Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
File: KL8ecjI3QqxNgTarbI6F33ujfus.mft (raw, json)
Hash identifier: fLIifXfYT1MeVKhHZ0/My56X39vbrUqnVA3sbND5RFw=
Subject key identifier: 93:93:23:21:44:8A:CA:C8:FB:3B:3B:2B:F4:59:F0:AF:DB:0F:A4:1E
Authority key identifier: 28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
Certificate issuer: /CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Certificate serial: 01A153D2D50ABBD6B7F987148F98D286EFDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
Manifest number: 1AB2
Signing time: Mon 19 Oct 2026 11:01:28 +0000
Manifest this update: Mon 19 Oct 2026 11:01:28 +0000
Manifest next update: Tue 20 Oct 2026 11:01:28 +0000
Files and hashes: 1: JYwSyuAchjIXKqx-0j7gKo4P2VU.roa (hash: Ont+m3ZNydrhvmwI0GsT3aYVRki6QYVMqq1ZQxnAm0g=)
2: KL8ecjI3QqxNgTarbI6F33ujfus.crl (hash: ROmHvG733l8zXQl6fLTDhEx9Dv3D7xVnNao5rOdLBAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:d2:d5:0a:bb:d6:b7:f9:87:14:8f:98:d2:86:ef:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Validity
Not Before: Oct 19 11:01:28 2026 GMT
Not After : Oct 20 11:01:28 2026 GMT
Subject: CN=93932321448acac8fb3b3b2bf459f0afdb0fa41e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:58:a1:82:44:60:e5:5b:88:2c:b8:13:52:28:
ae:1b:73:6d:a4:b6:ab:8f:74:43:d3:49:ce:d7:65:
5a:d5:aa:b4:e2:e0:48:fd:79:7d:8e:d2:99:30:98:
17:81:51:f4:52:f6:4f:7c:7d:bb:9e:20:e7:c7:bf:
2e:96:35:81:19:f7:68:93:6f:5b:36:af:93:a9:ce:
72:b0:da:1a:4c:3e:98:03:54:06:86:5a:ce:f8:03:
73:9b:2a:37:c1:5d:93:60:15:2e:48:e5:fc:78:95:
10:34:28:fc:29:7a:bf:3c:79:e8:ea:28:ee:b0:be:
39:ee:cf:03:81:1a:fe:22:7f:3d:4a:a7:db:de:b1:
66:73:0f:18:ac:2e:9a:d4:9f:81:6d:09:31:4a:99:
60:25:8c:83:fc:8b:12:46:a7:24:99:f6:a4:19:db:
92:73:10:09:a0:6b:f6:57:6e:3e:13:b3:55:22:ea:
93:a7:7c:c3:f8:8f:44:19:3a:92:9d:ff:c4:6d:3f:
92:8f:b9:6d:e5:3b:69:31:1b:bd:d7:03:69:88:f4:
dc:01:d7:24:6d:79:98:e3:57:47:37:c6:99:93:9a:
18:0f:47:91:ff:0f:0f:9f:3d:94:cc:32:d9:5f:a6:
fa:e9:85:18:2c:cb:c9:b6:c1:87:fe:98:fe:0d:89:
05:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:93:23:21:44:8A:CA:C8:FB:3B:3B:2B:F4:59:F0:AF:DB:0F:A4:1E
X509v3 Authority Key Identifier:
keyid:28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:fb:c3:1e:54:79:9b:a7:ff:79:70:a9:4d:48:87:9a:5e:b0:
e7:cd:80:8e:21:41:7e:9b:ca:75:16:80:22:16:4e:3a:03:9c:
69:66:f1:80:b1:b0:9c:24:c7:f3:de:5a:cb:dc:06:f0:b9:ec:
ee:60:99:ac:e7:d0:e2:de:3b:5c:fe:91:cf:cb:a6:59:2a:6e:
7f:17:e9:b9:6d:c9:4a:43:05:85:7b:23:ee:cd:18:c2:98:41:
84:3f:cc:38:b6:78:a6:a4:b9:81:65:52:63:cc:d0:ae:54:d2:
0b:c4:d0:ca:38:63:71:0d:1c:27:fd:f6:c4:59:18:68:eb:3e:
e6:2a:0f:78:eb:b7:7f:f8:50:52:c0:58:00:70:47:41:55:d4:
94:58:8a:2a:84:37:2d:d5:e9:a2:57:b0:82:76:c0:16:ce:da:
ce:65:55:3c:b5:f0:0f:ff:d4:fc:52:fd:e0:57:66:ee:43:7f:
91:d7:55:c5:87:9a:97:49:ff:b8:c8:4a:a0:28:7b:cd:73:a1:
fe:54:23:78:08:e9:b2:1c:85:25:2a:ed:c0:d1:68:08:bd:d3:
05:a1:ca:7d:d2:22:00:95:43:9c:f4:6d:88:3a:3b:0a:be:df:
1b:57:4e:33:d5:2a:cb:85:fb:9e:21:07:e9:80:f7:65:ab:38:
10:60:59:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:28:19 2026 by rpki-client