
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.mft
File: KJXdKTdOKsyr5NiuxD9Np80SBfM.mft (raw, json)
Hash identifier: 8z+SOv6S5iB83HFCdEdgwWspA1dOYPNCZ9WCIUUOz0M=
Subject key identifier: 47:C1:36:12:E9:B4:4F:8D:47:BF:9D:99:1A:A7:B8:6B:E1:78:20:86
Authority key identifier: 28:95:DD:29:37:4E:2A:CC:AB:E4:D8:AE:C4:3F:4D:A7:CD:12:05:F3
Certificate issuer: /CN=2895dd29374e2accabe4d8aec43f4da7cd1205f3
Certificate serial: 019EBE7F021A9A8E1CC0477F3496A085EFD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJXdKTdOKsyr5NiuxD9Np80SBfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.mft
Manifest number: 6F
Signing time: Sat 13 Jun 2026 01:00:55 +0000
Manifest this update: Sat 13 Jun 2026 01:00:55 +0000
Manifest next update: Sun 14 Jun 2026 01:00:55 +0000
Files and hashes: 1: KJXdKTdOKsyr5NiuxD9Np80SBfM.crl (hash: +1ypZsUQriAhZUgot8IFEccBC7Tbpf5+Ee69/6ucy5c=)
2: l29f1pwR90G9hmQYKMzdnPcuWRI.asa (hash: RNcM3GXoyy5iuqkZ/xhWwSNrSjX/280dh47k+2z7ykw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJXdKTdOKsyr5NiuxD9Np80SBfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:02:1a:9a:8e:1c:c0:47:7f:34:96:a0:85:ef:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895dd29374e2accabe4d8aec43f4da7cd1205f3
Validity
Not Before: Jun 13 01:00:55 2026 GMT
Not After : Jun 14 01:00:55 2026 GMT
Subject: CN=47c13612e9b44f8d47bf9d991aa7b86be1782086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:65:5a:56:e2:31:89:74:af:f4:bb:2f:c9:52:
eb:e8:e8:03:c7:e2:13:40:cb:66:89:e8:8b:d5:2f:
36:ef:64:d3:80:3c:0e:52:8d:c3:47:57:8e:89:86:
04:4c:cf:f0:87:d1:d2:f7:47:00:42:e7:8a:59:8e:
01:97:5e:a7:24:1e:b8:87:f3:71:11:5b:54:5b:3c:
b9:7d:ed:bf:48:14:69:e8:a2:ce:e3:f0:f5:c1:fe:
4a:cd:f6:ba:63:64:b9:66:b0:2a:f8:6d:bd:45:40:
22:40:12:11:db:a1:9a:f8:1b:34:ea:45:e9:4b:dc:
a4:fc:8f:ad:50:da:7c:a0:ae:81:a4:71:f1:95:8d:
d3:d3:da:70:82:56:47:85:c3:b0:89:81:ae:cc:45:
50:8a:78:7d:0b:2e:70:40:2c:c9:19:80:06:82:8f:
f8:aa:0d:bb:d1:9b:ea:b6:a3:78:ee:13:3f:66:4d:
fd:fd:e2:73:12:b8:64:d2:df:ab:fd:66:d2:b6:82:
46:95:1b:db:e9:8f:f7:83:85:36:90:86:b9:87:50:
89:4e:fd:6e:b0:e5:1d:17:34:71:be:20:ac:d9:14:
43:0d:e9:04:5a:8a:26:81:29:04:51:a8:4c:a6:c8:
43:cb:18:84:11:37:f5:bb:af:a0:7b:56:cd:1e:f5:
fa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C1:36:12:E9:B4:4F:8D:47:BF:9D:99:1A:A7:B8:6B:E1:78:20:86
X509v3 Authority Key Identifier:
keyid:28:95:DD:29:37:4E:2A:CC:AB:E4:D8:AE:C4:3F:4D:A7:CD:12:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJXdKTdOKsyr5NiuxD9Np80SBfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:f7:f1:49:6c:30:5f:eb:e0:19:aa:2b:83:56:c4:8c:50:6d:
40:9b:f2:3f:e2:f7:3e:8f:cb:cf:0c:d4:a5:08:a7:4b:6e:7b:
8b:f2:55:fb:af:aa:2b:8d:53:1a:fb:ae:14:0c:87:69:89:10:
3e:2c:84:76:87:d4:be:c3:59:52:65:37:38:72:fc:10:46:01:
0f:66:c7:70:95:21:1d:17:65:d5:86:19:ef:cc:60:f4:f7:67:
03:df:82:1d:1c:b6:96:bb:3f:1b:72:f4:d8:71:8f:f5:64:33:
4b:60:ba:5d:41:1f:d1:9b:9a:b8:fb:a7:ba:95:db:da:94:57:
bc:88:f8:e2:f2:d2:a4:b9:13:e3:c6:78:22:54:fd:21:4b:75:
26:7c:c8:b7:3f:b4:a9:ce:48:3e:f8:a3:27:60:d0:5b:9f:78:
81:6d:02:75:8e:59:a3:51:cf:1e:44:eb:53:ca:e9:7f:9d:06:
a8:43:d1:c4:59:3c:f4:b7:12:48:f5:c3:81:42:60:88:1b:ec:
69:a6:c0:8a:52:3c:54:7b:fa:b8:9f:31:65:91:1d:bd:d6:e0:
6c:99:81:be:62:51:52:f5:09:e3:43:39:8b:7b:67:6e:71:0d:
1b:dd:1e:9a:0d:bb:19:27:bd:3d:55:33:db:8f:b7:94:ca:df:
7a:40:2e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:47 2026 by rpki-client