Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
File: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft (raw, json)
Hash identifier: dtAzgosbmxXlqhQDJYzCZo8q4C7Tl7KHsSKFFTrxpkQ=
Subject key identifier: 87:7C:3B:A8:26:03:E1:7D:A1:7C:D7:D9:2F:C8:57:87:BC:9E:5F:02
Authority key identifier: 28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
Certificate issuer: /CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Certificate serial: 019FA071F39461D7E7CDE1EF6D8034FEAE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
Manifest number: 1418
Signing time: Sun 26 Jul 2026 22:00:50 +0000
Manifest this update: Sun 26 Jul 2026 22:00:50 +0000
Manifest next update: Mon 27 Jul 2026 22:00:50 +0000
Files and hashes: 1: 6Rn-wxtOzItHCQZfTf_aB44eX3w.roa (hash: CLsXfryDKRJpVOl8XMFhcPTYQSBV9e1dqAwQW92Ka+4=)
2: KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl (hash: 3sYig0manoGP0GEMZ4U6ykEYvB8ux2bs2RUjY/ovOAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:71:f3:94:61:d7:e7:cd:e1:ef:6d:80:34:fe:ae:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f981c20aa652aa85e008bd262f7bc1f856c358
Validity
Not Before: Jul 26 22:00:50 2026 GMT
Not After : Jul 27 22:00:50 2026 GMT
Subject: CN=877c3ba82603e17da17cd7d92fc85787bc9e5f02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:fb:5e:c6:1b:c0:84:31:2d:c4:b7:67:bd:
12:6d:47:a6:c0:c6:29:73:4b:7d:81:da:46:c2:2d:
0b:97:b9:30:32:18:d0:59:79:3c:1a:46:74:36:7d:
7b:eb:b4:b8:8a:09:05:e5:df:4a:f0:aa:d3:c8:34:
ef:87:b2:d8:53:3e:58:d1:ad:5b:d5:f9:85:9f:07:
2a:6f:46:d1:90:bf:f5:c1:d3:f0:b8:ee:45:42:b6:
79:ec:f5:b6:70:f8:c9:ed:20:24:e4:22:36:53:84:
96:63:c1:c5:53:14:76:06:5e:b2:50:d0:65:f6:0f:
e8:ea:9d:12:91:0b:b5:e3:76:95:29:20:e0:4d:9b:
8e:a6:3c:f0:cf:80:7c:c9:7b:ab:59:3f:5c:64:1a:
fa:82:da:6a:3f:b8:cd:70:0b:97:9d:d7:18:f1:c4:
25:cd:73:88:a9:5e:f8:ff:2b:7e:9a:15:fa:36:ea:
18:e8:d7:cf:3b:58:79:74:a7:0b:ad:bb:4d:b7:7a:
11:e3:88:e6:4f:1d:55:6c:5a:df:f0:86:a6:86:63:
c4:ac:9e:84:ab:77:28:9c:2a:a2:1c:65:25:59:e6:
89:df:32:53:37:ca:e2:a3:6f:1b:fb:38:fd:4c:61:
c9:16:7e:11:e4:d6:ec:f9:98:56:93:4e:e0:30:2f:
93:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7C:3B:A8:26:03:E1:7D:A1:7C:D7:D9:2F:C8:57:87:BC:9E:5F:02
X509v3 Authority Key Identifier:
keyid:28:F9:81:C2:0A:A6:52:AA:85:E0:08:BD:26:2F:7B:C1:F8:56:C3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/352f9a-4fde-484a-b923-c87fbbd03e86/1/KPmBwgqmUqqF4Ai9Ji97wfhWw1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:5f:7e:dd:d0:9f:e2:eb:30:cd:5d:1d:3e:39:17:07:c0:fc:
