Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
File: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft (raw, json)
Hash identifier: gz3lW5yaQ2xbAnBXKLyYYnjYCZCKfaWM7VTM8IufPTI=
Subject key identifier: 40:0C:CC:19:5A:B7:6E:4E:7F:FA:F8:EC:F0:F2:46:AE:4E:DE:53:CB
Authority key identifier: 28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
Certificate issuer: /CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Certificate serial: 01A08C0D1ABE4AE7E77EAA9AA2793D85200D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
Manifest number: 1492
Signing time: Thu 10 Sep 2026 16:01:03 +0000
Manifest this update: Thu 10 Sep 2026 16:01:03 +0000
Manifest next update: Fri 11 Sep 2026 16:01:03 +0000
Files and hashes: 1: 6Rn-wxtOzItHCQZfTf_aB44eX3w.roa (hash: CLsXfryDKRJpVOl8XMFhcPTYQSBV9e1dqAwQW92Ka+4=)
2: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl (hash: m47zjkacNne0/itPcU+f083vHFobIv2HnzM7T2N8Ofs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:1a:be:4a:e7:e7:7e:aa:9a:a2:79:3d:85:20:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Validity
Not Before: Sep 10 16:01:03 2026 GMT
Not After : Sep 11 16:01:03 2026 GMT
Subject: CN=400ccc195ab76e4e7ffaf8ecf0f246ae4ede53cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:4d:a1:42:f8:f2:d0:7c:01:2e:4e:cd:e6:15:
18:15:cd:ff:4c:a7:2f:b8:4b:c0:fd:85:94:a0:3e:
25:33:0a:a5:06:af:66:3a:53:ac:17:db:4b:9b:8f:
c2:ad:61:91:03:55:66:51:ce:03:f7:28:f1:2d:d6:
70:7e:f5:d1:5f:36:d5:ec:16:47:5a:20:2b:c4:9c:
c4:cf:8a:5e:ba:f9:33:ea:0d:76:cd:f2:f9:66:ed:
e8:2a:4c:fd:ed:83:6e:4f:9e:88:99:ed:2e:67:d2:
63:93:46:75:c5:74:5c:f7:c8:0f:7e:75:9a:26:51:
85:f8:d0:05:a6:21:55:a8:0f:0b:cb:ca:2c:d0:e2:
3d:4c:7f:25:81:cb:f9:38:e6:e6:05:9c:bf:18:20:
b0:76:ef:e4:3c:c5:04:68:20:de:74:5c:96:52:ce:
c4:9a:74:04:4f:85:59:19:6a:7b:89:de:95:a8:0c:
54:68:2d:db:4c:7e:cd:7a:36:d9:dc:25:bb:e3:d8:
17:30:6e:0d:cf:cf:2c:40:83:58:fb:bd:62:ea:46:
3f:64:39:b4:63:e9:f4:e2:af:fa:f1:e8:5e:d9:30:
02:d1:46:1a:7a:d1:de:8e:ca:50:9e:f4:cd:8f:ad:
28:00:d6:84:ec:0e:29:08:26:1c:e4:ce:84:41:a1:
cb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0C:CC:19:5A:B7:6E:4E:7F:FA:F8:EC:F0:F2:46:AE:4E:DE:53:CB
X509v3 Authority Key Identifier:
keyid:28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:66:44:97:5b:7a:bc:cd:18:ff:ea:df:ed:3e:a4:ab:a6:b9:
a7:05:5a:ce:2a:7b:0a:55:e1:a4:3c:ed:33:eb:e7:a7:13:62:
d1:a1:e1:cb:d2:20:41:79:1c:89:ff:a9:88:01:10:b8:fe:15:
33:f1:53:ed:2a:0d:2d:9b:a6:e2:d8:bc:15:8c:8c:cd:65:82:
f8:56:68:12:3a:77:00:cd:9f:b1:97:30:72:20:19:ca:c0:6a:
0d:93:c0:61:1d:76:a8:92:10:1f:8b:5b:96:43:96:31:0c:0c:
c4:12:85:48:c9:eb:11:bf:f5:ab:74:c5:66:52:f5:89:05:14:
7e:da:f1:09:31:21:5b:cd:e6:9b:33:15:65:ae:ff:90:44:7d:
0d:9a:0a:dd:9b:cc:cb:b1:0a:a0:38:b8:62:45:0d:de:6a:59:
97:5a:23:10:5b:2e:8e:e2:fa:03:f2:22:10:ae:3b:e4:9b:9b:
b5:cc:36:1c:7d:1c:d6:ce:56:0e:d1:c6:ce:58:52:30:d0:a7:
e7:32:de:c4:a1:ff:5c:11:41:34:93:91:bd:0b:2a:80:39:cf:
25:b2:42:5a:1c:8a:bf:b3:ff:83:07:2a:2e:6f:fa:e0:b6:57:
fe:e3:43:5e:65:c6:5e:71:7b:04:5b:4c:8b:7d:9d:85:18:11:
7a:8c:c4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:25:09 2026 by rpki-client