Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft
File: KMWxDr1MOSkgFDB-h_prHJtCFn0.mft (raw, json)
Hash identifier: FZLKX0xCAbkCqeJkUhqt/e9rz8ldkaVynyDhpfGEfVU=
Subject key identifier: 16:41:06:92:9B:71:FA:BD:0B:8C:BD:F2:AB:0D:0F:ED:1B:8A:0B:02
Authority key identifier: 28:C5:B1:0E:BD:4C:39:29:20:14:30:7E:87:FA:6B:1C:9B:42:16:7D
Certificate issuer: /CN=28c5b10ebd4c39292014307e87fa6b1c9b42167d
Certificate serial: 019D3865D4F72022B48AAD7BE435883C4310
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMWxDr1MOSkgFDB-h_prHJtCFn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft
Manifest number: 092E
Signing time: Sun 29 Mar 2026 07:01:30 +0000
Manifest this update: Sun 29 Mar 2026 07:01:30 +0000
Manifest next update: Mon 30 Mar 2026 07:01:30 +0000
Files and hashes: 1: KMWxDr1MOSkgFDB-h_prHJtCFn0.crl (hash: L58RC3vUtDeA03se0vC37kVWY/J7vxTn/zwQbBhUS/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMWxDr1MOSkgFDB-h_prHJtCFn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d4:f7:20:22:b4:8a:ad:7b:e4:35:88:3c:43:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c5b10ebd4c39292014307e87fa6b1c9b42167d
Validity
Not Before: Mar 29 07:01:30 2026 GMT
Not After : Mar 30 07:01:30 2026 GMT
Subject: CN=164106929b71fabd0b8cbdf2ab0d0fed1b8a0b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:31:b1:2f:bf:95:da:f8:c9:80:50:f7:af:a1:
bc:66:40:e8:d5:1b:9a:59:11:bb:5e:76:8a:11:6a:
71:70:82:da:ce:d8:20:6d:aa:9d:a5:b4:32:c9:27:
90:7d:81:0f:fd:4d:31:2a:fb:55:c4:c6:5d:19:a3:
bd:a0:3a:ce:7d:5b:f5:68:00:80:d1:e1:c9:9c:82:
70:57:b2:30:59:1c:40:e9:c0:83:1a:49:a2:37:23:
22:0c:05:b0:da:3b:cf:03:eb:45:f3:bb:2e:62:47:
a9:90:5d:8d:5d:6b:46:5a:09:48:ca:f5:d4:8d:1f:
be:cb:52:8b:54:79:a6:68:05:8e:e8:c2:31:c2:3e:
e0:a8:35:ff:34:86:54:e0:2d:a2:9f:6d:bd:ce:df:
b7:10:f2:0b:f1:cf:04:94:4f:8d:39:95:6a:db:08:
2a:a6:d4:ee:64:a9:ba:8a:8e:7f:d0:74:da:48:90:
49:44:7f:9c:83:cc:c3:cb:58:db:58:39:62:ed:a6:
8e:dc:7f:2d:95:34:b8:fc:fd:be:6e:cb:99:77:56:
63:b7:39:6b:bd:74:ec:d9:8a:4d:a1:d8:48:16:10:
fb:2f:6c:82:e8:6c:af:99:79:ca:83:5d:6d:9f:ae:
63:bf:3a:90:19:a9:b1:67:c1:81:3d:1c:f4:97:55:
f3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:41:06:92:9B:71:FA:BD:0B:8C:BD:F2:AB:0D:0F:ED:1B:8A:0B:02
X509v3 Authority Key Identifier:
keyid:28:C5:B1:0E:BD:4C:39:29:20:14:30:7E:87:FA:6B:1C:9B:42:16:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMWxDr1MOSkgFDB-h_prHJtCFn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9ab02c-0ac8-47f1-8c7c-a629d1976ea3/1/KMWxDr1MOSkgFDB-h_prHJtCFn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:7d:2c:a8:67:eb:4b:e6:27:b1:96:2b:ac:14:30:e0:da:35:
40:af:89:36:44:4c:b7:dd:b9:7d:a1:f2:5c:70:ee:8e:02:88:
ae:70:f3:94:7b:cb:78:40:33:09:47:7c:ef:e7:89:3c:f7:3b:
a2:47:37:38:0c:a6:46:7c:36:67:28:e9:25:1f:64:70:39:fc:
09:40:1f:39:0f:6f:68:63:4a:51:5b:6b:83:72:04:88:b4:b2:
05:9f:15:fa:be:ab:61:59:54:f8:c9:af:95:bc:13:0c:d6:4b:
3a:0c:20:cd:32:61:07:3a:2d:3e:50:45:4f:f3:21:05:bd:db:
d5:b4:7b:25:98:ac:73:43:bf:e6:96:fa:83:6a:b6:88:b7:84:
12:35:4f:8d:0e:00:c4:94:e9:ab:fa:d1:8f:4a:3b:28:61:e7:
0e:33:cf:50:46:28:2d:5e:03:54:ab:a5:0f:b3:1c:ec:f5:c1:
44:34:d5:85:cd:ee:fb:ff:79:30:69:59:66:0e:85:6b:ad:d7:
b2:e4:25:58:f6:56:65:e6:fb:d5:c6:1e:c5:2f:65:96:2e:d0:
10:a3:b9:d8:d3:d3:53:da:fd:fc:35:3e:bd:55:a6:1b:57:dd:
75:f9:a9:39:e2:a5:17:f6:ba:78:7a:76:61:35:f1:5e:7e:81:
c0:70:a5:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:27 2026 by rpki-client