Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.mft
File: KOVsaNwJ-8UDxrZxtXoEomfoK5E.mft (raw, json)
Hash identifier: hjHSZD9ftSWIFePg1ha/OnLzgFrEcD4KaPtGBKR+uS0=
Subject key identifier: FA:5D:02:59:6A:C6:16:18:3E:4F:57:DE:94:AA:D7:7D:66:38:97:07
Authority key identifier: 28:E5:6C:68:DC:09:FB:C5:03:C6:B6:71:B5:7A:04:A2:67:E8:2B:91
Certificate issuer: /CN=28e56c68dc09fbc503c6b671b57a04a267e82b91
Certificate serial: 01A0DBA8AB54F76B6BABA8C89A7B5BF2B35F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KOVsaNwJ-8UDxrZxtXoEomfoK5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.mft
Manifest number: EB
Signing time: Sat 26 Sep 2026 03:00:59 +0000
Manifest this update: Sat 26 Sep 2026 03:00:59 +0000
Manifest next update: Sun 27 Sep 2026 03:00:59 +0000
Files and hashes: 1: KOVsaNwJ-8UDxrZxtXoEomfoK5E.crl (hash: +EEJeki4noDPDyX+sTwqrykssT+F5oc1cbdkY8KrLCo=)
2: xnOGv6tQRxHcvaugZBbY2118Zzk.roa (hash: O4YWxbU/3fPET1eHT64GDXgkT1S9zSgi4NLlsKzdn9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KOVsaNwJ-8UDxrZxtXoEomfoK5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:ab:54:f7:6b:6b:ab:a8:c8:9a:7b:5b:f2:b3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28e56c68dc09fbc503c6b671b57a04a267e82b91
Validity
Not Before: Sep 26 03:00:59 2026 GMT
Not After : Sep 27 03:00:59 2026 GMT
Subject: CN=fa5d02596ac616183e4f57de94aad77d66389707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:35:82:01:9a:04:c0:90:f5:fb:7d:8b:1b:4c:
7c:6e:d5:1a:72:09:6b:61:39:bd:61:3f:b6:82:4c:
1f:3f:6c:06:0d:15:01:69:5c:2a:40:71:b0:a7:24:
fb:5c:61:a8:fc:a9:f7:83:6d:11:72:e6:fc:97:b5:
53:ac:55:cb:00:02:6b:0f:dc:15:71:32:4a:ed:3e:
78:64:41:f5:71:91:c1:87:73:40:18:fd:5b:fb:54:
ff:20:d6:c6:4b:fd:88:f5:9d:4e:41:cb:17:7c:cf:
37:4e:ad:48:63:7d:59:7d:9b:d2:61:08:ad:80:d6:
bd:3e:6b:4a:49:dd:f5:be:6f:84:26:81:d8:e2:18:
47:74:95:57:fd:92:b7:7a:aa:89:6e:8f:53:48:86:
76:56:eb:c8:51:b3:7d:54:96:20:18:ff:aa:1f:d2:
3c:1c:d3:16:19:77:b0:df:13:8a:7d:8b:2a:20:19:
e2:92:22:30:8f:79:37:bf:bc:33:16:d8:34:af:3e:
93:57:db:77:01:44:7d:0f:91:bf:ec:a9:c9:5d:80:
25:90:86:9b:7d:87:95:67:39:99:f2:77:7b:98:e6:
b0:a5:d2:5e:27:54:31:96:ea:c9:54:8d:08:3f:59:
0d:92:f5:ed:f4:7f:dd:a1:a0:41:55:a4:a3:35:13:
84:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5D:02:59:6A:C6:16:18:3E:4F:57:DE:94:AA:D7:7D:66:38:97:07
X509v3 Authority Key Identifier:
keyid:28:E5:6C:68:DC:09:FB:C5:03:C6:B6:71:B5:7A:04:A2:67:E8:2B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KOVsaNwJ-8UDxrZxtXoEomfoK5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:10:80:af:e8:89:0b:a8:b4:35:70:f4:23:fc:42:b2:17:d8:
52:85:2d:b4:82:f2:55:3b:b8:0f:02:67:69:99:7c:c9:9b:79:
00:9b:53:e5:0c:61:7e:0d:ce:3d:63:92:63:0b:7d:13:66:bf:
fe:15:d6:3e:4d:d8:ea:70:d4:b0:b1:58:0b:0d:ae:44:54:9b:
da:7f:4b:3b:04:1c:4a:4a:72:8b:47:bb:99:47:be:8d:e4:26:
f6:d1:46:fc:14:87:59:d0:28:1b:81:ec:b6:78:b7:ac:2d:90:
30:a9:d4:59:d1:01:b2:59:e7:36:e7:9d:05:df:ae:82:ce:d0:
6d:4a:61:dc:91:e6:2e:e9:8d:9d:85:06:a8:50:b3:22:fc:c2:
a7:01:c1:05:4d:a5:93:e6:7c:d2:47:38:81:45:94:c0:10:64:
50:ba:c1:25:b2:c7:73:07:d9:f5:6e:62:e3:1c:21:b4:d4:92:
b0:4f:01:02:9a:78:34:e1:08:ef:b2:b5:49:e0:4a:da:07:ef:
33:2f:d7:b6:e0:02:b7:fc:79:da:0d:98:50:22:70:cf:fe:d2:
f8:7a:9b:f3:4f:1b:cf:75:05:48:55:65:5b:19:61:f5:1a:7e:
ec:cb:0d:11:1c:d9:be:de:a2:b1:35:9f:1e:e9:9b:5e:e4:6f:
3c:c6:a9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:22:10 2026 by rpki-client