Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
File: KL69RlhhhHPtTIN2fFHejiM8MpI.mft (raw, json)
Hash identifier: QZ1rNMmbN0KxnnZBFS4fiONpfZ1ehRm6gssMlminR04=
Subject key identifier: 99:16:6C:27:E0:DA:96:9F:3E:26:4E:85:D5:2F:8E:2B:37:8C:FD:4F
Authority key identifier: 28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
Certificate issuer: /CN=28bebd4658618473ed4c83767c51de8e233c3292
Certificate serial: 019F859F6DC1E9206B4636E98CD1F0A25382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
Manifest number: 133E
Signing time: Tue 21 Jul 2026 17:00:45 +0000
Manifest this update: Tue 21 Jul 2026 17:00:45 +0000
Manifest next update: Wed 22 Jul 2026 17:00:45 +0000
Files and hashes: 1: KL69RlhhhHPtTIN2fFHejiM8MpI.crl (hash: TyfUPAbCWO5iaOib7lwqVrqph5bg96ej9cUlYMIlaMU=)
2: NNW9fBL9fFAJGVwGGKC0u4xaMBk.roa (hash: QeuasZLkGWjhmBmI2lmaeg2T0aIzvZFSj+N457z3Xik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:6d:c1:e9:20:6b:46:36:e9:8c:d1:f0:a2:53:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bebd4658618473ed4c83767c51de8e233c3292
Validity
Not Before: Jul 21 17:00:45 2026 GMT
Not After : Jul 22 17:00:45 2026 GMT
Subject: CN=99166c27e0da969f3e264e85d52f8e2b378cfd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:21:c8:f7:b9:35:3a:e2:9b:55:69:75:41:5f:
ce:4f:cd:74:5b:c1:73:bc:84:00:7f:60:e7:0d:61:
3c:3f:2a:bf:b9:c4:78:37:d1:8e:a8:6c:18:60:cf:
cb:6a:21:53:19:98:ef:9c:5a:3c:9c:9b:5e:13:d8:
6e:2d:2f:d4:db:c2:db:f4:c2:28:49:a5:dd:39:6f:
ec:d4:a4:29:b9:5c:40:1d:1d:ea:2c:9a:7e:a3:92:
67:24:df:ff:b6:56:5e:f4:b0:f8:be:ed:eb:7c:6e:
b2:bc:5e:04:31:9a:6d:29:c5:41:77:69:ce:e6:12:
50:8a:42:ee:f0:fa:22:b3:7f:38:af:44:7e:27:f8:
d3:5f:4d:86:e0:01:5b:80:0b:c1:b5:ac:7f:a1:52:
c7:05:8e:09:17:6e:35:c8:a1:ae:69:45:8a:4e:8b:
6c:24:fb:43:21:0a:6b:c0:8e:63:fa:d8:63:73:fe:
dd:ee:89:57:5c:5d:6b:e2:25:14:56:4b:33:80:06:
f6:45:f5:1b:ba:95:17:57:84:15:61:8c:4c:89:db:
9b:8d:57:79:04:a1:12:d3:00:fc:c2:b3:79:a0:2b:
28:58:0a:41:61:06:9b:6f:10:57:40:da:75:58:2b:
8a:1d:f1:1e:ed:c8:d2:bb:ce:60:c5:21:9c:62:4f:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:16:6C:27:E0:DA:96:9F:3E:26:4E:85:D5:2F:8E:2B:37:8C:FD:4F
X509v3 Authority Key Identifier:
keyid:28:BE:BD:46:58:61:84:73:ED:4C:83:76:7C:51:DE:8E:23:3C:32:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL69RlhhhHPtTIN2fFHejiM8MpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa975c-b9b5-4651-bc5b-ba7956b0f2dd/1/KL69RlhhhHPtTIN2fFHejiM8MpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f6:9f:c5:58:62:fe:cb:74:82:de:03:ba:ed:6d:2e:e4:34:
7d:e8:2f:eb:17:b9:27:cd:33:e4:41:58:03:ff:ab:9f:9f:d2:
0d:51:9a:7d:51:51:e6:89:29:d1:23:cd:c6:49:e1:5c:34:12:
2b:68:5c:6b:e7:5f:0d:07:de:57:b4:b9:22:8a:44:94:11:83:
8b:10:0f:20:8b:0b:de:18:fe:ba:fb:a9:de:ce:dd:01:b0:2a:
f1:d5:b8:56:6a:1d:3d:70:f3:fd:24:e6:3d:ca:7a:91:da:a8:
bc:de:95:9a:e8:14:40:38:cf:16:a0:ad:44:e7:f9:22:2d:e0:
65:99:ff:8a:57:1d:35:0c:c7:2a:f8:ec:76:c7:8b:ce:f0:34:
e6:82:89:99:f6:40:3e:bb:43:63:10:3c:14:66:dc:ce:19:34:
71:bc:88:03:2e:82:80:78:4a:41:f1:67:62:7c:e5:f1:d1:14:
ad:1e:0d:83:2c:cc:e1:3b:36:e1:24:78:86:bb:9d:0e:11:2d:
95:58:1b:d9:ec:f6:6e:45:83:62:a6:90:94:cd:f6:66:d7:81:
0e:4a:52:f8:02:73:2f:8d:44:d4:42:d4:45:fa:67:ad:c9:c5:
31:dd:2c:93:45:89:64:13:63:df:0b:e6:d9:af:53:82:1d:b7:
8a:37:04:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:46:32 2026 by rpki-client