Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
File: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json)
Hash identifier: VwEX6sHXExpUAoAm3lt4nXOPEJaoj3iJE7ceXON72K8=
Subject key identifier: 8A:DA:DB:6F:50:8E:EC:62:1E:A3:18:4E:89:2C:88:EA:BA:58:C9:71
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial: 01A190552E1C440EB51F3AB05364F2270BB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
Manifest number: 125A
Signing time: Sat 31 Oct 2026 05:01:03 +0000
Manifest this update: Sat 31 Oct 2026 05:01:03 +0000
Manifest next update: Sun 01 Nov 2026 05:01:03 +0000
Files and hashes: 1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: jB80sgIm6q/oLg+FWAt+PrE4s+KECvqI+7qAoVV7hxM=)
2: OQqEEAJAiPU1Ypg4_ug8x9-Hajs.roa (hash: SD+uKA8/a0U2/wxdSCNkq74UMq0JRQPbJacchqGYw20=)
3: glf2RLsF1blKne8DsYrjLp0dv0E.roa (hash: 9xOA/W8QJQTfjVt2oAPBotD9rA+lAklAdSAciHQpc54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:55:2e:1c:44:0e:b5:1f:3a:b0:53:64:f2:27:0b:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
Validity
Not Before: Oct 31 05:01:03 2026 GMT
Not After : Nov 1 05:01:03 2026 GMT
Subject: CN=8adadb6f508eec621ea3184e892c88eaba58c971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:52:3e:e8:4d:e6:45:d6:59:af:9c:9b:ef:
76:d8:b8:1b:67:f7:72:12:d4:a6:c1:79:7a:f7:66:
1f:6e:0c:2e:3b:f3:ba:50:d5:bd:e8:e0:45:f5:e5:
b9:63:37:42:fc:f5:4b:57:04:f3:68:86:a7:11:fe:
89:8f:b7:7a:80:33:29:ea:fc:b9:7b:a0:b7:97:15:
c0:f0:03:6d:eb:2f:8e:82:51:df:73:8c:eb:78:64:
1e:14:f6:82:24:e9:19:19:0f:46:ae:6f:96:e7:61:
0d:35:b8:32:a7:5e:11:34:9a:23:08:4a:76:78:3c:
4e:40:6a:ba:1c:e1:6f:68:65:68:6a:fd:f2:bf:b2:
bd:db:6e:d9:e5:9b:b3:92:bd:c4:3f:c6:fe:9b:93:
d8:8b:4f:fc:52:4f:dd:f0:87:a9:0a:dd:f9:d5:fc:
4f:0b:40:d0:c6:7b:62:5e:cc:03:de:f3:62:87:1f:
15:bc:cc:a4:4c:42:2a:5f:f8:1e:69:09:db:82:fe:
4d:7c:c9:b8:a1:b5:7d:87:39:22:4a:45:c2:d3:e1:
29:6d:10:b0:e6:f4:e4:5b:5a:3c:ad:12:0d:aa:28:
02:74:af:6a:d5:74:5a:a3:c9:c0:a3:e2:07:2b:8f:
a4:9f:8c:82:59:14:8e:88:2a:3e:05:5a:7b:aa:bf:
f1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DA:DB:6F:50:8E:EC:62:1E:A3:18:4E:89:2C:88:EA:BA:58:C9:71
X509v3 Authority Key Identifier:
keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:64:a5:2d:b0:3e:91:84:d0:47:81:21:31:62:0c:fc:13:9b:
e9:07:92:82:aa:fb:40:9c:b3:72:89:2e:cc:c0:64:d7:04:79:
33:f4:88:2d:40:02:9d:a2:50:a4:e7:09:95:a5:33:d4:f0:93:
31:52:b9:86:39:94:b5:88:76:3e:63:7e:54:41:c1:69:c6:53:
e0:94:78:db:4b:dd:25:e3:af:8f:e9:e8:9b:f9:b6:2c:96:41:
e4:61:62:15:d1:67:9a:84:28:31:53:2e:20:9a:2d:c4:a8:6c:
f7:11:9e:ec:e0:2c:95:73:ee:7b:43:d1:8e:1c:ec:6c:7e:41:
71:6e:89:d2:e4:bd:7c:d3:1e:5c:26:18:de:0d:51:90:0b:d3:
bf:70:df:5e:d5:85:f1:c8:98:25:7f:9b:10:f5:d3:55:c1:7c:
8b:f9:b1:a3:28:74:9c:53:32:1f:1c:7e:cf:be:7b:63:43:63:
82:dc:ed:52:40:57:6d:63:d2:f6:c3:78:b5:e4:b1:84:c8:d2:
9b:32:dc:7d:11:82:81:0e:c1:2b:cb:1e:99:72:4d:ee:ce:1b:
93:07:31:48:82:8b:24:65:f4:3a:66:1e:df:18:b3:07:35:36:
db:a7:b9:11:82:9d:c3:66:20:a7:b3:82:48:b8:7a:cd:ef:16:
d0:12:c0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:28:00 2026 by rpki-client