
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: RegUZwoTU9tToCYPFZGoUosh3FhCY323C8A0GWJ02qo=
Subject key identifier: C3:89:C6:52:86:76:88:18:07:E0:80:49:B5:A5:CF:31:BC:04:E4:E1
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 019CF38422926722CF249DED6E15E8821ABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 08AF
Signing time: Sun 15 Mar 2026 22:00:48 +0000
Manifest this update: Sun 15 Mar 2026 22:00:48 +0000
Manifest next update: Mon 16 Mar 2026 22:00:48 +0000
Files and hashes: 1: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: G5i0T+yuacXh0goUkx8r3x8ogGILXhRKo+hkBd6DRY0=)
2: Maj2D8cSqrB3CLI5LyrvNUbe9TI.roa (hash: b021eDbkKPvvVAW1JJTFEOe1gdVYy/RtiqJ/4iLcPI4=)
3: RUgdvvKNJ1CIlBna6_Sqdz_ueYU.asa (hash: oOjO7PspO0d7dU35qwf5iIVxgQOTcnCtnb/oChTMR6o=)
4: cHGfrQ2RRCrzMuQN1_zdwWiDk3I.roa (hash: EJXHDQe6ZDkATsWeN7+btkC/hG9y8A/gHxLok69CX5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:84:22:92:67:22:cf:24:9d:ed:6e:15:e8:82:1a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Mar 15 22:00:48 2026 GMT
Not After : Mar 16 22:00:48 2026 GMT
Subject: CN=c389c6528676881807e08049b5a5cf31bc04e4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:2e:b9:bb:90:81:5f:00:dc:32:68:6c:d9:
62:ef:9b:24:35:45:19:17:3c:01:16:03:36:90:2a:
ac:37:14:3c:62:79:32:30:2a:4c:dd:e6:2e:16:17:
07:88:cf:d2:15:ee:6e:ed:81:b4:6a:21:78:3e:ed:
a8:9c:8a:24:e5:6b:59:05:5f:1e:f7:a0:c4:dc:3e:
1a:d1:ed:e7:22:57:f6:5b:79:1e:8e:32:c8:ef:03:
c7:32:9b:7a:d0:49:09:76:45:24:ce:03:05:5a:ed:
f1:25:e2:13:14:79:42:fc:70:fc:fe:21:ca:01:fb:
27:b7:01:3d:8d:11:19:8b:f8:0e:52:96:74:5a:f0:
17:c9:f6:8a:2f:24:f3:23:45:4c:65:22:7e:03:e7:
55:2d:3a:48:1a:96:f2:95:55:66:4c:e5:53:54:42:
b3:1f:58:ef:22:32:c5:d7:d9:57:34:f6:a8:12:9c:
5f:89:6d:da:4e:9b:07:04:46:a3:59:25:23:fb:85:
a8:d5:5f:a7:30:9f:ee:80:08:2f:f1:f4:6d:f8:7f:
b3:48:dc:80:7d:ca:49:89:6b:f5:2d:11:02:31:4c:
3b:8a:8e:54:30:75:3f:c9:bb:33:38:08:5e:5d:26:
43:89:85:c9:d7:23:58:f9:3d:10:46:fa:a7:63:70:
73:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:89:C6:52:86:76:88:18:07:E0:80:49:B5:A5:CF:31:BC:04:E4:E1
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ba:7e:bd:64:f7:72:3e:ab:31:b1:bc:ee:6a:66:83:f7:70:
66:9a:6a:54:43:93:be:6b:98:d4:9c:b0:34:5c:77:f1:27:37:
29:50:f4:77:19:6d:00:dd:1f:de:4d:f8:71:e2:1a:35:e2:0d:
b1:57:46:07:af:71:65:ac:cd:f5:51:94:94:6b:85:73:32:4b:
a8:b8:2b:a6:1a:c1:af:27:2b:42:37:8c:8f:79:c0:3f:10:fe:
8e:6c:1a:02:02:32:f1:c4:c7:d1:87:f3:12:4f:99:0d:1c:05:
b6:10:a9:01:34:5f:a1:cc:eb:aa:fa:aa:78:8f:00:dd:d1:5b:
d0:2c:92:6c:88:6b:3a:58:9f:9a:b3:d2:a2:de:ba:0b:13:9b:
23:8c:6f:16:84:e7:8c:48:59:41:a3:5a:fb:9e:aa:02:e7:27:
b0:b4:22:59:c0:e2:5d:0b:65:b4:76:fd:d3:b0:13:b3:ff:88:
46:c2:f4:55:0a:81:ef:4b:21:a3:11:3d:b5:52:7f:02:e5:18:
df:b0:f7:db:7b:61:22:5d:9e:54:35:d6:d8:e6:e0:14:bd:c6:
c2:70:c2:d4:2d:ea:5e:b5:72:d5:9f:6d:96:fe:13:7e:85:4c:
cc:f0:31:60:63:0a:34:2a:e8:ff:1e:61:e9:4d:4b:21:80:e2:
88:07:71:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:03:46 2026 by rpki-client