Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: YJ0dcQMP323FQbqT+sXM6CoeIw10ci/DDTTyOo4wJOg=
Subject key identifier: A3:02:94:B4:E8:78:64:B2:68:D0:4C:E5:3B:21:66:E8:D6:60:2A:6D
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 01A0D34B3A8A6E0E57E6662B3AE874D6F803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0ED5
Signing time: Thu 24 Sep 2026 12:01:57 +0000
Manifest this update: Thu 24 Sep 2026 12:01:57 +0000
Manifest next update: Fri 25 Sep 2026 12:01:57 +0000
Files and hashes: 1: 29v_UvGTzrv0FNNyLrzzEifxUDQ.roa (hash: JBQnXvjqAFsHEoG0C+AGJp4xr36OJCXqWBYzwVT8SB4=)
2: 6qGh1CWEL5urT7KqlTeQZmDgafw.roa (hash: OCUd2zNoXwmHcdVRlj45FZmejRsmzHfWho56l2ASAPc=)
3: ERqoMB1EdTu-WuTzFfa9zq0xENU.roa (hash: JBCpcS00xzJTn3hkHBlQy1mjAraFDf4IIBmEBDuwd58=)
4: H8ur06ZzMoUo1Gt7mOEKMDQJafY.roa (hash: zkR8SvftOg6UL5t5sXessXOzxmjo2b7nS9dxJ1c+yR4=)
5: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: lu+PK388PScFREFI8ZVbnDneUc1ESmdakbKI8fzIADE=)
6: YGGcoMwgnXgQhZlFiELK4BMadGs.roa (hash: YXm7yk6lZ9RL1Uc7MqGLkZ8Gibptwurwo1w5xqii1FU=)
7: sreC2wgD7tfWbcxeKGmM8jbVMK0.roa (hash: 3TdsfIYOJaGfNZoP9ydUNXZCTzbuK4Zf2Wc7FFSRaFU=)
8: yjjbe9KP85kt8Ob2oDHDR9MXIMg.roa (hash: wJzFwpkYh/4OlhPxLRY+Af3Zi8uNHB0MPLWQeMahMl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:3a:8a:6e:0e:57:e6:66:2b:3a:e8:74:d6:f8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: Sep 24 12:01:57 2026 GMT
Not After : Sep 25 12:01:57 2026 GMT
Subject: CN=a30294b4e87864b268d04ce53b2166e8d6602a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:27:60:64:80:a3:b2:32:f4:7d:3e:59:ee:c7:
70:aa:ff:bf:a0:e7:1a:76:35:49:b1:72:11:c2:b7:
c4:ce:de:82:ef:37:db:69:d9:97:a5:0c:c3:62:c8:
0e:1f:6f:76:a4:4b:e0:86:08:82:17:80:a6:72:a1:
4a:d0:28:33:06:8a:18:96:b7:40:33:35:31:f5:ff:
e3:1e:43:49:d9:ed:6d:e2:c8:ec:96:5f:24:97:f7:
2f:bf:90:09:7b:9e:9f:61:33:e2:18:fd:b4:9f:af:
17:e6:7e:71:a8:c2:d3:fe:53:fb:9d:7a:28:e8:d2:
7e:40:57:e3:0f:d5:b7:ef:8f:b9:32:95:c7:57:c5:
91:67:cd:81:32:92:2d:b7:8c:12:64:b7:7e:d4:d6:
25:2f:5a:28:e2:e3:00:3a:57:23:e7:4e:41:ab:68:
a9:f0:72:a4:88:4a:ba:aa:04:52:9e:18:74:5a:9d:
e1:ef:f6:a3:4d:f5:73:a9:ad:ec:34:34:e4:52:c0:
0d:c9:67:4f:03:0d:e7:1f:ee:2c:f5:29:bb:8b:0b:
1e:c3:63:75:b5:2d:29:bf:89:8b:b3:98:2d:0c:d1:
2b:d1:2a:b2:7f:28:22:a7:22:6a:8a:b7:a6:57:48:
45:bd:6d:c8:3d:f3:a7:8c:6e:d0:2b:c5:c7:db:e1:
5d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:02:94:B4:E8:78:64:B2:68:D0:4C:E5:3B:21:66:E8:D6:60:2A:6D
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8f:5f:b9:7c:aa:33:7b:f7:58:f4:92:71:b0:4b:bb:86:9e:
0d:5a:79:22:a9:33:17:c5:39:cb:58:8d:ed:69:c2:51:48:c6:
28:a5:fa:ca:42:d4:86:d2:52:41:aa:a8:36:bd:1a:54:4f:71:
4e:19:77:0b:14:1d:b2:d1:1d:8c:92:f9:f2:a8:f4:6a:8e:78:
7a:66:45:2c:7f:74:de:5a:19:02:b2:f0:66:09:bd:69:d8:30:
9e:06:e8:99:e7:67:93:9c:a2:27:65:d6:db:d4:82:4b:ff:e2:
7a:86:7c:13:6c:c3:a4:13:8b:33:6e:1f:36:46:94:51:6e:1c:
ce:ee:a4:c1:40:e7:3f:6e:7b:76:f3:d9:38:f7:f5:b4:ae:cd:
62:52:7c:e2:11:32:b7:e6:01:ef:76:a5:4d:8f:dc:29:77:af:
87:99:86:9c:d3:4b:44:79:62:3c:80:00:27:93:41:1e:ff:69:
c6:99:ae:00:c6:fc:6b:9b:5c:e3:b9:bb:a9:5c:44:99:90:2a:
b5:92:1b:b1:5e:4d:f9:9a:db:dc:ea:08:ee:3f:69:cc:e4:b2:
40:4f:d0:8a:b1:ec:07:bf:2b:5a:88:3e:b9:a0:83:33:4a:8c:
e6:56:d6:ae:80:b9:68:21:fd:de:7c:56:18:64:e7:5c:9b:70:
a1:a5:b5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:52:32 2026 by rpki-client