Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
File: KPIqU5CbUnc1JGNA8EF-vv0yazE.mft (raw, json)
Hash identifier: cQow/4VSBVbixQKWmxhRdiLQiRUT6FWQeSLtT4QmW8A=
Subject key identifier: 08:86:52:6A:F0:D4:D8:89:EE:09:80:51:CB:F6:A1:10:08:57:3C:31
Authority key identifier: 28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
Certificate issuer: /CN=28f22a53909b527735246340f0417ebefd326b31
Certificate serial: 019F115268F52C383AF34968E194B74639AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
Manifest number: AF
Signing time: Mon 29 Jun 2026 03:00:41 +0000
Manifest this update: Mon 29 Jun 2026 03:00:41 +0000
Manifest next update: Tue 30 Jun 2026 03:00:41 +0000
Files and hashes: 1: KPIqU5CbUnc1JGNA8EF-vv0yazE.crl (hash: CD1wBldTlbKF+UiE04lMpxrvCjO+bm0xZJtnw4gQc+w=)
2: w0e6jkiUX1sni-XsVknCS6jjnrs.asa (hash: dlOu1937WJHpDAsAncwHV+rfvJq6GFUalmkUWER/diE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:68:f5:2c:38:3a:f3:49:68:e1:94:b7:46:39:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f22a53909b527735246340f0417ebefd326b31
Validity
Not Before: Jun 29 03:00:41 2026 GMT
Not After : Jun 30 03:00:41 2026 GMT
Subject: CN=0886526af0d4d889ee098051cbf6a11008573c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:36:ca:d1:11:6f:6d:3c:9c:a1:ec:8e:8e:
d1:53:61:f3:a3:25:0c:75:7b:f3:b4:4b:d8:b8:07:
ba:c7:75:90:87:7c:49:f1:78:fd:f0:44:63:a5:ce:
8d:70:b9:87:d0:46:ce:65:be:c1:d6:9d:ac:23:ec:
1b:a9:28:c1:35:e7:c4:02:3c:8e:3c:04:78:d4:d9:
53:aa:51:18:b6:8c:24:72:50:93:3b:b3:2d:57:9c:
5d:6b:f6:54:fe:0b:50:d4:5b:77:1a:3b:27:4d:a4:
de:9d:36:0d:91:15:d4:22:90:e5:e0:77:fa:50:6f:
15:2f:ce:16:bf:02:05:17:f9:4a:85:d6:8d:08:34:
41:90:03:6c:ae:ea:f7:52:f4:fa:0a:5f:51:f0:e1:
fc:ca:a2:8b:c0:7a:8d:cf:cc:9b:23:d6:bd:ae:37:
41:b5:68:8c:2e:28:21:f0:0f:8e:60:28:d0:35:44:
c6:38:3c:93:5d:38:95:6f:3d:9a:d8:04:60:1b:68:
7f:4d:d4:0f:4e:fe:c5:99:35:06:d2:b4:4f:ef:85:
69:af:67:57:c4:53:f6:d0:b4:06:ec:0c:89:24:94:
dc:e2:f9:0d:eb:e8:8a:d7:95:97:57:cb:ac:c3:09:
e8:74:ba:e1:3e:14:13:00:bf:3c:74:7c:38:08:8b:
a8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:86:52:6A:F0:D4:D8:89:EE:09:80:51:CB:F6:A1:10:08:57:3C:31
X509v3 Authority Key Identifier:
keyid:28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b5:38:9a:cb:35:ea:ea:2b:0a:10:bc:10:88:de:b1:c4:91:
dd:38:1f:a3:c9:9c:d6:7c:e3:0d:f8:3b:ad:df:28:84:50:18:
d9:2e:99:0e:85:ac:60:d2:75:16:24:ac:49:af:62:bd:37:89:
7d:0a:38:44:5b:2d:f1:77:65:2d:a5:56:2f:3b:fd:8e:2e:c1:
de:eb:7d:9e:34:00:12:ea:dd:e4:dc:44:62:ff:8a:bf:cc:c9:
d0:85:2c:5d:34:69:17:1c:a8:ce:85:a9:db:d2:a0:1b:f4:34:
97:a1:72:47:b5:6d:93:4c:3e:1d:f8:5f:e0:bf:6c:55:9e:71:
b7:dd:26:7c:35:c2:b0:87:0d:f4:82:59:a4:a8:de:f1:ad:b6:
15:dd:47:ef:69:cb:95:65:09:60:fe:c2:c6:cb:3e:ec:bb:a9:
19:65:c8:cc:f3:ab:c7:0f:e8:05:ac:2a:be:2d:0a:13:2a:60:
1d:ed:31:78:78:b5:a4:87:fb:d8:ac:d6:a0:9b:1b:6d:85:35:
14:9c:cb:9f:3d:42:d4:7f:74:b7:2b:fb:19:39:90:12:ff:a5:
83:27:b4:ec:84:89:f5:49:fb:0e:a0:30:ee:c6:f1:55:e2:f5:
0f:d4:f5:6a:75:05:77:29:1a:07:73:c2:6d:48:af:f1:e3:00:
8d:85:60:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:46 2026 by rpki-client