Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
File: KM0SOrdJNbPklTilzaDMnSuurxU.mft (raw, json)
Hash identifier: ikNY6kTA+oyZQV8CV7aCUTiQQuJUJ4xqD2Fp/aATRNw=
Subject key identifier: AA:5C:99:74:6A:A0:80:07:D3:8D:76:47:A2:E7:72:A5:48:18:57:44
Authority key identifier: 28:CD:12:3A:B7:49:35:B3:E4:95:38:A5:CD:A0:CC:9D:2B:AE:AF:15
Certificate issuer: /CN=28cd123ab74935b3e49538a5cda0cc9d2baeaf15
Certificate serial: 019FA0DFD9F644E4769869583C846EF19086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KM0SOrdJNbPklTilzaDMnSuurxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:00:52 +0000
Manifest this update: Mon 27 Jul 2026 00:00:52 +0000
Manifest next update: Tue 28 Jul 2026 00:00:52 +0000
Files and hashes: 1: KM0SOrdJNbPklTilzaDMnSuurxU.crl (hash: Q8itbPulgEkcwICrkwyO21fh86BGgruECCkZO3SyHCo=)
2: uVLWLVZ_kcxFWm8ZzgV8DoBUdcY.roa (hash: R9P1gLfYpBnWPKUfugfKeag1ecJmDwTXW1CEll0445Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KM0SOrdJNbPklTilzaDMnSuurxU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:d9:f6:44:e4:76:98:69:58:3c:84:6e:f1:90:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cd123ab74935b3e49538a5cda0cc9d2baeaf15
Validity
Not Before: Jul 27 00:00:52 2026 GMT
Not After : Jul 28 00:00:52 2026 GMT
Subject: CN=aa5c99746aa08007d38d7647a2e772a548185744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:57:b4:3f:e0:d8:42:33:2a:f3:5f:2f:c7:
19:9c:f7:86:b3:53:15:38:29:76:4b:09:cb:26:48:
87:17:41:50:f5:ab:26:2a:4e:c0:86:1f:b0:0f:4f:
6b:a3:b3:fb:da:25:0b:18:d8:0a:9e:ec:d5:2d:4e:
ad:ae:84:8f:67:c8:ac:95:8a:4d:7b:1f:32:1d:a3:
99:61:f0:42:e9:50:fa:23:2f:43:c5:20:79:6b:f2:
d1:ba:d4:e8:d7:55:7b:e0:2f:b0:7b:18:57:33:b3:
f7:a1:f4:da:02:76:19:87:3a:a0:a9:2b:15:e1:b2:
c5:e9:c0:12:cd:37:cb:25:99:2e:01:0b:04:68:e9:
fb:e8:64:60:ec:55:05:37:01:f6:05:98:61:47:61:
e0:0c:3e:37:f6:d4:8a:74:d6:25:ca:c0:8c:f6:29:
07:b8:9c:cb:02:19:4f:a7:f7:27:80:5f:e3:86:5b:
39:db:b0:33:e9:ff:97:2a:59:6d:28:3a:88:37:a9:
ef:74:ad:1b:ae:5d:76:5a:67:b4:88:78:dd:11:d4:
68:07:03:9f:f4:78:38:2f:3b:01:94:fb:46:86:05:
78:6f:a2:64:2b:95:8c:5e:a8:02:b3:47:30:bd:11:
12:61:30:52:2f:c7:68:3d:94:6c:e8:b7:cd:f8:9b:
f2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5C:99:74:6A:A0:80:07:D3:8D:76:47:A2:E7:72:A5:48:18:57:44
X509v3 Authority Key Identifier:
keyid:28:CD:12:3A:B7:49:35:B3:E4:95:38:A5:CD:A0:CC:9D:2B:AE:AF:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KM0SOrdJNbPklTilzaDMnSuurxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ad909b-2794-4ecc-946b-493b07475262/1/KM0SOrdJNbPklTilzaDMnSuurxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:45:04:07:12:2a:3e:d6:5b:37:9e:a6:41:9f:d1:5c:e4:c6:
56:26:eb:dd:a4:46:85:31:4b:58:64:4d:15:7e:2b:ad:32:4b:
de:6a:52:0b:05:72:bb:ab:57:08:c1:a6:ab:1d:3b:ca:b8:66:
2e:15:a5:a1:cc:3c:ee:01:fc:45:87:25:00:bd:1c:64:f6:c1:
9f:98:6e:c2:6c:f2:31:37:d1:ae:20:b0:20:b3:09:b3:8d:59:
c5:7e:c7:4d:f4:9d:15:f7:f8:c3:f9:df:3c:8e:6b:1f:a9:4c:
ff:d1:2a:ce:ca:c4:59:9c:98:9b:68:ff:c6:e1:5a:c0:6c:e9:
ae:ef:68:00:89:3d:73:18:c1:55:4b:94:87:f7:7a:4a:eb:93:
ae:4d:30:ce:f2:11:6e:f6:89:7f:94:9a:e4:62:d7:f9:87:17:
a7:1f:27:31:27:f3:46:d5:92:f6:f2:75:37:74:cb:49:92:ba:
3f:0b:06:34:30:84:3f:8e:44:b2:a4:cb:e6:11:38:1c:ea:87:
fe:57:2c:09:ca:a7:b3:9b:d3:b4:b9:9d:52:76:01:63:c4:4c:
79:56:3d:25:45:0b:9e:c5:49:c5:6f:cb:2a:85:6f:6e:a6:1c:
0d:29:34:c2:fb:7d:a4:87:0f:60:f9:db:eb:28:6b:a0:a9:a6:
0d:c7:9b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:38:30 2026 by rpki-client