Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
File: KPIqU5CbUnc1JGNA8EF-vv0yazE.mft (raw, json)
Hash identifier: BJ+afduoEK+QWo0g80vGntWPnr2MMU4MJ0bVa+nQgXM=
Subject key identifier: 58:52:28:E2:1B:76:57:66:72:D8:BF:44:E5:7F:65:AA:EB:3A:2B:8B
Authority key identifier: 28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
Certificate issuer: /CN=28f22a53909b527735246340f0417ebefd326b31
Certificate serial: 01A03A836D198FC19B8C2B16E8CF942ABE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
Manifest number: 0149
Signing time: Tue 25 Aug 2026 20:01:26 +0000
Manifest this update: Tue 25 Aug 2026 20:01:26 +0000
Manifest next update: Wed 26 Aug 2026 20:01:26 +0000
Files and hashes: 1: KPIqU5CbUnc1JGNA8EF-vv0yazE.crl (hash: M65Akl1iHNuAnZccLx+X8pxlXepXevDN23QuyLXSrXw=)
2: w0e6jkiUX1sni-XsVknCS6jjnrs.asa (hash: dlOu1937WJHpDAsAncwHV+rfvJq6GFUalmkUWER/diE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 15:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:83:6d:19:8f:c1:9b:8c:2b:16:e8:cf:94:2a:be:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f22a53909b527735246340f0417ebefd326b31
Validity
Not Before: Aug 25 20:01:26 2026 GMT
Not After : Aug 26 20:01:26 2026 GMT
Subject: CN=585228e21b76576672d8bf44e57f65aaeb3a2b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:de:22:80:10:17:c2:fd:d4:aa:a2:4f:b2:9a:
54:a6:a7:61:9a:20:5a:af:77:7f:32:3a:cd:d4:86:
1e:91:96:95:f4:b4:9f:08:3f:31:5c:dc:cc:b7:51:
c8:2e:5c:f7:e4:1c:30:2c:d8:d4:b1:5f:03:cb:76:
91:78:ad:d6:6e:54:e5:c8:3b:aa:37:6d:e8:ba:09:
c1:02:1d:32:de:4a:0a:50:05:cf:a4:34:58:c9:d2:
4f:62:30:e2:88:da:35:40:e9:22:12:d6:2d:4d:ca:
32:aa:c3:bb:27:1a:fc:af:63:05:4b:4b:a4:c4:0f:
f4:f4:35:e6:f4:d5:eb:b6:91:0b:a1:d4:2d:3e:f2:
54:07:ba:2d:8c:67:98:67:48:3d:35:50:a2:00:3a:
e0:4b:e1:34:04:cc:05:f9:ea:06:13:14:05:89:02:
ef:2e:fa:ed:eb:b6:f9:2f:24:1e:18:32:0b:2a:e7:
bf:6a:c5:b5:bb:e5:fe:95:f2:24:fd:86:2d:d7:68:
cc:8d:da:ed:92:5b:ce:46:5b:31:09:ad:50:ce:8a:
4e:20:0f:a1:ea:5e:24:7b:e7:eb:e7:7c:aa:43:37:
bf:ae:6b:71:7b:39:6b:ad:31:d2:73:dd:25:02:38:
2a:c3:41:81:ee:06:bb:f6:ff:f9:2d:d7:c0:76:04:
18:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:52:28:E2:1B:76:57:66:72:D8:BF:44:E5:7F:65:AA:EB:3A:2B:8B
X509v3 Authority Key Identifier:
keyid:28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:16:09:01:0f:54:4f:f1:67:85:95:0d:32:bf:0c:2e:2d:76:
