Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
File: KMID1l3y1lvbzzyINELdq1WjvN4.mft (raw, json)
Hash identifier: vgyJRYyfN5qvPPa8ePgwpIhfifv8lsCHfoXEGnX9Bf0=
Subject key identifier: 74:F9:1E:BD:B7:B2:A9:16:AC:62:29:31:ED:18:A0:BA:79:FF:C3:2B
Authority key identifier: 28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
Certificate issuer: /CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Certificate serial: 019FAD1B169C7076D56A296FB0AB8DE80C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
Manifest number: 0FC3
Signing time: Wed 29 Jul 2026 09:01:01 +0000
Manifest this update: Wed 29 Jul 2026 09:01:01 +0000
Manifest next update: Thu 30 Jul 2026 09:01:01 +0000
Files and hashes: 1: 4Okejz2k1ubGfI-GRgB_ARKBmuk.roa (hash: wHN9epTREmpbGi1iOO1PMq2WQBeGFf6WjNTcLZ9jeLg=)
2: KMID1l3y1lvbzzyINELdq1WjvN4.crl (hash: YvyXPY5Sd2b74v3aUD80AElT2QPEfAe6UDOtmEeM8H0=)
3: PcKBEnG4Fc83PTLXnIgOvRcy3V4.roa (hash: dksZAzhosBbHaXLsuDmV40VTdGY6aq3NK9xY13PmQvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:16:9c:70:76:d5:6a:29:6f:b0:ab:8d:e8:0c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Validity
Not Before: Jul 29 09:01:01 2026 GMT
Not After : Jul 30 09:01:01 2026 GMT
Subject: CN=74f91ebdb7b2a916ac622931ed18a0ba79ffc32b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:21:9e:be:a9:fb:e5:06:ad:11:5a:7c:c6:0b:
17:e4:b4:95:12:73:c4:1f:10:29:3b:d5:24:04:b1:
44:9a:10:04:16:5e:49:d5:a8:a5:03:af:18:28:77:
8b:d5:6a:05:e4:e2:c0:e3:11:ac:a5:f8:78:53:b4:
71:41:e3:47:dc:55:9a:8d:96:e1:34:ce:a3:48:fb:
03:cd:61:ae:6b:5e:eb:bf:fe:ef:b1:2f:ac:77:12:
0a:5e:a0:91:70:ab:c7:0a:16:75:61:b6:8d:03:47:
b5:75:9c:6f:5a:56:af:70:10:a5:2e:30:b2:7e:14:
7d:7e:d0:8d:cb:47:2d:88:f1:9f:5f:0a:f1:58:ad:
1e:d2:84:9e:06:d0:f3:ac:7d:03:17:d0:11:d2:62:
71:53:b4:bf:c0:90:2a:a4:7f:dc:08:c8:f6:6f:25:
c9:c0:5b:81:3b:da:5e:03:12:d3:c8:bf:74:7c:cc:
58:da:b2:f0:05:cc:1a:1f:37:fc:8f:46:50:0b:95:
d7:9b:7e:27:4a:fc:a4:46:56:17:db:fe:b0:2a:7b:
a0:bf:93:f0:32:c1:90:23:6d:ce:43:73:e7:33:fe:
23:9c:1a:bd:de:11:0f:d8:d1:a8:40:ff:e5:f5:11:
8d:63:cf:1a:aa:95:c8:df:8a:95:47:06:de:ab:04:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F9:1E:BD:B7:B2:A9:16:AC:62:29:31:ED:18:A0:BA:79:FF:C3:2B
X509v3 Authority Key Identifier:
keyid:28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:5a:ce:0f:34:11:35:18:43:31:47:9f:c9:d9:f2:0d:42:2b:
30:dc:0f:19:38:57:2a:b4:30:b7:6d:89:0e:fe:10:66:63:6a:
4e:e7:b2:e2:9a:63:9b:aa:29:b8:cb:bf:a9:2f:95:15:47:97:
3f:d3:49:7d:ab:72:de:40:bf:9e:93:45:0e:04:7c:28:d7:5f:
3f:ee:5f:ae:4a:b0:02:ac:2c:2d:22:5b:34:cd:77:b5:f8:cc:
e2:51:33:73:7e:78:d8:45:c5:7d:94:55:81:27:53:7b:36:ee:
c8:f9:4a:3b:d0:4e:cc:84:1a:61:8a:f4:6a:58:22:e5:d3:cc:
55:ad:d5:8a:2a:5f:83:98:58:1e:02:19:ba:70:1a:c0:15:49:
e9:44:97:4d:c9:a6:bd:42:93:33:43:69:da:c5:0b:83:b1:fa:
6d:18:6d:ac:8a:20:6c:58:77:91:d8:e0:41:b9:aa:12:1b:1c:
e7:76:b6:8e:1c:6c:fa:86:7d:81:87:db:5c:3e:0f:fc:3e:a4:
1a:b9:97:3c:e5:7a:74:c6:b5:58:c8:6a:0a:26:5d:a9:80:a4:
78:9a:32:47:8e:80:f8:fd:89:cf:03:cc:ed:4b:85:c2:d6:09:
d0:1e:47:a3:01:f1:51:52:13:e8:ea:30:04:63:af:51:24:3e:
fa:ab:0d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:29:15 2026 by rpki-client