Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
File: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft (raw, json)
Hash identifier: fDqv4NffjjRTswg6Xhd/E6v1RardTEDCG1cQSZWvvJM=
Subject key identifier: C5:07:56:29:C7:EF:15:B9:42:A1:EA:71:FF:F4:0D:6A:B4:20:DF:00
Authority key identifier: 28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
Certificate issuer: /CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Certificate serial: 019F1BD6867F0CE63495BD4BA3306C9C0E9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
Manifest number: 198A
Signing time: Wed 01 Jul 2026 04:01:11 +0000
Manifest this update: Wed 01 Jul 2026 04:01:11 +0000
Manifest next update: Thu 02 Jul 2026 04:01:11 +0000
Files and hashes: 1: KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl (hash: ZOOYgQyhBK4lP7kCIn7OKmD9C8tMZARZv6BOjsKYZpI=)
2: wQjiul8nEUm7rTrpmnxVu05vfYw.roa (hash: OwpCUGAA3H+6uhau4CnuhtRzlm3HYsRifbd/fGUsCD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 Jul 2026 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:d6:86:7f:0c:e6:34:95:bd:4b:a3:30:6c:9c:0e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=285dee401808e1b5ec04b5c1abe5d9de5a3858ac
Validity
Not Before: Jul 1 04:01:11 2026 GMT
Not After : Jul 2 04:01:11 2026 GMT
Subject: CN=c5075629c7ef15b942a1ea71fff40d6ab420df00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:05:17:23:55:d4:2b:5c:76:5f:ce:b3:36:1d:
a4:59:de:7f:74:32:7f:39:62:9a:19:69:1b:d9:61:
15:5c:86:a6:ca:b9:3e:69:49:43:5d:6b:1d:ca:f5:
7e:6c:7e:2c:5b:88:77:5a:73:8a:63:eb:ad:5b:95:
35:6d:bd:fd:f8:bf:fe:e7:86:9f:ef:4a:b3:2e:71:
5d:d6:4a:3c:08:86:e0:81:fa:08:0f:68:f5:44:9f:
5e:55:13:75:c7:71:92:6e:86:d8:a2:0a:07:43:8a:
5b:b6:26:bd:d4:4d:21:f1:55:27:9a:bb:49:69:07:
78:51:9e:d1:dc:69:b8:e5:3a:78:19:d8:7d:76:b1:
a7:5c:70:98:7b:8c:d1:7f:ce:2e:60:5a:6a:b8:5e:
94:df:fc:5a:9f:a2:ed:71:c4:90:46:57:12:3f:8d:
7a:be:5c:90:6e:06:c8:d2:10:ff:71:21:29:ea:f8:
8e:08:78:f1:09:0e:62:19:21:13:80:e8:02:a5:fb:
c3:c9:6a:42:1b:ed:ff:bb:8d:cc:29:46:0e:0a:3c:
2d:cc:7c:9a:82:a1:58:c8:87:1b:96:63:57:c0:e6:
90:59:a6:50:15:e8:83:a0:17:14:29:ba:22:df:1f:
93:b5:3c:58:66:2f:45:e3:29:30:de:ed:a1:4f:b1:
16:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:07:56:29:C7:EF:15:B9:42:A1:EA:71:FF:F4:0D:6A:B4:20:DF:00
X509v3 Authority Key Identifier:
keyid:28:5D:EE:40:18:08:E1:B5:EC:04:B5:C1:AB:E5:D9:DE:5A:38:58:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/332846-9d42-421d-b3ed-980a4b544056/1/KF3uQBgI4bXsBLXBq-XZ3lo4WKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:95:d7:dd:b5:e1:d2:62:07:26:e8:0c:b0:fb:b2:38:92:7e:
fb:cf:b4:bc:87:4d:67:e4:fc:9e:1d:1a:52:33:73:8e:5d:0c:
d5:d6:9d:d4:22:62:9d:64:a9:dc:19:b7:eb:04:85:07:be:d1:
b2:9f:ab:7f:20:51:33:62:9b:b6:fd:da:ec:84:fe:45:97:88:
9b:1b:8e:3d:44:dd:92:2c:8c:22:3e:9d:e0:31:2c:0f:6f:8e:
7b:9c:88:af:e8:90:25:e9:c6:cb:2c:40:e0:26:d4:e9:a1:93:
ee:10:86:5d:a8:67:4c:5c:94:48:28:4c:3c:08:cf:3d:e7:06:
91:50:93:5d:b5:a8:7d:c8:5e:77:83:52:48:8d:49:cc:25:40:
5b:84:fc:1d:6c:49:79:68:3e:a8:06:67:00:61:62:d1:d9:52:
15:32:e3:48:7f:34:f5:14:9c:51:4d:14:44:0f:57:d4:15:50:
71:aa:e3:e7:2d:1c:99:c4:bb:cb:50:64:97:17:93:a4:2f:06:
f7:e0:c5:3a:1c:d6:dd:a8:fd:b4:50:70:5c:18:29:78:43:97:
75:50:e1:93:dd:d7:82:37:61:4b:ef:b3:64:29:11:25:b8:c6:
ac:84:56:85:44:5b:95:4b:54:77:2d:2a:1e:55:bf:c1:91:a6:
92:bd:62:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 10:01:11 2026 by rpki-client