0e:e1:ff:05:a6:de:9c:43:c6:b7:32:86:fd:58:69:61:2d:08:
1a:f2:25:76:7e:82:17:71:73:e3:32:49:41:6e:12:38:a3:2b:
8a:bb:08:57:4d:bb:8d:89:b6:ca:f8:f6:5c:d3:3d:06:95:68:
d0:eb:cd:c1:e5:02:a3:13:c4:26:06:11:37:d1:1c:73:06:a4:
25:9c:b7:52:f4:67:4c:5a:02:7c:7f:be:2b:62:c3:3c:58:0e:
e5:9c:fd:82:b0:1e:a0:36:17:f7:e2:7c:07:32:d5:1a:da:f1:
65:9b:89:38:12:9a:de:14:fb:69:f4:4b:0c:8f:9f:ff:ac:64:
8e:18:69:0b:75:43:89:96:ba:d8:fe:fc:79:4e:52:d3:43:ee:
42:81:4f:52:8b:0c:01:a3:d2:d9:5c:fc:49:4a:9a:6d:e7:b4:
6b:75:08:c5:9c:7c:30:8b:31:ef:f4:8b:ea:5d:03:19:2a:df:
83:70:28:78:e9:0f:f7:23:0d:9a:79:85:cc:0b:fd:b1:a6:e9:
df:f3:37:69:0e:55:a1:4e:de:46:d2:f8:5e:ee:00:77:af:46:
70:a7:8e:a5:de:ad:d5:27:61:ee:e8:35:04:2f:a8:6d:42:8d:
05:4d:99:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gcfOUYdfnzeHvbYA0/q5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4Zjk4MWMyMGFhNjUyYWE4NWUwMDhiZDI2MmY3YmMxZjg1
NmMzNTgwHhcNMjYwNzI2MjIwMDUwWhcNMjYwNzI3MjIwMDUwWjAzMTEwLwYDVQQD
Eyg4NzdjM2JhODI2MDNlMTdkYTE3Y2Q3ZDkyZmM4NTc4N2JjOWU1ZjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMn7XsYbwIQxLcS3Z70SbUemwMYp
c0t9gdpGwi0Ll7kwMhjQWXk8GkZ0Nn1767S4igkF5d9K8KrTyDTvh7LYUz5Y0a1b
1fmFnwcqb0bRkL/1wdPwuO5FQrZ57PW2cPjJ7SAk5CI2U4SWY8HFUxR2Bl6yUNBl
9g/o6p0SkQu143aVKSDgTZuOpjzwz4B8yXurWT9cZBr6gtpqP7jNcAuXndcY8cQl
zXOIqV74/yt+mhX6NuoY6NfPO1h5dKcLrbtNt3oR44jmTx1VbFrf8IamhmPErJ6E
q3conCqiHGUlWeaJ3zJTN8rio28b+zj9TGHJFn4R5Nbs+ZhWk07gMC+TgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFId8O6gmA+F9oXzX2S/IV4e8nl8CMB8GA1UdIwQY
MBaAFCj5gcIKplKqheAIvSYve8H4VsNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1BtQndncW1VcXFGNEFpOUppOTd3ZmhXdzFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zNTJmOWEtNGZkZS00ODRhLWI5MjMt
Yzg3ZmJiZDAzZTg2LzEvS1BtQndncW1VcXFGNEFpOUppOTd3ZmhXdzFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8zNTJmOWEtNGZkZS00ODRhLWI5MjMtYzg3ZmJiZDAzZTg2
LzEvS1BtQndncW1VcXFGNEFpOUppOTd3ZmhXdzFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhF9+3dCf
4uswzV0dPjkXB8D8DuH/BabenEPGtzKG/VhpYS0IGvIldn6CF3Fz4zJJQW4SOKMr
irsIV027jYm2yvj2XNM9BpVo0OvNweUCoxPEJgYRN9EccwakJZy3UvRnTFoCfH++
K2LDPFgO5Zz9grAeoDYX9+J8BzLVGtrxZZuJOBKa3hT7afRLDI+f/6xkjhhpC3VD
iZa62P78eU5S00PuQoFPUosMAaPS2Vz8SUqabee0a3UIxZx8MIsx7/SL6l0DGSrf
g3AoeOkP9yMNmnmFzAv9sabp3/M3aQ5VoU7eRtL4Xu4Ad69GcKeOpd6t1Sdh7ug1
BC+obUKNBU2ZzA==
-----END CERTIFICATE-----
Generated at Sun Jul 26 23:49:20 2026 by rpki-client