Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
File: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json)
Hash identifier: X/k/jQ65MjGn3k96CRS31H5U1uaZ6tbunxmXO5lqeKY=
Subject key identifier: 1E:E4:46:F7:A6:54:A0:EA:8B:2E:BD:8F:9B:22:A2:68:8D:33:D2:22
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial: 019D37F72488D074C7925FA0BA39AB856AA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
Manifest number: 101A
Signing time: Sun 29 Mar 2026 05:00:36 +0000
Manifest this update: Sun 29 Mar 2026 05:00:36 +0000
Manifest next update: Mon 30 Mar 2026 05:00:36 +0000
Files and hashes: 1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: 4E/aeqez9/cvg0i/NDgfakacPUTGWRexMaCbLMHqa90=)
2: OQqEEAJAiPU1Ypg4_ug8x9-Hajs.roa (hash: SD+uKA8/a0U2/wxdSCNkq74UMq0JRQPbJacchqGYw20=)
3: glf2RLsF1blKne8DsYrjLp0dv0E.roa (hash: 9xOA/W8QJQTfjVt2oAPBotD9rA+lAklAdSAciHQpc54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:24:88:d0:74:c7:92:5f:a0:ba:39:ab:85:6a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
Validity
Not Before: Mar 29 05:00:36 2026 GMT
Not After : Mar 30 05:00:36 2026 GMT
Subject: CN=1ee446f7a654a0ea8b2ebd8f9b22a2688d33d222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:59:df:8d:c0:5d:99:b2:07:34:45:3a:f2:e7:
b2:9f:82:66:2f:a5:d9:22:b9:64:57:7c:55:ba:ed:
9d:b5:ba:c6:0c:4e:2b:80:94:46:62:af:73:05:a4:
b9:07:a4:ae:53:83:5f:72:50:76:bb:4c:3f:3b:10:
0c:7a:b3:31:a8:78:89:0d:3a:bc:c8:42:37:7a:11:
cb:2e:5b:5d:74:e5:05:3f:93:81:d6:ad:30:c8:29:
50:20:1d:ee:ab:e6:dc:cb:7f:3f:c7:96:c2:12:27:
a0:80:9b:26:da:ed:e4:46:a6:30:5b:75:01:de:c9:
5c:3a:12:fd:1e:73:45:d1:39:d7:fb:e0:e4:b7:12:
40:10:61:b7:1d:82:94:ae:0d:3d:3f:a1:e9:f3:95:
53:40:6e:df:24:89:ea:4a:90:14:79:00:a4:63:ba:
51:9d:af:c5:a3:f4:04:a2:ee:f6:07:d9:0f:d2:e5:
f4:60:31:bb:de:aa:a4:fa:88:6e:6a:ec:d4:3d:ef:
48:1a:ad:c8:1b:6d:cd:b3:b4:83:01:13:27:43:5c:
5f:85:80:6f:70:4e:1b:1d:83:29:eb:d3:70:98:d2:
f4:d4:3f:4a:dd:0d:a6:b5:0d:50:7a:11:50:9c:14:
0a:50:b0:bb:6e:6e:15:26:c1:f2:4a:0e:04:d1:c1:
c0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E4:46:F7:A6:54:A0:EA:8B:2E:BD:8F:9B:22:A2:68:8D:33:D2:22
X509v3 Authority Key Identifier:
keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:29:60:5b:0c:8a:a7:25:98:4a:34:f6:dc:fd:a7:16:6a:e0:
d6:38:5e:9d:f1:b9:26:6e:77:b9:4d:3b:bc:e8:43:d3:de:e0:
21:bd:d5:af:20:43:58:0f:11:ba:bc:30:bc:88:56:5a:cd:72:
b2:d0:03:d2:ca:1c:fd:94:06:2c:29:32:c0:e9:8d:38:d6:7b:
83:6b:37:27:61:1e:d5:8f:20:a2:68:76:06:4c:89:5d:9d:61:
4b:ff:82:d3:8b:dd:a0:8f:a5:f7:ab:f0:ce:f7:14:8f:ba:e1:
75:86:a5:55:65:54:f2:52:f2:57:8d:91:13:44:a6:bd:d5:a7:
db:5d:08:3e:bd:d7:1f:5f:a2:ae:b7:92:7e:70:3d:31:6a:0e:
a5:d0:6c:06:d7:ba:39:3f:57:05:9e:be:72:89:18:14:9a:18:
4a:d5:b0:87:3c:5d:0f:22:eb:39:cb:61:c0:c6:36:a5:88:64:
87:c5:bc:5e:26:0d:36:de:e9:7a:32:d6:dc:2b:1f:b0:9f:16:
a5:b1:66:ae:88:77:9e:85:ac:e8:42:d2:9c:6d:28:3a:56:3d:
74:b7:5d:09:9e:7b:cb:2e:d8:9e:37:22:18:5d:55:b0:8b:84:
8e:8b:bf:27:f9:7e:b7:2b:c3:50:0b:74:a1:c6:20:d8:f2:f5:
41:43:c8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:19 2026 by rpki-client