Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
File: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft (raw, json)
Hash identifier: 4W3JzUeeYVsLISxEFMjHfrEIUGxjl05ZWe23o5psIhA=
Subject key identifier: F5:A0:3B:0F:2C:B6:0D:D3:F9:0D:43:8D:9C:BC:DC:62:35:4E:EC:77
Authority key identifier: 28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
Certificate issuer: /CN=280c3860fb96a823971e2ee62f8abff093861604
Certificate serial: 019EB7D83EEAB534E0610FD220EA4C60DC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
Manifest number: 05C3
Signing time: Thu 11 Jun 2026 18:01:02 +0000
Manifest this update: Thu 11 Jun 2026 18:01:02 +0000
Manifest next update: Fri 12 Jun 2026 18:01:02 +0000
Files and hashes: 1: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl (hash: xy3nW4MeJHIj0Rv2hNiOnIfY5LkrvwvKecGw2FOC9Lo=)
2: h61hfdjD2qOmBnWHJGxzIB8c3I4.roa (hash: eeYDdA0+UQRYGPWmQqmukWqDEBNnCI6wRQqNfeNfgqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d8:3e:ea:b5:34:e0:61:0f:d2:20:ea:4c:60:dc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280c3860fb96a823971e2ee62f8abff093861604
Validity
Not Before: Jun 11 18:01:02 2026 GMT
Not After : Jun 12 18:01:02 2026 GMT
Subject: CN=f5a03b0f2cb60dd3f90d438d9cbcdc62354eec77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9f:78:06:ea:ec:ce:ef:07:35:ba:2d:1c:dd:
84:d2:29:b8:4f:7f:de:e2:e7:8d:08:10:d5:25:d5:
71:b3:20:3e:e9:8e:f5:b4:d3:99:64:0e:5c:fe:8f:
ab:90:f2:86:87:02:f2:10:82:f9:d1:45:1a:9d:b5:
35:b0:18:bd:4b:3d:3a:b6:a5:1d:26:83:29:3d:f8:
db:f9:07:c5:3f:0e:20:fa:ca:11:8d:1a:10:66:56:
1d:ac:00:12:f0:d5:31:80:b2:4e:ab:74:55:c5:07:
3d:b6:50:74:1b:1a:42:f7:07:fb:39:b5:9e:bf:d4:
5e:3d:07:08:f1:9c:13:61:f3:e1:a5:db:02:69:86:
7c:b6:a3:be:07:c9:ac:1d:57:71:ba:e8:6c:11:fa:
1e:5e:ca:e2:84:7a:d8:31:db:ca:40:e9:b8:88:91:
ff:49:25:bb:63:a3:24:8a:70:50:32:43:a7:ee:47:
66:1b:f8:93:13:13:c4:48:cb:69:f0:18:1e:d9:f0:
cd:77:da:d2:cd:88:7d:29:c7:c1:c2:ad:35:10:88:
4c:f4:a3:42:f4:7c:90:18:14:54:6b:3a:c8:37:bb:
06:59:f6:fb:6a:fa:e7:19:30:f0:b5:8a:59:6a:bd:
3a:27:e7:66:90:c5:36:4d:b2:ec:a7:f1:b7:33:2b:
e7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A0:3B:0F:2C:B6:0D:D3:F9:0D:43:8D:9C:BC:DC:62:35:4E:EC:77
X509v3 Authority Key Identifier:
keyid:28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f8:49:c1:13:15:8f:ce:35:8d:74:05:ba:bc:d8:c3:17:b7:
f1:48:47:8a:ae:f0:1e:98:6f:56:29:48:33:8c:84:20:53:8b:
2c:d8:39:95:21:12:7a:59:1b:8a:19:67:8e:2c:97:d4:af:98:
04:43:37:ec:fd:25:d7:a7:6c:99:83:4d:e1:b0:31:5c:49:3b:
c2:dd:48:d5:85:bd:a4:26:d9:ab:b1:20:32:f8:48:72:ac:23:
41:a2:cf:1e:e0:5c:d6:6b:4b:9f:0b:ed:48:69:c3:2b:92:29:
28:75:de:ed:51:01:c5:4a:63:c7:21:eb:f9:a1:ca:62:d0:cf:
dc:23:07:d2:f0:d8:eb:49:65:6a:d9:92:0c:06:73:d9:2c:85:
d3:1a:3b:8a:3c:c1:0d:08:d7:38:69:59:b1:af:79:e1:50:04:
23:0c:36:ee:c6:b3:4c:71:d7:65:2e:7e:f7:c8:3b:26:b4:c9:
ce:f4:c4:c3:9c:8a:05:35:89:b2:b7:8a:21:75:ff:f7:f1:26:
9d:e4:57:a3:3d:18:84:d4:28:fb:12:75:46:8c:48:dc:04:91:
0d:6c:bc:81:d9:c3:22:5a:0a:1e:5b:f1:a1:68:a8:df:a3:ca:
c4:0e:55:ed:52:a2:1a:ac:9c:a2:96:53:71:b2:50:59:ea:f1:
fc:b9:1f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:58:06 2026 by rpki-client