Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: QL9w/AiMoXD81fE1Ed6zUidVizNjyO5vZCLnJJbHnY0=
Subject key identifier: 96:2E:8B:60:F3:E2:3D:77:EC:BC:FC:BF:A4:7C:8F:25:77:A4:D7:0B
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 019EC412C7F2305706BC6568C046C266827E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 0825
Signing time: Sun 14 Jun 2026 03:00:25 +0000
Manifest this update: Sun 14 Jun 2026 03:00:25 +0000
Manifest next update: Mon 15 Jun 2026 03:00:25 +0000
Files and hashes: 1: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: vAJ2RevasPHYuOHuUcSAhwTrnSaMRYcjPlLUBV+ao74=)
2: cHwhEhAGxzfypZx4-M1NRLg_x6g.roa (hash: iI8gUBUQGaxZbo8P6CcEli8I0PR4IRfA40i94puh4EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:12:c7:f2:30:57:06:bc:65:68:c0:46:c2:66:82:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Jun 14 03:00:25 2026 GMT
Not After : Jun 15 03:00:25 2026 GMT
Subject: CN=962e8b60f3e23d77ecbcfcbfa47c8f2577a4d70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bd:68:49:94:08:4e:26:41:d6:0c:b0:fa:8f:
44:4e:22:59:eb:7f:07:db:71:3b:c9:15:5a:8a:ed:
28:0c:36:c5:bd:2d:3c:77:51:3f:ab:fe:44:ca:47:
b5:d3:a6:12:05:88:cb:6b:7a:0a:b5:33:a0:32:58:
9e:b0:68:c1:f6:8d:d7:e1:65:0d:f0:3f:76:43:ea:
74:eb:d6:df:2a:83:dc:7b:05:59:b4:e7:4d:49:38:
83:75:c3:43:0e:5f:ba:fb:a4:b8:cb:ed:be:a6:b8:
64:5f:e5:4e:b9:99:31:71:75:a4:f5:a2:56:24:a1:
50:0a:14:f5:47:e7:35:7b:34:f0:3c:21:9b:d0:27:
ae:c6:d0:41:44:96:ec:de:32:12:9f:d8:0b:29:da:
f0:57:b2:43:d9:9a:99:b4:f1:46:02:17:09:53:49:
d2:dc:0c:75:49:f0:9e:d8:56:c5:42:1b:88:b4:c4:
44:0c:fc:ef:2e:cf:17:6c:f6:bb:6c:36:19:ec:30:
4d:41:2a:c9:c8:9d:35:35:c5:9f:69:c5:70:75:71:
9d:e5:2a:85:08:c0:1a:22:54:fe:95:b2:26:10:de:
f5:bc:9a:f2:64:d3:93:09:16:94:a0:91:66:0e:09:
1f:6d:d9:a7:b1:3b:6c:42:37:e7:c6:4f:39:3b:93:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2E:8B:60:F3:E2:3D:77:EC:BC:FC:BF:A4:7C:8F:25:77:A4:D7:0B
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:22:03:89:6a:36:e3:d1:6d:fd:a8:67:8b:ae:de:75:27:46:
82:06:c6:99:98:4b:59:5e:3a:97:2f:05:84:ff:d2:3c:75:df:
4d:3e:83:22:b6:b5:bb:e9:bf:bc:30:f9:d7:7f:83:fe:1e:8e:
9d:01:9f:86:0b:70:29:ef:f7:12:fd:53:23:58:c0:0c:6d:f7:
bb:35:2e:59:91:c8:ad:db:05:81:4d:37:67:0d:ac:97:7f:4d:
5a:f9:a3:73:d3:ce:c3:1a:12:a6:e5:26:02:67:e7:ea:92:79:
1b:11:9b:7f:08:a6:d1:11:af:86:46:d7:d7:9b:4d:2a:97:cf:
e6:60:92:90:06:77:d1:87:78:f5:a1:74:e2:6f:98:6f:43:99:
61:18:db:37:5b:4f:7f:8f:00:a5:a5:11:06:bc:74:44:26:17:
37:2b:d7:6a:e5:55:91:ea:03:b0:85:58:b2:28:f9:e0:13:3a:
66:86:97:91:43:9f:02:db:1a:f0:d3:99:13:f0:60:4e:50:00:
59:81:31:82:39:ff:67:c3:6a:50:4e:42:1b:08:e7:0a:50:4f:
7e:03:9c:f2:21:2d:52:14:e2:9f:11:72:12:39:71:06:c5:cd:
54:c0:a8:ba:90:b7:d8:05:20:a6:21:90:41:9e:5b:19:02:b2:
38:8e:64:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:09:34 2026 by rpki-client