Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
File: KM0SOrdJNbPklTilzaDMnSuurxU.mft (raw, json)
Hash identifier: h6xqvM7lmbLLWuNQG8FT76vJ4webgA0BwiCGS4C2oeM=
Subject key identifier: 29:D1:D0:0C:84:C5:16:AE:B2:71:6D:49:73:0C:50:B8:54:90:80:F7
Authority key identifier: 28:CD:12:3A:B7:49:35:B3:E4:95:38:A5:CD:A0:CC:9D:2B:AE:AF:15
Certificate issuer: /CN=28cd123ab74935b3e49538a5cda0cc9d2baeaf15
Certificate serial: 01A17A03C4ABAF51A412484B428168294D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KM0SOrdJNbPklTilzaDMnSuurxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
Manifest number: 013D
Signing time: Mon 26 Oct 2026 21:00:29 +0000
Manifest this update: Mon 26 Oct 2026 21:00:29 +0000
Manifest next update: Tue 27 Oct 2026 21:00:29 +0000
Files and hashes: 1: KM0SOrdJNbPklTilzaDMnSuurxU.crl (hash: yZUyA+rWcJ3pLa3avYRdpdD96cktdaqrfRt1ah+tzVY=)
2: uVLWLVZ_kcxFWm8ZzgV8DoBUdcY.roa (hash: R9P1gLfYpBnWPKUfugfKeag1ecJmDwTXW1CEll0445Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KM0SOrdJNbPklTilzaDMnSuurxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:03:c4:ab:af:51:a4:12:48:4b:42:81:68:29:4d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cd123ab74935b3e49538a5cda0cc9d2baeaf15
Validity
Not Before: Oct 26 21:00:29 2026 GMT
Not After : Oct 27 21:00:29 2026 GMT
Subject: CN=29d1d00c84c516aeb2716d49730c50b8549080f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:97:e0:5f:fb:1c:79:4b:d4:1c:7b:cf:f6:
54:05:0b:57:76:ae:ad:97:0a:e8:7f:9d:10:3a:e0:
2f:9a:ea:b3:76:e6:2c:ac:47:fc:bb:02:16:a4:ef:
9d:38:09:a7:67:95:69:50:61:6e:e9:b8:dc:ba:86:
22:f5:6d:21:a5:01:6c:f7:49:a1:5e:cf:e8:46:a8:
8a:66:fb:14:7a:63:da:b5:14:13:a1:53:98:d0:ce:
57:f0:31:18:0c:f4:49:42:fc:22:8c:cc:31:e1:f9:
e9:a9:59:8b:b4:bc:bf:7d:54:c1:26:4c:be:c9:e3:
fb:80:02:c1:29:f7:d6:66:0b:35:11:5a:fd:c7:d3:
5c:33:25:22:1b:a6:2b:f5:69:bf:07:b1:45:bd:24:
4e:8d:05:9e:4f:1f:56:87:74:ee:94:bc:69:df:21:
fa:09:79:1d:0a:07:07:a3:a1:a7:63:7a:c6:5c:fa:
c9:33:3a:7b:b7:b3:4c:44:57:7a:46:52:38:ed:57:
0e:77:33:d6:58:3d:72:be:3b:8d:3d:c5:b0:f3:19:
51:46:7a:8a:30:2a:33:91:db:11:a3:b9:69:79:5c:
e1:b6:2d:f6:47:b7:7f:5c:9c:10:b5:62:e0:2c:6d:
a8:15:51:a2:79:87:36:95:a9:d5:db:56:c9:e9:30:
9c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D1:D0:0C:84:C5:16:AE:B2:71:6D:49:73:0C:50:B8:54:90:80:F7
X509v3 Authority Key Identifier:
keyid:28:CD:12:3A:B7:49:35:B3:E4:95:38:A5:CD:A0:CC:9D:2B:AE:AF:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KM0SOrdJNbPklTilzaDMnSuurxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:a4:69:48:40:72:8f:12:df:87:29:3a:76:42:ee:0f:da:0d:
