Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
File: KANYk6JXplTz-FSVxBaevobeGNE.mft (raw, json)
Hash identifier: ghpMbP57/E1HVD6/6Vz3Uz8nk7wCHrAhVQ5puQYSkqA=
Subject key identifier: A5:35:AF:DA:E2:2C:45:85:6E:CA:CE:75:4F:98:16:30:CC:F8:2F:10
Authority key identifier: 28:03:58:93:A2:57:A6:54:F3:F8:54:95:C4:16:9E:BE:86:DE:18:D1
Certificate issuer: /CN=28035893a257a654f3f85495c4169ebe86de18d1
Certificate serial: 019CAC7DC6D994E7EA08D751A81A9FC6605A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
Manifest number: 0D84
Signing time: Mon 02 Mar 2026 03:00:49 +0000
Manifest this update: Mon 02 Mar 2026 03:00:49 +0000
Manifest next update: Tue 03 Mar 2026 03:00:49 +0000
Files and hashes: 1: KANYk6JXplTz-FSVxBaevobeGNE.crl (hash: IGDbuN2gljnE7AmCu0hqnWQf1OmolijpNua5cHl1Usc=)
2: Uwq4fgrazLwEGWvCfkhNBfYlPZA.roa (hash: vwAFLTe2SVcS4DhCcFTz3AjD8TipO0c+U4k+Iwqqzxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:c6:d9:94:e7:ea:08:d7:51:a8:1a:9f:c6:60:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28035893a257a654f3f85495c4169ebe86de18d1
Validity
Not Before: Mar 2 03:00:49 2026 GMT
Not After : Mar 3 03:00:49 2026 GMT
Subject: CN=a535afdae22c45856ecace754f981630ccf82f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:cd:70:17:2d:cf:20:13:c4:fa:b8:55:68:
b0:7b:7c:69:a0:b6:e6:ed:11:43:06:7e:0b:8e:09:
d1:06:7d:55:ec:03:d7:3b:e5:35:39:71:cf:1c:b6:
ce:50:0b:4e:61:88:f4:e5:bb:45:1f:6c:dc:0f:27:
2a:7f:5d:8e:6e:ab:38:b3:34:10:43:0e:a6:b6:c1:
e7:f5:3c:0d:a0:59:29:74:a1:61:65:56:3d:8e:e8:
5b:9d:af:40:7c:22:e1:73:a0:b9:85:8e:9a:62:c2:
a0:65:af:b4:2c:a5:1a:81:07:95:2e:b2:71:fb:f3:
f0:5a:3e:66:2e:b0:c1:24:a8:31:54:c8:c0:f7:4b:
f0:d1:0e:fb:8a:fa:12:75:b1:db:ea:09:1f:db:7e:
93:1b:3b:a9:72:a3:89:af:da:66:63:4f:69:88:06:
fa:fd:b3:d1:6a:92:e4:05:0a:8a:14:b6:86:bc:7e:
04:fb:22:78:70:95:84:3c:1e:e6:6f:80:ca:d9:82:
57:c0:58:ab:0c:93:40:fc:10:55:e3:65:b5:b6:95:
5a:fb:bf:a7:e0:a1:e2:d2:d5:d8:c9:44:8b:ec:a8:
5f:d6:41:eb:5d:29:15:18:7d:50:94:55:a5:d1:b6:
a3:d0:55:e4:9c:cd:c4:78:4f:48:17:42:1b:50:ac:
e0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:35:AF:DA:E2:2C:45:85:6E:CA:CE:75:4F:98:16:30:CC:F8:2F:10
X509v3 Authority Key Identifier:
keyid:28:03:58:93:A2:57:A6:54:F3:F8:54:95:C4:16:9E:BE:86:DE:18:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KANYk6JXplTz-FSVxBaevobeGNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9b76e3-e4f1-41a2-9f0e-937e00d0732f/1/KANYk6JXplTz-FSVxBaevobeGNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:9c:49:45:ea:4d:20:e1:f8:bc:ab:c0:64:43:6f:9d:c7:0c:
2a:5b:5c:c7:d6:ab:27:a1:41:8b:53:ce:35:aa:e8:49:ee:da:
a0:fe:2b:0a:23:1a:91:26:07:1f:4d:a8:a5:a7:86:02:07:b9:
cc:25:7a:0c:f8:44:ad:6c:be:6c:94:a3:e7:21:78:ce:c3:33:
7f:7b:10:d8:43:3f:17:d1:41:5c:7b:38:61:d1:7c:3a:65:8b:
97:85:88:4b:8b:a2:79:0d:02:3c:b4:28:11:7e:1a:81:a7:a2:
48:30:24:3f:11:9c:02:ee:b9:1a:55:09:0a:68:c5:47:6a:55:
06:5a:5b:a7:38:08:c9:3d:cd:d6:50:16:0d:da:1e:5e:b1:90:
a8:3d:f7:31:9b:4b:b0:bc:50:11:5a:5d:ff:b9:45:37:e0:41:
74:be:e1:c2:a2:2b:6b:b6:86:1e:f6:8b:b4:55:91:74:d6:1a:
fc:09:c7:b8:41:ec:65:45:88:e0:f7:84:ad:05:44:25:01:1c:
aa:a9:da:2a:f8:0b:5c:0f:a2:17:82:31:e8:ea:1c:19:a5:08:
97:e2:84:73:24:d7:19:91:d3:45:6f:b6:d6:17:8c:b1:24:4b:
b7:c8:49:1f:45:2a:f6:1c:93:c7:96:d0:e1:24:58:46:69:1e:
94:36:21:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:47:19 2026 by rpki-client