Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
File: KL8ecjI3QqxNgTarbI6F33ujfus.mft (raw, json)
Hash identifier: HuJv9XgUVg1I4poQCN3SOIP1IkIICrQ3Qw1i5geQ2ok=
Subject key identifier: 36:7F:30:B2:99:B9:60:A5:0E:9F:B9:36:8C:43:28:83:40:BF:7D:EF
Authority key identifier: 28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
Certificate issuer: /CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Certificate serial: 01A001DD2C398A09DC8947C0CBEDD3D30B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 20:01:07 +0000
Manifest this update: Fri 14 Aug 2026 20:01:07 +0000
Manifest next update: Sat 15 Aug 2026 20:01:07 +0000
Files and hashes: 1: JYwSyuAchjIXKqx-0j7gKo4P2VU.roa (hash: Ont+m3ZNydrhvmwI0GsT3aYVRki6QYVMqq1ZQxnAm0g=)
2: KL8ecjI3QqxNgTarbI6F33ujfus.crl (hash: xKrbsHMH20ztqUjYyipyblekyJmcb7UdeS5w5exfvTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:2c:39:8a:09:dc:89:47:c0:cb:ed:d3:d3:0b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Validity
Not Before: Aug 14 20:01:07 2026 GMT
Not After : Aug 15 20:01:07 2026 GMT
Subject: CN=367f30b299b960a50e9fb9368c43288340bf7def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:83:c2:a4:94:7f:a2:18:7e:f3:c1:14:c6:fe:
db:96:d7:a7:69:c1:40:80:99:66:60:4e:5e:2c:87:
88:c5:3e:58:e6:8d:94:77:83:b6:05:1e:8b:b3:2b:
a6:ce:8f:48:8b:99:4a:08:8b:a7:6b:c0:f1:5c:b2:
f4:93:44:ea:8f:66:87:6a:4d:13:bb:cf:0f:04:9c:
7d:87:9b:22:af:d2:4b:d1:c1:0b:5c:c1:a0:c5:fc:
22:85:b6:56:d9:8a:a7:95:a1:e8:81:4d:e2:65:3c:
19:ec:37:5d:17:11:49:d4:dc:07:1c:93:b8:12:01:
82:93:0e:f9:d3:bc:fb:a7:5d:13:60:56:93:7d:a9:
8d:6f:b4:ac:86:37:38:89:41:df:dc:9e:14:2e:b7:
4d:13:8c:29:9e:65:dd:48:91:0e:e3:d8:06:ec:7c:
d6:91:40:e2:e9:c8:79:e4:1b:af:f4:7a:28:6c:d8:
49:ee:5a:0d:5b:67:95:8e:d3:e1:7b:57:b0:08:0d:
a4:08:19:d8:ff:e4:32:25:84:48:57:c9:b0:67:b0:
14:ed:a3:53:e5:4e:1b:9d:c3:1b:17:fb:7f:a7:b1:
1c:0f:e0:e1:c2:9e:04:d4:a7:77:d7:70:95:39:16:
e5:df:ab:5a:e2:4f:b4:c7:42:12:9d:f5:eb:2d:f6:
1e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7F:30:B2:99:B9:60:A5:0E:9F:B9:36:8C:43:28:83:40:BF:7D:EF
X509v3 Authority Key Identifier:
keyid:28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:83:a1:17:ea:95:e6:8c:c3:55:91:61:79:ce:29:3d:9f:c8:
d1:d1:b4:a3:36:73:3f:b6:20:4e:62:f6:5a:5d:49:9d:c3:45:
3b:18:b7:4f:80:e7:f2:7e:55:2e:19:ee:52:a5:a4:fa:72:f3:
1b:1f:fb:80:d9:e2:df:65:8a:77:87:ef:b9:c9:25:90:d2:e5:
cb:c3:ac:66:be:e3:60:d0:2e:12:0f:3b:41:36:8c:95:43:62:
5d:17:d4:c9:73:9d:e3:0f:0a:ec:29:9f:57:21:18:0d:03:90:
14:e8:54:e7:ec:d5:0b:7c:73:f2:e2:61:0b:e9:ff:e4:b3:28:
92:bf:20:77:81:9e:e8:f7:eb:44:dc:82:ad:64:2d:21:70:d8:
44:9c:de:3c:96:28:6f:1c:83:f6:7d:c4:10:af:eb:de:6e:07:
f3:be:bd:47:15:3f:af:78:3f:af:c2:a2:72:69:ef:e0:6c:4f:
5c:2f:68:23:5d:cc:be:ee:44:7f:c1:9c:f8:57:bb:16:dc:60:
50:c2:c6:ae:62:5a:54:73:68:c7:e8:a1:41:04:fe:64:2c:48:
c6:fa:d7:53:f9:38:3c:f2:8a:af:aa:4e:5f:a8:6b:16:86:15:
39:dc:15:1a:d1:e7:3e:95:02:e6:0d:a7:04:87:75:7d:d1:92:
bf:47:76:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:30:34 2026 by rpki-client