Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
File: KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft (raw, json)
Hash identifier: /lDYpAS8sFsbWwA1jmQpI+IbH6RD6oS0288SGnWxo7A=
Subject key identifier: F5:09:6B:BB:13:8B:2D:9D:F0:52:EB:19:34:31:A3:EE:87:EA:76:2C
Authority key identifier: 28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
Certificate issuer: /CN=28fa456d1c23678621954ffbf493a323de2c4484
Certificate serial: 019D98F471961B9147FC84B54421B8473ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
Manifest number: 0DFC
Signing time: Fri 17 Apr 2026 01:00:49 +0000
Manifest this update: Fri 17 Apr 2026 01:00:49 +0000
Manifest next update: Sat 18 Apr 2026 01:00:49 +0000
Files and hashes: 1: KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl (hash: NNpctLqVw+nS0gFCwKZVzaueI+pL5XceMQf07ka7qPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:71:96:1b:91:47:fc:84:b5:44:21:b8:47:3e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fa456d1c23678621954ffbf493a323de2c4484
Validity
Not Before: Apr 17 01:00:49 2026 GMT
Not After : Apr 18 01:00:49 2026 GMT
Subject: CN=f5096bbb138b2d9df052eb193431a3ee87ea762c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:41:10:39:d0:13:b1:da:04:f0:d7:18:bd:51:
8c:93:57:29:ff:da:0e:63:7d:fd:b5:eb:67:56:3a:
d5:22:df:13:ba:c5:88:29:c6:59:aa:2f:f6:ef:d8:
67:0d:61:34:fe:10:a0:38:7c:4f:51:20:01:c0:e2:
26:7f:e0:0b:2f:58:3c:f0:99:49:f5:45:11:ca:7f:
14:f6:0c:a0:02:e9:8a:54:f5:4a:4e:fc:29:ee:bf:
53:92:30:df:5f:02:0a:d7:79:9c:7e:b8:f1:42:e9:
51:66:34:fa:49:a2:e8:08:65:c5:a9:85:dd:34:12:
80:14:c9:31:ef:81:01:d0:e2:51:b7:08:9f:71:84:
4c:15:82:ec:e2:9b:14:7c:80:a9:c7:e1:81:df:af:
e7:8f:50:c0:69:11:e6:3c:e4:ae:49:c5:fb:f1:57:
cd:03:d6:7f:ba:82:2f:b9:e3:23:4c:07:b8:e5:a3:
d3:74:91:64:d7:8f:a1:08:b4:ac:05:03:e8:52:af:
8a:18:f5:b2:4f:21:f2:39:05:f3:d1:45:eb:64:e6:
ef:7b:38:d5:74:24:cd:88:07:08:7b:bf:96:ef:1b:
10:b6:fd:ca:9c:4f:a2:db:a8:70:55:ff:de:1d:32:
e3:62:ca:e1:ab:c5:20:d9:53:2a:30:69:be:b9:7e:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:09:6B:BB:13:8B:2D:9D:F0:52:EB:19:34:31:A3:EE:87:EA:76:2C
X509v3 Authority Key Identifier:
keyid:28:FA:45:6D:1C:23:67:86:21:95:4F:FB:F4:93:A3:23:DE:2C:44:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPpFbRwjZ4YhlU_79JOjI94sRIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1acab-9a8b-423e-b0bc-f45a2a634704/1/KPpFbRwjZ4YhlU_79JOjI94sRIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:2f:2b:2c:7b:be:06:7e:ec:22:94:11:fd:db:73:ea:67:e6:
11:df:e7:18:fa:36:cc:77:a3:1c:c8:08:38:77:9b:52:fe:2d:
a4:05:be:40:c2:4d:69:dc:72:90:b0:15:72:a5:35:7e:67:b2:
bd:3a:ed:16:d5:95:01:fe:f4:77:f7:a2:6f:87:b3:ce:dc:c9:
17:46:73:bf:23:c7:03:a3:e1:45:df:00:2a:62:01:c0:d6:5c:
00:bd:6f:cb:bf:46:41:80:dc:d6:07:9c:28:92:98:b5:4e:fb:
d5:ff:55:a9:e7:73:53:05:5a:18:75:f2:89:a1:41:b8:07:63:
2e:ad:9f:d5:40:cf:16:94:64:79:36:7c:68:a8:7b:3d:7a:55:
c2:43:9d:8e:02:60:3f:09:7b:4e:0e:45:66:18:2e:f9:7e:b5:
19:e0:ea:aa:99:a7:69:ae:8e:1b:5e:44:a9:6a:d2:70:cd:59:
81:89:de:36:a4:d1:8b:69:c4:13:ab:a3:54:9a:c0:8e:36:5b:
eb:65:ab:a0:8b:3a:e7:97:08:ac:bc:b5:d7:f0:71:67:0d:a3:
7c:05:19:93:81:fc:7d:44:f8:a2:23:b2:5d:25:e3:fb:44:7b:
d6:56:6e:4a:2d:33:0f:aa:6b:0b:b0:2d:28:9b:c7:5c:4d:1e:
d2:4d:13:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:40:51 2026 by rpki-client