475B35370D3AE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
Manifest number: 0191
Signing time: Mon 21 Sep 2026 20:01:09 +0000
Manifest this update: Mon 21 Sep 2026 20:01:09 +0000
Manifest next update: Tue 22 Sep 2026 20:01:09 +0000
Files and hashes: 1: KPIqU5CbUnc1JGNA8EF-vv0yazE.crl (hash: 8Y5Y+joB3NejC1sLZRNoblHwufsktvbFpZdAk9o3RtM=)
2: w0e6jkiUX1sni-XsVknCS6jjnrs.asa (hash: dlOu1937WJHpDAsAncwHV+rfvJq6GFUalmkUWER/diE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:de:15:32:0b:fa:c0:f4:75:b3:53:70:d3:ae:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f22a53909b527735246340f0417ebefd326b31
Validity
Not Before: Sep 21 20:01:09 2026 GMT
Not After : Sep 22 20:01:09 2026 GMT
Subject: CN=9e78ac07c6a51a1f70219201ced8d6fb5b47d725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:cb:0b:38:1f:24:29:b5:3a:1d:e5:2d:fa:
af:0b:0a:c0:db:34:8a:ff:2c:74:77:98:dc:75:e1:
b0:f8:47:46:9c:ab:e6:f0:5f:f9:60:78:b3:d5:67:
48:09:b9:90:52:cb:98:33:d9:c7:6c:4c:b2:7c:20:
95:51:8e:99:33:c7:4b:2b:f9:36:d9:68:3f:31:7a:
ae:d8:6a:7d:58:3b:d9:96:cc:c4:17:c9:5f:96:da:
ed:d8:4e:2a:90:38:32:ce:e2:3e:e3:48:93:ef:ea:
eb:a7:da:bf:50:f6:bd:21:52:4a:6b:8d:ec:fc:9d:
3b:bf:49:c0:f5:49:f0:2a:75:ee:5a:63:28:f0:12:
7c:c6:8f:00:73:1e:c9:1f:7f:9e:6b:81:41:c7:18:
14:cb:39:f6:b7:0b:85:e9:7b:1d:1c:e0:d8:23:94:
38:bd:cc:2a:49:a2:96:ab:0f:be:c1:f4:a3:4e:8f:
a2:9b:09:ba:b9:ba:09:2e:f9:dc:b9:e2:15:94:80:
6e:c6:b7:ae:37:ce:e9:a1:46:4f:79:19:a1:a1:1d:
df:05:21:bf:71:ec:bc:5e:0c:4b:54:79:49:5f:0d:
41:f6:80:6c:45:d0:1e:b2:80:45:19:14:2c:f5:19:
04:bb:52:83:0f:78:80:36:0b:59:78:41:f6:21:13:
c3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:78:AC:07:C6:A5:1A:1F:70:21:92:01:CE:D8:D6:FB:5B:47:D7:25
X509v3 Authority Key Identifier:
keyid:28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:85:15:17:6d:86:8d:9e:33:bb:be:00:ee:45:41:5e:8d:76:
74:4f:38:84:fd:a7:e7:93:fa:ac:af:d1:14:6c:bf:56:e5:e0:
15:aa:7a:3b:92:a5:62:a9:68:b7:e4:f9:da:27:62:ca:e3:68:
e8:00:07:e0:9b:09:ac:f0:c2:6e:e4:33:d3:8f:ab:d1:ca:32:
4b:d9:f9:c1:f8:ad:67:cf:2d:72:ca:fa:5c:12:74:d2:f3:91:
0b:ee:d8:5b:9b:ab:9d:b4:af:7f:e2:8c:13:35:a6:34:ab:51:
04:7a:91:09:67:63:bf:17:16:05:6c:a9:0e:84:52:5a:c6:fd:
c7:b9:c7:d2:e7:22:b2:58:2c:20:e2:48:a7:1a:0c:92:be:25:
85:9e:ab:ba:aa:88:b1:d4:4c:f6:71:a7:09:53:86:a8:9b:6b:
2b:61:54:dc:9f:88:1b:54:1a:59:36:3d:35:5a:f0:85:71:44:
1b:50:e2:8e:4e:cb:a2:c9:5b:fc:0f:be:fa:d5:e9:0a:55:f9:
4a:07:1e:81:bf:5b:9d:89:54:bd:da:8b:78:ca:d8:12:13:cf:
00:9f:5d:42:fc:61:a8:08:69:8f:b1:f1:b1:09:9b:64:63:d3:
7c:bd:da:5e:ed:25:44:3a:4e:bb:00:72:3f:5a:fb:89:bc:73:
08:48:af:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:39:25 2026 by rpki-client