Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
File: KPIqU5CbUnc1JGNA8EF-vv0yazE.mft (raw, json)
Hash identifier: hyy01O4ltDjxGzKGsPgRlDhmCw/0+H6q3yWALp3tiCg=
Subject key identifier: 6D:5B:0D:9F:6D:2A:71:ED:A1:F0:28:BC:A6:16:E4:84:6C:67:7E:E2
Authority key identifier: 28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
Certificate issuer: /CN=28f22a53909b527735246340f0417ebefd326b31
Certificate serial: 019DDCFAFCF977E537F3E2488686A8D7AC08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
Manifest number: 0F
Signing time: Thu 30 Apr 2026 06:02:09 +0000
Manifest this update: Thu 30 Apr 2026 06:02:09 +0000
Manifest next update: Fri 01 May 2026 06:02:09 +0000
Files and hashes: 1: KPIqU5CbUnc1JGNA8EF-vv0yazE.crl (hash: v5nR7ahZqXlmI43/8lIKAxwabm0EG+cig9CTJAe4S4Q=)
2: V5JJ4RiqOPReWHb_eastqKlSys0.asa (hash: 8oe50I5opY7IEDVyw0umJ4cDotKgODumEz51B2tGhjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 06:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:fa:fc:f9:77:e5:37:f3:e2:48:86:86:a8:d7:ac:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f22a53909b527735246340f0417ebefd326b31
Validity
Not Before: Apr 30 06:02:09 2026 GMT
Not After : May 1 06:02:09 2026 GMT
Subject: CN=6d5b0d9f6d2a71eda1f028bca616e4846c677ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:44:64:d7:a4:bb:21:db:11:85:1b:cb:95:33:
a3:f5:2b:f0:2c:c7:e9:bf:65:08:24:d1:2f:0f:6f:
15:dd:97:16:f6:aa:45:ca:90:37:fe:0a:a6:f5:1b:
11:42:70:f7:47:40:a8:15:96:4b:a9:1b:f1:7b:ec:
ea:ba:e9:25:44:eb:05:58:21:1b:e1:9e:f3:b0:d1:
2e:b2:d6:c4:3c:98:b4:5a:df:5d:0b:14:3c:a7:72:
98:26:97:d1:e8:bf:46:dd:e9:e8:fc:6c:8d:8c:06:
2b:4d:dc:38:cd:87:f5:c8:5a:2b:c6:0d:81:1f:4e:
29:dd:98:7f:2f:bd:92:2c:35:54:50:d2:f4:f8:87:
34:af:9b:82:f6:d3:a1:31:02:fc:a3:5a:a3:f5:49:
6e:88:36:f4:e8:c6:45:18:24:c5:ad:42:6c:8a:43:
8e:0c:7d:7f:4c:1b:d2:d0:fc:88:1e:45:8e:73:e7:
f1:bb:0d:bb:a8:df:25:ab:b4:69:78:ba:41:a0:88:
20:a0:90:25:cb:1a:02:e6:84:9e:4e:2d:88:d0:f5:
92:15:b6:52:c7:4c:e7:ec:7b:cd:e7:b8:04:c3:90:
64:73:43:64:a1:12:9c:27:ef:c2:bb:14:0e:26:6d:
e8:5e:be:c8:f7:e3:71:6e:de:94:d7:47:6f:d7:cb:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5B:0D:9F:6D:2A:71:ED:A1:F0:28:BC:A6:16:E4:84:6C:67:7E:E2
X509v3 Authority Key Identifier:
keyid:28:F2:2A:53:90:9B:52:77:35:24:63:40:F0:41:7E:BE:FD:32:6B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPIqU5CbUnc1JGNA8EF-vv0yazE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/845b40-0e6e-4535-a5d1-29381d046e9b/1/KPIqU5CbUnc1JGNA8EF-vv0yazE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cd:3b:2b:88:b4:90:7b:98:77:c4:db:25:79:4d:e8:5d:bd:
