Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: kFN45VDFdvBaJkb8kPJLIDY9W7/L70M5xwNUFAMbEus=
Subject key identifier: E0:93:C7:7D:CE:69:55:5C:51:3F:B3:5E:2F:54:F5:62:B1:D1:19:03
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 019DDD31DB7CED395018B96FD60FD8215BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 0928
Signing time: Thu 30 Apr 2026 07:02:05 +0000
Manifest this update: Thu 30 Apr 2026 07:02:05 +0000
Manifest next update: Fri 01 May 2026 07:02:05 +0000
Files and hashes: 1: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: AWTgWiZ26D7sp1ho63xbFemVBLp0GSRyMOAB3yvSF2o=)
2: Maj2D8cSqrB3CLI5LyrvNUbe9TI.roa (hash: b021eDbkKPvvVAW1JJTFEOe1gdVYy/RtiqJ/4iLcPI4=)
3: RUgdvvKNJ1CIlBna6_Sqdz_ueYU.asa (hash: oOjO7PspO0d7dU35qwf5iIVxgQOTcnCtnb/oChTMR6o=)
4: cHGfrQ2RRCrzMuQN1_zdwWiDk3I.roa (hash: EJXHDQe6ZDkATsWeN7+btkC/hG9y8A/gHxLok69CX5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:31:db:7c:ed:39:50:18:b9:6f:d6:0f:d8:21:5b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Apr 30 07:02:05 2026 GMT
Not After : May 1 07:02:05 2026 GMT
Subject: CN=e093c77dce69555c513fb35e2f54f562b1d11903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d1:72:66:d7:b4:b0:c6:ee:d9:43:58:ce:6a:
86:79:f0:83:92:b9:2a:a3:f2:19:30:3d:b9:02:ff:
73:e8:3d:8b:51:27:4f:19:59:c4:74:b4:ca:45:7c:
28:6c:54:f6:06:2a:a1:75:99:98:be:db:31:54:79:
31:aa:4e:10:ec:cf:31:19:01:03:20:f4:0b:d0:1a:
18:cd:26:74:3f:3c:c7:e4:dc:47:e4:5b:f1:62:3f:
1f:44:b7:7f:57:fd:7e:b2:b6:ce:dd:7c:36:45:92:
d8:02:3c:29:b6:d3:48:8e:4b:e7:b5:bd:35:c8:13:
d7:0a:46:76:83:2a:13:54:99:a8:a4:1c:c5:34:44:
8a:00:e0:d8:e6:95:58:a1:99:b7:2d:00:f5:c3:41:
e9:d3:a1:8e:e2:7a:7e:ca:96:da:98:bc:ae:25:b3:
b3:41:da:1a:e4:c8:08:d0:41:2f:a4:9e:b4:25:ec:
61:b4:6b:e0:fb:05:7d:46:06:9f:df:bc:03:bd:7a:
ef:12:08:89:19:71:c6:f7:28:2f:82:86:e3:eb:e1:
0c:cc:b2:84:32:8b:6d:55:b1:a8:2a:09:ea:1f:b4:
4c:05:a8:51:9a:c6:32:80:a1:5d:4b:49:00:ec:02:
42:02:51:eb:69:3a:54:9a:fe:67:3e:1c:50:e1:54:
c8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:93:C7:7D:CE:69:55:5C:51:3F:B3:5E:2F:54:F5:62:B1:D1:19:03
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:34:5f:ca:4d:b3:6c:54:5b:bc:ef:9f:a8:f2:1b:73:23:e4:
2e:15:5a:6f:80:e0:64:00:56:44:d5:71:0c:86:02:88:8f:64:
1f:3e:31:0c:04:b9:36:c6:c7:ce:c9:73:12:b3:4d:43:09:9c:
08:7b:f5:cc:46:6d:8a:5c:e0:e3:27:7b:5f:5b:80:3c:c6:3c:
7b:ca:e2:3f:76:a1:c7:2e:d9:63:52:19:75:1f:62:bf:41:f1:
54:78:85:d2:63:a0:5d:0f:d0:30:b9:73:8e:89:8b:6b:e7:b7:
41:ff:b5:dd:24:cd:7b:19:c5:58:68:95:5b:2c:f4:bb:3a:06:
0a:b4:75:df:12:23:ab:2e:b4:28:6f:cf:65:58:66:a6:07:d4:
88:4a:f5:73:4b:9d:d1:72:26:05:d6:17:75:08:26:a2:30:8f:
9b:a7:d5:1d:bd:6b:42:d6:6b:b1:3d:6d:92:e4:1f:d7:c1:f7:
c6:2f:5d:f1:9a:d4:a5:02:56:8c:56:ff:53:9a:a7:16:75:da:
09:35:c9:27:08:23:87:6a:22:f4:df:93:c4:df:bd:be:c7:16:
8e:01:9a:c0:55:d6:c7:b5:99:76:d9:ba:bc:66:16:1d:3d:b0:
85:f0:f0:d3:d7:d9:f1:47:fd:53:64:4b:47:e2:07:53:39:40:
6f:e3:17:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:58:34 2026 by rpki-client