Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
File: KM0SOrdJNbPklTilzaDMnSuurxU.mft (raw, json)
Hash identifier: DUQRUpI9sUT86dGcQzZvNEeqz9qwjloD1RwZe/bb8fc=
Subject key identifier: E3:14:46:DD:1A:77:AE:A1:FD:66:D9:17:A8:84:4D:AB:AC:7E:73:E7
Authority key identifier: 28:CD:12:3A:B7:49:35:B3:E4:95:38:A5:CD:A0:CC:9D:2B:AE:AF:15
Certificate issuer: /CN=28cd123ab74935b3e49538a5cda0cc9d2baeaf15
Certificate serial: 01A08A8C1BAF0E636ACF69435C68FF8165CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KM0SOrdJNbPklTilzaDMnSuurxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:00:32 +0000
Manifest this update: Thu 10 Sep 2026 09:00:32 +0000
Manifest next update: Fri 11 Sep 2026 09:00:32 +0000
Files and hashes: 1: KM0SOrdJNbPklTilzaDMnSuurxU.crl (hash: LV0HP9K/XAq+8HTuuKECI/ZOJ1qQ8I8QAg+V1tke/fM=)
2: uVLWLVZ_kcxFWm8ZzgV8DoBUdcY.roa (hash: R9P1gLfYpBnWPKUfugfKeag1ecJmDwTXW1CEll0445Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KM0SOrdJNbPklTilzaDMnSuurxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:1b:af:0e:63:6a:cf:69:43:5c:68:ff:81:65:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cd123ab74935b3e49538a5cda0cc9d2baeaf15
Validity
Not Before: Sep 10 09:00:32 2026 GMT
Not After : Sep 11 09:00:32 2026 GMT
Subject: CN=e31446dd1a77aea1fd66d917a8844dabac7e73e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:3e:c9:b9:60:f3:03:b4:26:b8:0e:97:2e:
89:42:cd:87:a0:0e:9c:61:56:5f:10:ff:28:ee:3f:
0c:27:6b:5f:35:d9:90:d9:1c:da:1d:27:b8:d6:c0:
8f:d7:0c:f8:9b:b0:df:ce:01:2a:10:d9:35:aa:a1:
c0:73:bf:34:0d:55:02:95:2d:be:1d:24:ae:b6:5b:
65:ec:95:f9:4e:c4:12:ab:81:d6:79:16:20:0f:1e:
72:c4:6c:fd:0c:00:6f:2b:cc:db:68:54:c0:4e:5f:
80:a8:93:a1:6c:6f:8c:ec:be:61:99:75:46:95:63:
42:f9:89:44:ff:bf:bd:52:fc:5a:4a:1c:33:7c:28:
ed:3d:59:cc:d8:01:64:de:2a:6a:5f:c3:d5:45:5b:
7d:3f:f5:73:62:07:15:05:9b:07:8a:12:a5:fd:96:
bc:5b:ae:af:3b:41:10:74:8f:8b:e0:f5:a2:2a:87:
43:20:c3:46:d5:4e:55:9f:7d:fe:8c:99:37:7b:d8:
26:ac:f8:98:74:f8:4c:2e:13:a5:dd:7d:78:28:b3:
eb:4c:f0:24:ce:42:71:84:0d:8c:6e:10:4a:b0:4b:
cc:cc:7f:95:8a:7d:45:a4:33:e0:5d:bd:94:97:54:
66:88:17:9e:60:7f:e6:49:30:8e:04:04:47:4f:e5:
34:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:14:46:DD:1A:77:AE:A1:FD:66:D9:17:A8:84:4D:AB:AC:7E:73:E7
X509v3 Authority Key Identifier:
keyid:28:CD:12:3A:B7:49:35:B3:E4:95:38:A5:CD:A0:CC:9D:2B:AE:AF:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KM0SOrdJNbPklTilzaDMnSuurxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1d:11:bc:4c:59:e2:74:bb:4f:16:c2:98:7b:dd:6a:e8:14:
2e:98:e6:b4:a2:a4:94:5c:42:1b:db:ad:57:88:ec:89:3e:d6:
3a:68:8d:7b:8f:27:b1:07:48:d7:94:c8:6a:99:cd:40:75:45:
1e:26:2f:fc:c9:e0:74:5f:0d:e2:93:db:d4:e2:df:4d:32:86:
18:45:aa:4b:ae:55:bd:5e:68:32:31:59:aa:59:42:ec:75:7d:
47:a3:8f:7a:8d:11:97:24:72:4f:bd:5e:5e:69:17:91:bf:58:
17:5f:ae:32:61:53:4b:a5:48:dd:04:f4:d4:c6:62:e7:0e:f0:
63:6e:bc:e3:56:3c:75:7d:f4:40:9b:0c:2a:6e:a2:11:59:3a:
3c:2c:1e:cb:b8:f5:e7:0a:b4:b6:7c:e5:c7:c7:59:3b:ee:46:
04:fd:ff:60:93:6e:eb:f2:bd:c5:04:a6:e9:b3:dd:81:65:0a:
89:2e:64:c8:40:ff:39:ee:8c:ba:1b:59:cf:0a:76:8b:06:9e:
0b:92:28:dd:cb:cb:82:15:1f:ea:3c:f0:82:65:b7:20:f6:4f:
d7:28:c2:1e:0b:aa:67:d3:e2:0d:70:11:85:87:fc:80:16:90:
77:23:2d:90:9d:c3:21:43:01:ce:ca:56:24:04:55:c3:07:ac:
b5:d3:23:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:55:08 2026 by rpki-client