e6:ba:f5:32:61:96:65:1b:69:3c:ec:93:c1:f3:c1:50:c0:4b:
0f:ca:f4:37:18:d2:96:61:39:42:da:04:f6:a7:f8:ee:b4:8f:
e9:f4:4f:eb:ba:78:ab:06:cd:89:22:4e:80:4a:0d:8c:a1:ce:
4d:ca:72:eb:5b:70:3b:77:cf:12:73:71:43:fe:d2:f9:1e:05:
19:7b:1c:bf:48:0b:96:ef:36:68:f4:7c:eb:7c:ce:75:d5:9b:
8e:ed:6a:45:95:b6:e3:63:9b:0c:96:c8:3c:0c:07:a0:b3:c5:
2e:a4:44:be:91:4b:33:5f:9e:a8:45:f8:a4:15:ba:ab:ad:a9:
02:82:db:b6:f0:db:d5:b1:87:56:f7:63:61:23:c0:da:82:9b:
b8:e8:1f:55:21:f8:2f:fb:51:00:fd:d8:55:f0:1c:23:4d:53:
d3:06:ae:39:0b:50:e7:c4:33:59:88:db:4f:3b:22:19:e6:1c:
c2:83:a4:b6:72:c1:d8:eb:3b:43:d5:15:21:fc:1c:ef:bd:a3:
fa:be:6f:b6:ee:34:9b:7d:0b:01:9f:cb:a9:1b:17:67:5c:ad:
bd:dd:a1:8e:2a:66:16:9e:e0:d2:13:10:d1:ac:6a:06:fe:94:
72:68:0c:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3c+vz5d+U38+JIhoao16wIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZjIyYTUzOTA5YjUyNzczNTI0NjM0MGYwNDE3ZWJlZmQz
MjZiMzEwHhcNMjYwNDMwMDYwMjA5WhcNMjYwNTAxMDYwMjA5WjAzMTEwLwYDVQQD
Eyg2ZDViMGQ5ZjZkMmE3MWVkYTFmMDI4YmNhNjE2ZTQ4NDZjNjc3ZWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxERk16S7IdsRhRvLlTOj9SvwLMfp
v2UIJNEvD28V3ZcW9qpFypA3/gqm9RsRQnD3R0CoFZZLqRvxe+zquuklROsFWCEb
4Z7zsNEustbEPJi0Wt9dCxQ8p3KYJpfR6L9G3eno/GyNjAYrTdw4zYf1yForxg2B
H04p3Zh/L72SLDVUUNL0+Ic0r5uC9tOhMQL8o1qj9UluiDb06MZFGCTFrUJsikOO
DH1/TBvS0PyIHkWOc+fxuw27qN8lq7RpeLpBoIggoJAlyxoC5oSeTi2I0PWSFbZS
x0zn7HvN57gEw5Bkc0NkoRKcJ+/CuxQOJm3oXr7I9+Nxbt6U10dv18sxBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1bDZ9tKnHtofAovKYW5IRsZ37iMB8GA1UdIwQY
MBaAFCjyKlOQm1J3NSRjQPBBfr79MmsxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1BJcVU1Q2JVbmMxSkdOQThFRi12djB5YXpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84NDViNDAtMGU2ZS00NTM1LWE1ZDEt
MjkzODFkMDQ2ZTliLzEvS1BJcVU1Q2JVbmMxSkdOQThFRi12djB5YXpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84NDViNDAtMGU2ZS00NTM1LWE1ZDEtMjkzODFkMDQ2ZTli
LzEvS1BJcVU1Q2JVbmMxSkdOQThFRi12djB5YXpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFM07K4i0
kHuYd8TbJXlN6F295rr1MmGWZRtpPOyTwfPBUMBLD8r0NxjSlmE5QtoE9qf47rSP
6fRP67p4qwbNiSJOgEoNjKHOTcpy61twO3fPEnNxQ/7S+R4FGXscv0gLlu82aPR8
63zOddWbju1qRZW242ObDJbIPAwHoLPFLqREvpFLM1+eqEX4pBW6q62pAoLbtvDb
1bGHVvdjYSPA2oKbuOgfVSH4L/tRAP3YVfAcI01T0wauOQtQ58QzWYjbTzsiGeYc
woOktnLB2Os7Q9UVIfwc772j+r5vtu40m30LAZ/LqRsXZ1ytvd2hjipmFp7g0hMQ
0axqBv6UcmgMGQ==
-----END CERTIFICATE-----
Generated at Thu Apr 30 12:46:36 2026 by rpki-client