Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
File: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft (raw, json)
Hash identifier: vNeKXnn8JdTPQnqdhQ9ys8nyYUsH6lUnoIemZpLHurE=
Subject key identifier: 84:EE:28:BB:9A:32:5A:E2:99:35:E2:44:0E:0D:2C:54:48:5C:EE:09
Authority key identifier: 28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
Certificate issuer: /CN=280c3860fb96a823971e2ee62f8abff093861604
Certificate serial: 019D397761CEAF00B7DF0D90CEEE62EBBA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
Manifest number: 04FD
Signing time: Sun 29 Mar 2026 12:00:18 +0000
Manifest this update: Sun 29 Mar 2026 12:00:18 +0000
Manifest next update: Mon 30 Mar 2026 12:00:18 +0000
Files and hashes: 1: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl (hash: nogY3RBCNi+Bx8x+guzyJZ69MQaj9JQMWAKu0Msp/FE=)
2: h61hfdjD2qOmBnWHJGxzIB8c3I4.roa (hash: eeYDdA0+UQRYGPWmQqmukWqDEBNnCI6wRQqNfeNfgqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:61:ce:af:00:b7:df:0d:90:ce:ee:62:eb:ba:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280c3860fb96a823971e2ee62f8abff093861604
Validity
Not Before: Mar 29 12:00:18 2026 GMT
Not After : Mar 30 12:00:18 2026 GMT
Subject: CN=84ee28bb9a325ae29935e2440e0d2c54485cee09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d9:ab:bc:60:a9:de:ca:7f:29:23:5c:59:2c:
c2:6e:de:c8:2b:d6:8b:e0:bd:c3:a2:bb:26:cd:09:
6c:77:16:80:7f:d4:e0:0d:18:92:3f:5e:94:32:dc:
34:5e:64:a9:11:8a:b6:41:55:68:d8:39:85:5e:48:
84:57:1f:2b:43:8c:63:19:61:ba:6c:1e:57:0d:94:
10:c8:bf:af:49:fe:2e:1a:04:54:38:44:cc:a3:10:
7e:61:74:2f:3a:1b:16:cd:f1:4b:65:87:68:a8:fb:
d2:cb:09:46:7a:ed:8e:9e:c0:4f:ff:ac:e4:30:30:
43:3a:02:b0:09:a6:98:d8:ac:a0:4e:06:a7:c0:11:
4a:ff:f8:20:66:16:94:8c:c8:39:4b:8b:ff:34:39:
ce:a1:ef:1a:b0:82:d0:c7:b2:79:32:2f:fe:13:56:
45:a4:36:60:e4:01:2b:95:1b:b3:8d:92:ab:49:77:
c3:cc:95:19:28:86:dd:4a:fc:d6:de:e3:46:4a:c2:
ed:a7:65:c7:b6:f0:16:90:33:68:0c:75:8c:bb:e3:
29:9d:84:44:53:b0:b1:bb:28:ef:f1:0a:0c:4c:a4:
6b:a6:2e:8d:58:5e:72:ec:2f:d2:05:f1:5c:dc:83:
c3:67:04:63:82:46:0b:16:59:04:90:d2:a8:e5:53:
dd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EE:28:BB:9A:32:5A:E2:99:35:E2:44:0E:0D:2C:54:48:5C:EE:09
X509v3 Authority Key Identifier:
keyid:28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:1d:9a:02:9c:00:4b:06:c1:79:1c:46:52:9d:91:12:18:9a:
64:3b:be:d3:7a:67:e2:39:b1:97:05:e3:d1:51:47:3d:09:5b:
88:e0:7d:9f:3a:f1:20:f1:32:de:93:af:1b:1a:53:63:62:8c:
b0:9f:d4:b1:f7:21:07:d9:a2:81:9f:e2:6e:2e:e4:8a:86:7b:
8d:1f:05:50:58:99:be:4a:6e:d0:ab:6f:99:25:f0:03:b0:42:
8e:9d:24:f6:96:8e:dd:cb:74:b5:57:0f:38:5d:f5:08:1e:58:
9a:bf:d2:4a:31:25:71:34:b3:17:35:7b:a2:10:eb:59:1e:e6:
1a:ab:8c:1d:81:75:87:3d:55:03:f7:e3:66:8c:62:ba:b9:b4:
d6:7e:87:2c:6e:6f:0a:19:5e:d3:ab:87:aa:26:2d:f3:96:71:
02:e4:97:31:6e:09:d1:7d:2a:d3:ec:95:4b:4c:29:27:a9:61:
86:ae:a2:87:ea:38:f8:a6:37:fe:cd:89:38:ee:cf:e8:c5:3c:
2d:80:60:6f:d7:61:3e:cb:5e:fc:ad:a3:48:37:b2:1f:e3:36:
1b:c9:13:69:05:cc:f3:3f:19:a9:13:0c:48:14:a7:9b:fe:df:
62:32:e2:98:6d:87:7b:c5:7d:9a:60:5e:43:4f:e5:03:a1:df:
cf:ff:8a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:56 2026 by rpki-client