Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
File: KL8ecjI3QqxNgTarbI6F33ujfus.mft (raw, json)
Hash identifier: 67CvRXcFS41urNAFfTzIuQSPg/Ets/Uh2b2szisLzTU=
Subject key identifier: F6:51:56:15:13:84:2D:89:70:CD:E7:B1:48:BB:F8:3F:F5:E0:06:D6
Authority key identifier: 28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
Certificate issuer: /CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Certificate serial: 019F1641E4723E593A5C9D56C9FA68AD07F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 02:00:44 +0000
Manifest this update: Tue 30 Jun 2026 02:00:44 +0000
Manifest next update: Wed 01 Jul 2026 02:00:44 +0000
Files and hashes: 1: JYwSyuAchjIXKqx-0j7gKo4P2VU.roa (hash: Ont+m3ZNydrhvmwI0GsT3aYVRki6QYVMqq1ZQxnAm0g=)
2: KL8ecjI3QqxNgTarbI6F33ujfus.crl (hash: wD3PcqlOZ/pOu6TUH6k0Inj8L/18VkEi30OpIiUQBnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 21:41:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:16:41:e4:72:3e:59:3a:5c:9d:56:c9:fa:68:ad:07:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Validity
Not Before: Jun 30 02:00:44 2026 GMT
Not After : Jul 1 02:00:44 2026 GMT
Subject: CN=f651561513842d8970cde7b148bbf83ff5e006d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:b1:b7:92:15:c8:8f:3f:ae:76:0d:98:b6:
36:e3:08:ed:22:2f:d5:a4:f7:39:79:82:bf:b3:c9:
39:72:91:94:d2:cc:54:b7:fa:4d:67:8a:6e:60:4c:
81:82:91:dc:90:a1:d8:82:5c:c2:64:54:7d:68:1b:
7b:c3:56:84:a5:02:95:7f:b7:7a:cd:c4:25:64:af:
1e:fa:c6:ca:9d:a6:e2:d5:19:da:d1:4d:59:79:09:
1e:d5:27:4a:b2:fe:47:ab:a2:70:87:92:6c:08:bd:
9d:2f:82:87:8b:c8:8e:e6:cb:95:c0:d9:27:c2:da:
41:8a:86:30:ce:bd:3f:1f:73:09:9f:db:a8:6b:0d:
c0:59:26:50:ea:d5:77:c1:b6:03:00:20:b4:8d:f7:
ca:40:e2:cc:6a:f7:ea:83:bd:c7:a4:0f:6d:c2:06:
cd:4c:9e:e7:ab:d6:1a:bf:06:39:d2:b9:b3:be:b5:
97:33:9c:62:77:f5:e8:79:2c:ee:45:5b:17:64:f7:
3c:25:35:21:89:64:ed:a7:42:dc:07:01:79:4d:6c:
fa:f1:93:23:dd:21:3a:8d:e8:f2:a5:cc:2e:20:8b:
93:bc:9a:94:48:57:9b:4c:68:d4:2a:06:c8:19:21:
a5:6f:6f:6f:b6:cc:8f:cd:dc:f2:cb:39:f0:14:3d:
f9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:51:56:15:13:84:2D:89:70:CD:E7:B1:48:BB:F8:3F:F5:E0:06:D6
X509v3 Authority Key Identifier:
keyid:28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:f5:62:ce:4c:4f:2b:ad:51:f6:3a:f5:9d:33:c2:b8:d1:c6:
a9:f7:d0:e8:7a:f0:a1:8b:75:37:c4:45:f9:92:69:8c:39:fa:
b5:89:b6:a6:59:43:fd:71:d7:29:42:dd:de:90:16:8c:12:f5:
21:f7:18:f3:10:14:ad:80:dc:30:76:ac:70:7b:09:39:aa:fa:
a1:9f:6e:4a:8e:10:b0:8a:de:25:34:1e:85:91:be:15:c1:a8:
27:14:50:94:17:0e:86:41:59:a5:34:51:35:d1:c2:d4:ef:f2:
d7:a8:60:cc:30:4b:72:a0:61:bd:58:c4:24:ff:b2:34:bb:d3:
6e:cb:b6:84:f7:87:d3:ea:6c:8f:de:ab:ab:58:e7:94:6a:be:
a9:0f:cf:c8:4d:6c:ba:1d:ce:cb:ad:60:e5:1e:3e:d7:b1:49:
5c:de:57:28:d3:31:9b:6a:b3:80:f3:ee:52:a6:46:12:97:c9:
0c:a7:00:b1:03:92:32:69:92:a9:69:a3:ac:24:9d:f6:1b:13:
cb:8d:75:92:29:d7:c4:91:4e:be:e7:5c:0e:d4:4a:21:26:1d:
0c:5b:f3:7b:7d:dc:e0:98:98:90:aa:ed:07:e4:fe:bb:0d:db:
12:ee:0b:0e:4e:c2:78:ae:2d:b7:cf:b8:38:7b:83:80:90:96:
b8:6c:df:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 05:47:00 2026 by rpki-client