Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
File: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft (raw, json)
Hash identifier: yyazRH+bRoOMyK2YH8L6/Do810IKpQE6Fj5uJZpRgH4=
Subject key identifier: B6:20:E1:FA:43:C3:41:CD:16:6B:F4:07:EC:1F:7B:21:ED:51:C4:2F
Authority key identifier: 28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
Certificate issuer: /CN=280c3860fb96a823971e2ee62f8abff093861604
Certificate serial: 01A18262ABB8ED87E477CB5DCD324FFF086D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
Manifest number: 0735
Signing time: Wed 28 Oct 2026 12:01:06 +0000
Manifest this update: Wed 28 Oct 2026 12:01:06 +0000
Manifest next update: Thu 29 Oct 2026 12:01:06 +0000
Files and hashes: 1: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl (hash: M9TLvfNq9KrQBLfrFpOYmD7Yj43qj5Gkpa4kSuTYCFE=)
2: h61hfdjD2qOmBnWHJGxzIB8c3I4.roa (hash: eeYDdA0+UQRYGPWmQqmukWqDEBNnCI6wRQqNfeNfgqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:62:ab:b8:ed:87:e4:77:cb:5d:cd:32:4f:ff:08:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280c3860fb96a823971e2ee62f8abff093861604
Validity
Not Before: Oct 28 12:01:06 2026 GMT
Not After : Oct 29 12:01:06 2026 GMT
Subject: CN=b620e1fa43c341cd166bf407ec1f7b21ed51c42f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:86:af:0c:05:6c:6d:f3:ae:3c:b7:31:f2:
67:43:f6:9f:2d:ac:2b:70:bb:dc:15:b4:ad:17:d0:
1d:18:19:32:7d:94:8c:ad:fa:b2:16:7a:c1:40:b5:
c0:ef:05:e7:95:2a:3b:7a:54:8f:de:b0:96:90:0a:
b4:06:53:29:b5:c8:6b:fd:7a:2f:b1:e1:65:7c:f5:
b7:2d:f4:2b:1c:83:77:8b:55:fe:27:b6:eb:f9:3d:
5f:85:d4:ad:94:e6:44:bf:ff:e5:6e:1c:05:c8:c0:
14:3a:28:43:47:b8:d2:16:a5:b0:8a:e6:fe:58:b5:
c9:f9:66:9e:23:4c:9b:09:36:62:47:35:18:19:f7:
ae:17:26:8b:30:7a:bb:11:c2:89:94:c1:34:06:49:
83:28:07:19:c8:2b:04:07:c0:d7:5d:48:eb:64:17:
36:c6:dc:da:32:ac:04:aa:54:d1:f6:f4:b7:05:92:
06:a1:1e:3f:57:18:37:6f:30:5f:dd:4d:68:91:44:
3b:0a:e9:13:c7:b9:9d:7d:c8:d0:e6:3d:f5:6b:76:
e7:c3:e3:4e:7b:fb:c6:37:fd:63:1f:15:54:63:af:
7a:93:c2:43:03:97:d0:9e:c9:30:a1:99:30:0a:fc:
d8:59:cb:cc:aa:1f:dd:6a:0b:48:81:5c:47:13:a8:
17:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:20:E1:FA:43:C3:41:CD:16:6B:F4:07:EC:1F:7B:21:ED:51:C4:2F
X509v3 Authority Key Identifier:
keyid:28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:87:7f:93:01:c6:ac:5c:8f:cb:02:b3:65:4f:0c:df:27:56:
d8:a8:ea:8d:d5:06:70:d9:18:ba:f4:b8:4c:a9:8f:9a:fd:ec:
e2:84:54:70:5d:99:3a:a7:95:45:c6:18:8a:a4:3f:d6:32:c8:
9a:1d:2e:c6:21:9b:36:01:c4:1d:73:15:f6:cb:4a:9a:fa:85:
7f:80:4a:d6:86:96:8a:8c:5a:fc:25:6a:c6:26:8c:8c:c3:cf:
68:86:93:52:bc:dd:24:e3:71:f0:90:b0:1c:68:95:83:6c:3d:
6b:83:29:52:38:67:93:e3:29:9b:14:9f:e7:65:21:dc:d2:7e:
94:7b:34:3c:c3:93:af:d1:67:3e:cd:b9:87:0c:6c:db:26:13:
ae:24:01:08:86:ef:6e:2c:8a:ac:71:88:9b:04:f8:ad:9a:96:
d7:b9:56:76:28:72:57:29:39:9d:dd:8c:c8:a9:cc:6a:81:94:
66:b4:b4:dd:63:78:45:ff:98:c3:80:8a:74:f9:f2:6b:cd:e1:
83:73:d9:bb:6c:cd:72:8c:fd:4d:b4:be:ea:dd:18:d0:9f:cb:
42:91:c3:e7:d3:d0:5d:61:2c:14:b9:ef:31:48:a2:fc:b7:f7:
c6:fe:48:f8:92:48:cb:1d:fb:e5:bd:64:51:02:60:4d:ae:2c:
f6:cd:46:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:47:35 2026 by rpki-client