f1:95:9c:12:d7:ca:4e:d3:56:a3:ef:eb:d1:4f:ca:b1:bc:63:
b8:2b:a6:4e:00:35:20:62:07:30:9a:19:34:8f:df:47:85:e9:
92:1f:77:7c:af:97:67:f9:a1:1a:92:3f:7b:97:4d:9f:bb:41:
1e:2f:b5:98:6f:55:bf:0a:d5:dc:b6:68:36:68:e4:be:50:38:
0c:31:92:5b:cb:85:e0:5c:bc:34:ba:26:08:5a:00:9e:1f:1b:
5f:98:18:c2:4c:38:c9:bc:b5:a4:77:3c:3e:6f:21:d7:07:f4:
c8:4c:3e:dd:4e:2e:d7:1e:72:7a:eb:48:95:e1:b6:5e:85:8d:
80:ef:a9:df:52:3d:05:c7:43:ed:f5:fb:b2:bc:f3:59:d9:de:
ad:29:07:e8:c6:82:42:73:6b:49:b6:f7:3d:71:14:d3:e2:03:
a1:7d:a8:cc:b4:be:91:52:5d:0b:94:09:40:68:55:7e:a2:a7:
97:97:12:5e:8d:69:9c:ef:a7:9f:00:90:41:2b:11:75:51:cd:
63:20:96:a9:33:3e:60:e5:09:a4:d2:23:15:d4:ab:88:71:7b:
d7:d6:8f:2a:70:38:fc:c8:5d:81:cd:c6:a9:74:76:59:35:ef:
1a:27:44:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA6g20Zj8GbjCsW6M+UKr6eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZjIyYTUzOTA5YjUyNzczNTI0NjM0MGYwNDE3ZWJlZmQz
MjZiMzEwHhcNMjYwODI1MjAwMTI2WhcNMjYwODI2MjAwMTI2WjAzMTEwLwYDVQQD
Eyg1ODUyMjhlMjFiNzY1NzY2NzJkOGJmNDRlNTdmNjVhYWViM2EyYjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx94igBAXwv3UqqJPsppUpqdhmiBa
r3d/MjrN1IYekZaV9LSfCD8xXNzMt1HILlz35BwwLNjUsV8Dy3aReK3WblTlyDuq
N23ougnBAh0y3koKUAXPpDRYydJPYjDiiNo1QOkiEtYtTcoyqsO7Jxr8r2MFS0uk
xA/09DXm9NXrtpELodQtPvJUB7otjGeYZ0g9NVCiADrgS+E0BMwF+eoGExQFiQLv
Lvrt67b5LyQeGDILKue/asW1u+X+lfIk/YYt12jMjdrtklvORlsxCa1QzopOIA+h
6l4ke+fr53yqQze/rmtxezlrrTHSc90lAjgqw0GB7ga79v/5LdfAdgQYGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhSKOIbdldmcti/ROV/ZarrOiuLMB8GA1UdIwQY
MBaAFCjyKlOQm1J3NSRjQPBBfr79MmsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1BJcVU1Q2JVbmMxSkdOQThFRi12djB5YXpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84NDViNDAtMGU2ZS00NTM1LWE1ZDEt
MjkzODFkMDQ2ZTliLzEvS1BJcVU1Q2JVbmMxSkdOQThFRi12djB5YXpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84NDViNDAtMGU2ZS00NTM1LWE1ZDEtMjkzODFkMDQ2ZTli
LzEvS1BJcVU1Q2JVbmMxSkdOQThFRi12djB5YXpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkRYJAQ9U
T/FnhZUNMr8MLi128ZWcEtfKTtNWo+/r0U/KsbxjuCumTgA1IGIHMJoZNI/fR4Xp
kh93fK+XZ/mhGpI/e5dNn7tBHi+1mG9VvwrV3LZoNmjkvlA4DDGSW8uF4Fy8NLom
CFoAnh8bX5gYwkw4yby1pHc8Pm8h1wf0yEw+3U4u1x5yeutIleG2XoWNgO+p31I9
BcdD7fX7srzzWdnerSkH6MaCQnNrSbb3PXEU0+IDoX2ozLS+kVJdC5QJQGhVfqKn
l5cSXo1pnO+nnwCQQSsRdVHNYyCWqTM+YOUJpNIjFdSriHF719aPKnA4/Mhdgc3G
qXR2WTXvGidEAQ==
-----END CERTIFICATE-----
Generated at Wed Aug 26 02:20:33 2026 by rpki-client