Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
File: KPVnVJmD9DrdmYw26PeL0V9Fosw.mft (raw, json)
Hash identifier: k6FxPbVSsL5qRFsEW8ho3rrAm4oRPvp+uYiFBjhzjFM=
Subject key identifier: 45:97:B3:67:FE:F9:37:58:EF:85:DF:ED:D7:46:83:12:16:27:AD:7A
Authority key identifier: 28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
Certificate issuer: /CN=28f567549983f43add998c36e8f78bd15f45a2cc
Certificate serial: 019D37C1068C1FBCB30D016FCDBFAC039019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
Manifest number: 0E94
Signing time: Sun 29 Mar 2026 04:01:29 +0000
Manifest this update: Sun 29 Mar 2026 04:01:29 +0000
Manifest next update: Mon 30 Mar 2026 04:01:29 +0000
Files and hashes: 1: 31-g2O4jA-IdMKhrhpCzByPryFw.roa (hash: GKsHl7IDsZtj7GZMS2THAskx0P5sRUkyuOPplPo3N4A=)
2: KPVnVJmD9DrdmYw26PeL0V9Fosw.crl (hash: VOQlqJDCUZnHFLo7X/aIyRbboFwJ/Gfegq9BXs23oxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:06:8c:1f:bc:b3:0d:01:6f:cd:bf:ac:03:90:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f567549983f43add998c36e8f78bd15f45a2cc
Validity
Not Before: Mar 29 04:01:29 2026 GMT
Not After : Mar 30 04:01:29 2026 GMT
Subject: CN=4597b367fef93758ef85dfedd74683121627ad7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:05:30:69:a1:f3:7e:65:1a:4d:d9:03:64:d4:
67:93:a7:f7:42:4b:89:42:d5:93:95:89:80:f7:a6:
7d:ab:4d:f7:49:8b:df:c1:a0:46:42:19:a2:4a:97:
0c:9b:f2:27:46:07:6e:47:26:ca:0a:68:f1:87:af:
94:8b:18:d5:8e:fd:21:22:a9:60:bb:15:ba:23:b0:
ad:ec:99:39:87:71:97:6c:51:86:15:b0:82:38:52:
ce:e8:dc:83:db:6d:bb:0f:8d:5f:e0:aa:ca:1e:88:
89:09:35:b1:d3:42:17:cf:30:4b:42:53:56:2b:a9:
f3:1c:1e:cf:fa:d9:f4:07:28:82:b7:8f:be:90:75:
4e:48:8f:ea:89:bc:ac:0f:dc:13:1b:2c:be:cd:b3:
c0:0e:e6:6b:0a:b2:44:5b:11:27:0f:68:e6:30:ab:
1c:a1:36:d4:8f:7b:ca:d7:3a:b6:ec:84:69:8a:37:
d4:fa:6a:ca:9c:4f:61:79:56:13:11:b0:ee:36:7d:
07:9e:2d:39:5a:1d:27:53:9e:50:f0:af:57:23:93:
78:09:40:6c:38:f8:71:1c:c7:40:12:0a:b1:0a:72:
82:68:87:5f:76:16:55:79:dc:12:79:f4:af:21:c1:
8e:d4:85:69:ba:8d:f7:f0:d4:e5:f8:6b:49:69:05:
67:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:97:B3:67:FE:F9:37:58:EF:85:DF:ED:D7:46:83:12:16:27:AD:7A
X509v3 Authority Key Identifier:
keyid:28:F5:67:54:99:83:F4:3A:DD:99:8C:36:E8:F7:8B:D1:5F:45:A2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPVnVJmD9DrdmYw26PeL0V9Fosw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/9cfd8e-23cd-447a-9d2c-d0b111ba4148/1/KPVnVJmD9DrdmYw26PeL0V9Fosw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d3:eb:bd:0d:ba:07:8b:a2:88:e2:54:a0:56:b2:f0:b9:27:
f1:89:50:db:d6:90:6a:a8:bd:ee:31:e8:b5:2a:59:c1:ee:9c:
18:50:31:6a:33:c3:d9:a5:ff:0b:25:16:1f:ff:3a:94:e0:3f:
91:f8:52:21:cc:09:f7:0d:58:a1:f8:8c:83:26:65:65:07:77:
48:d3:32:67:6e:11:d6:87:62:e7:1e:a9:4d:f9:a6:7f:1b:f9:
f5:a3:13:70:0d:8c:5a:4f:d9:29:47:99:4f:e8:82:fc:15:bb:
f8:0a:c2:11:61:1c:56:a7:2c:1a:c9:cc:3f:4f:ce:1f:e3:e4:
68:16:7c:b8:c2:84:35:79:39:15:21:3e:fa:da:91:53:27:ea:
84:86:ca:ed:34:e8:df:7c:58:48:1e:68:46:36:5b:f1:fd:24:
21:14:6e:68:fa:18:d9:32:50:6b:9f:93:c1:c6:31:f1:bd:51:
66:ad:bc:2b:e7:ec:a1:c6:73:db:c1:c4:54:a2:16:1b:98:c9:
f9:70:0a:2e:0f:bc:5a:9e:05:54:7d:0b:e6:6b:20:8e:a7:34:
89:98:be:7b:e4:c1:bc:f9:b3:bb:b8:22:22:d0:3b:11:41:57:
68:ca:bb:79:1e:8f:00:42:64:ca:5d:9d:e6:0a:9c:d1:1a:4a:
ee:33:ab:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:48 2026 by rpki-client