Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: ceXQHYhOmCg2mdWoe7wKea5qsjY58S66gazwMEfnvK8=
Subject key identifier: DD:3C:EC:C2:19:14:08:61:13:A0:E6:E9:92:DF:BE:4A:05:7B:66:09
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 01A0E81D33DF4DB6D4446538C87C9177FF98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 0ABD
Signing time: Mon 28 Sep 2026 13:03:42 +0000
Manifest this update: Mon 28 Sep 2026 13:03:42 +0000
Manifest next update: Tue 29 Sep 2026 13:03:42 +0000
Files and hashes: 1: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: kxdioCCkHwevlKMreOKKz3GgItcOmGHGPV9YaPMHjsk=)
2: Maj2D8cSqrB3CLI5LyrvNUbe9TI.roa (hash: b021eDbkKPvvVAW1JJTFEOe1gdVYy/RtiqJ/4iLcPI4=)
3: p1ccrCra_00L6gD8dPHnVWnovDk.asa (hash: Tkz+LG7gpA+z7CdE6VRu1V3RZMUT7S6Od/VEYzShauI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1d:33:df:4d:b6:d4:44:65:38:c8:7c:91:77:ff:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Sep 28 13:03:42 2026 GMT
Not After : Sep 29 13:03:42 2026 GMT
Subject: CN=dd3cecc21914086113a0e6e992dfbe4a057b6609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:68:53:d1:16:10:9c:a9:3d:05:1e:08:97:3f:
79:02:dd:be:ab:eb:58:13:60:ec:6b:b1:a3:e0:e7:
e7:9a:31:8d:3d:e6:c1:ff:53:96:df:fa:06:df:91:
1e:46:52:3a:69:be:3e:22:49:72:72:ba:97:59:0b:
7f:26:85:80:73:6a:8c:8d:e6:f3:c6:f2:a2:b2:44:
51:ef:08:88:43:f4:df:ee:3f:0c:6a:2f:48:27:06:
d0:1e:14:98:01:dd:91:6f:fc:0c:c9:26:5e:30:69:
af:b2:82:a5:b2:b4:1d:9b:f2:74:f2:48:3e:e3:8d:
89:c5:96:5e:54:ea:0f:b8:56:61:a0:20:b4:c3:bd:
7b:de:6b:2b:2c:a7:aa:48:13:27:63:c0:9e:6d:0d:
71:32:d7:12:97:b4:c3:ed:95:d6:af:55:d9:28:13:
38:3d:57:79:14:4d:f2:58:05:bb:b0:9f:6c:42:94:
b7:80:d4:df:a9:ce:8e:df:d8:c7:28:2d:50:d3:b4:
15:51:96:50:9d:dd:6b:d3:67:44:f4:5e:8d:d4:4c:
00:5d:cc:21:62:43:34:6a:76:69:f8:4d:07:cd:ba:
47:28:cf:63:7c:12:cc:83:3d:b1:7f:63:02:d9:d7:
da:bc:5a:a9:5b:4e:fb:7a:98:5b:8f:a0:67:4c:45:
da:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3C:EC:C2:19:14:08:61:13:A0:E6:E9:92:DF:BE:4A:05:7B:66:09
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d3:10:94:41:bf:73:61:7f:45:12:1f:11:ba:ce:6d:34:5b:
e6:11:c0:8d:19:ad:f7:62:5d:b1:d5:66:77:b6:36:f1:fe:2c:
da:69:ef:da:74:e8:13:18:f1:3d:4c:a8:48:e2:9f:10:a0:2d:
5a:08:92:1c:76:3b:53:5d:c7:de:f7:e7:17:b2:0a:eb:82:e7:
98:ee:fc:86:f3:f2:8d:2b:28:18:68:f6:a4:e0:03:f0:57:38:
0e:51:c1:13:87:d4:ba:32:30:a2:e7:41:0c:61:b8:16:54:ae:
72:40:a3:d3:da:1e:9c:a5:b3:e3:3c:7a:5d:8e:66:04:29:77:
ce:45:9e:b8:36:0a:8d:98:a7:11:39:06:ea:e4:93:ed:20:ce:
26:ad:35:52:dd:6e:84:94:25:a1:32:17:45:2c:bf:cb:38:84:
7f:ed:16:a9:6e:92:b1:bf:52:69:41:3e:e2:27:ef:02:51:90:
e6:3e:54:25:1c:6f:d3:bf:9c:a2:e9:14:dd:08:cd:63:69:3e:
5c:76:83:0f:02:70:1c:aa:f2:b2:18:22:ff:29:1e:16:8d:e7:
e7:f4:66:95:f2:1f:0d:fb:c9:08:69:d7:b5:e1:74:4c:c1:eb:
0b:7b:77:33:f9:8e:8d:e9:17:ec:f3:46:9b:3c:2d:da:4b:82:
1f:ab:9e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:33:07 2026 by rpki-client