Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: JLSFtOC3dJkavMxkajhrCxAbxBSicGdFfzN0tsFjdt0=
Subject key identifier: C8:89:37:4F:CD:20:4C:01:FA:E4:2A:9F:A2:C8:D2:FC:56:CD:40:39
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 019FD271322890D923ECF483EDFC0A55A76D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0E50
Signing time: Wed 05 Aug 2026 15:01:01 +0000
Manifest this update: Wed 05 Aug 2026 15:01:01 +0000
Manifest next update: Thu 06 Aug 2026 15:01:01 +0000
Files and hashes: 1: 29v_UvGTzrv0FNNyLrzzEifxUDQ.roa (hash: JBQnXvjqAFsHEoG0C+AGJp4xr36OJCXqWBYzwVT8SB4=)
2: 6qGh1CWEL5urT7KqlTeQZmDgafw.roa (hash: OCUd2zNoXwmHcdVRlj45FZmejRsmzHfWho56l2ASAPc=)
3: ERqoMB1EdTu-WuTzFfa9zq0xENU.roa (hash: JBCpcS00xzJTn3hkHBlQy1mjAraFDf4IIBmEBDuwd58=)
4: H8ur06ZzMoUo1Gt7mOEKMDQJafY.roa (hash: zkR8SvftOg6UL5t5sXessXOzxmjo2b7nS9dxJ1c+yR4=)
5: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: H6RjyNMYGuf3OWAXTzqXLw+olGRIru7MjFQ/FKX+35w=)
6: YGGcoMwgnXgQhZlFiELK4BMadGs.roa (hash: YXm7yk6lZ9RL1Uc7MqGLkZ8Gibptwurwo1w5xqii1FU=)
7: sreC2wgD7tfWbcxeKGmM8jbVMK0.roa (hash: 3TdsfIYOJaGfNZoP9ydUNXZCTzbuK4Zf2Wc7FFSRaFU=)
8: yjjbe9KP85kt8Ob2oDHDR9MXIMg.roa (hash: wJzFwpkYh/4OlhPxLRY+Af3Zi8uNHB0MPLWQeMahMl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Aug 2026 13:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:71:32:28:90:d9:23:ec:f4:83:ed:fc:0a:55:a7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Aug 5 15:01:01 2026 GMT
Not After : Aug 6 15:01:01 2026 GMT
Subject: CN=c889374fcd204c01fae42a9fa2c8d2fc56cd4039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:dd:4f:70:2b:10:57:46:3c:2f:f4:53:ed:
fc:b7:6f:c6:38:d8:60:91:3b:1d:11:98:07:af:cb:
02:0d:9b:05:ad:5d:c1:8a:96:32:6b:5a:14:c5:89:
bf:60:56:56:bb:58:12:30:6e:0e:27:d8:eb:4e:47:
96:07:c6:0b:57:81:0d:05:93:0b:22:9e:0f:dd:2b:
9e:59:e9:04:62:6f:7d:e2:96:17:20:27:0c:c0:fd:
59:40:93:57:b0:dd:5e:3e:30:ca:1e:56:06:41:fd:
1c:e8:b0:2f:43:72:ff:14:3f:e2:0f:be:50:6d:f7:
c3:6e:98:c6:b7:d9:a9:b7:5f:9f:c5:53:9d:fc:a3:
b2:af:46:1d:f4:76:ae:e0:ba:87:8c:6f:61:82:84:
53:57:d5:e8:72:6d:e9:d2:94:a7:54:f9:0b:81:76:
dc:ea:08:74:7f:d3:c7:2e:0d:bd:3d:3e:9b:7a:2b:
4b:07:67:f7:57:95:f9:a2:f6:85:30:a8:6f:f8:c8:
4e:04:86:76:72:db:84:c2:cc:2b:bd:e7:71:0b:51:
59:43:e2:af:c0:cc:6b:79:98:f3:8b:13:53:b1:62:
c5:7c:c6:1f:28:11:64:75:19:0d:bb:87:56:eb:fc:
20:6c:ad:d5:f2:c9:70:95:4a:dc:b4:5e:15:4b:0c:
b7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:89:37:4F:CD:20:4C:01:FA:E4:2A:9F:A2:C8:D2:FC:56:CD:40:39
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:0c:db:97:10:72:9d:61:1a:94:50:8f:32:e1:43:7e:05:3e:
e9:3f:55:90:7a:4b:6e:35:2c:9a:5d:49:f9:5a:4e:58:96:3f:
de:4b:f0:4a:fb:d0:1e:c6:ae:97:af:9c:59:bb:02:01:fc:fb:
06:d8:86:a5:ab:ea:28:0a:d3:a6:1c:2d:26:3f:71:3a:16:9c:
e4:58:89:d7:65:0c:0c:ce:6a:70:e8:2b:ca:8e:e5:7c:27:6f:
ad:97:a1:82:47:cd:c7:97:ac:5d:3a:c0:cb:b1:4e:71:d1:68:
be:11:fe:4d:e1:2f:31:a9:b7:db:a2:5b:83:24:a0:de:aa:ad:
dc:a9:86:5b:90:c7:5b:39:3c:3c:91:1c:39:37:fb:cc:27:d0:
78:da:f4:88:29:13:35:36:a1:12:ba:50:d2:eb:b2:48:a2:2e:
13:3e:7f:cc:cf:26:ab:91:6c:3c:30:66:db:32:df:80:19:81:
56:54:1d:00:3d:03:7a:0e:23:4e:5e:31:8c:30:3a:37:d7:29:
45:25:3a:d4:09:93:3f:3b:53:9d:ea:39:de:db:d8:db:6f:46:
bb:ff:f1:d4:1c:e6:4a:bf:f3:51:2a:6d:77:bd:8b:58:5f:7f:
21:aa:98:4b:29:b0:96:1e:24:4f:27:45:7c:cf:44:53:60:f3:
30:27:26:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 19:55:32 2026 by rpki-client