b3:e7:c5:a0:d2:66:26:56:45:a5:d4:0a:d8:51:be:a3:df:6c:
85:bf:17:d7:7d:27:3b:10:4a:90:18:27:bb:1c:a4:d4:c6:5b:
86:73:ca:49:df:83:4c:79:d3:60:bc:6d:e4:e3:c6:67:61:d3:
a6:98:d8:08:4f:89:73:e3:f4:95:98:39:c5:12:8b:16:29:1a:
86:0d:58:f2:05:24:58:0a:6b:7f:e2:47:4b:2a:86:11:2b:f6:
f2:65:0b:b7:8f:ec:b9:07:6b:3f:7b:6f:a3:ca:26:7e:92:56:
f6:be:2b:2d:af:88:52:58:39:42:77:05:f1:49:b6:81:40:92:
91:91:1c:82:02:ff:bb:5b:24:34:ea:e7:6b:db:e4:21:ce:d2:
c2:ce:eb:cf:c5:a1:9b:66:af:5f:66:7e:81:79:1a:03:79:2d:
f2:8c:06:01:63:fc:47:42:c8:3c:c9:b1:b5:6d:e3:0f:dc:f4:
a9:32:96:d6:8c:1b:e5:3c:10:b4:5d:c4:6d:dc:02:14:c6:94:
7e:03:7d:ad:6b:61:27:8e:80:66:4f:1a:54:a0:54:4c:5b:7a:
e0:49:a6:6b:40:76:e4:dc:59:b4:27:fb:46:96:22:41:ed:9a:
c7:96:40:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF6A8Srr1GkEkhLQoFoKU2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4Y2QxMjNhYjc0OTM1YjNlNDk1MzhhNWNkYTBjYzlkMmJh
ZWFmMTUwHhcNMjYxMDI2MjEwMDI5WhcNMjYxMDI3MjEwMDI5WjAzMTEwLwYDVQQD
EygyOWQxZDAwYzg0YzUxNmFlYjI3MTZkNDk3MzBjNTBiODU0OTA4MGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQOX4F/7HHlL1Bx7z/ZUBQtXdq6t
lwrof50QOuAvmuqzduYsrEf8uwIWpO+dOAmnZ5VpUGFu6bjcuoYi9W0hpQFs90mh
Xs/oRqiKZvsUemPatRQToVOY0M5X8DEYDPRJQvwijMwx4fnpqVmLtLy/fVTBJky+
yeP7gALBKffWZgs1EVr9x9NcMyUiG6Yr9Wm/B7FFvSROjQWeTx9Wh3TulLxp3yH6
CXkdCgcHo6GnY3rGXPrJMzp7t7NMRFd6RlI47VcOdzPWWD1yvjuNPcWw8xlRRnqK
MCozkdsRo7lpeVzhti32R7d/XJwQtWLgLG2oFVGieYc2lanV21bJ6TCc1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnR0AyExRausnFtSXMMULhUkID3MB8GA1UdIwQY
MBaAFCjNEjq3STWz5JU4pc2gzJ0rrq8VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS00wU09yZEpOYlBrbFRpbHphRE1uU3V1cnhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9hZDkwOWItMjc5NC00ZWNjLTk0NmIt
NDkzYjA3NDc1MjYyLzEvS00wU09yZEpOYlBrbFRpbHphRE1uU3V1cnhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9hZDkwOWItMjc5NC00ZWNjLTk0NmItNDkzYjA3NDc1MjYy
LzEvS00wU09yZEpOYlBrbFRpbHphRE1uU3V1cnhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqRpSEBy
jxLfhyk6dkLuD9oNs+fFoNJmJlZFpdQK2FG+o99shb8X130nOxBKkBgnuxyk1MZb
hnPKSd+DTHnTYLxt5OPGZ2HTppjYCE+Jc+P0lZg5xRKLFikahg1Y8gUkWAprf+JH
SyqGESv28mULt4/suQdrP3tvo8omfpJW9r4rLa+IUlg5QncF8Um2gUCSkZEcggL/
u1skNOrna9vkIc7Sws7rz8Whm2avX2Z+gXkaA3kt8owGAWP8R0LIPMmxtW3jD9z0
qTKW1owb5TwQtF3EbdwCFMaUfgN9rWthJ46AZk8aVKBUTFt64Emma0B25NxZtCf7
RpYiQe2ax5ZAaw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:54:18 2026 by rpki-client