Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
File: KMaADXS8QQW0DnfqCFugJtvuw18.mft (raw, json)
Hash identifier: pyPY7YQXjkiaQjeNwVgBDXYbA4573cWPZbGibiLoME0=
Subject key identifier: 46:3E:5E:62:B3:5E:9C:DA:52:E2:16:A5:6D:1B:06:D5:F6:9C:BE:EF
Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
Certificate issuer: /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Certificate serial: 01A1DE70AB8E355ADD353CFD467766AD562C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
Manifest number: 1539
Signing time: Sun 15 Nov 2026 09:01:28 +0000
Manifest this update: Sun 15 Nov 2026 09:01:28 +0000
Manifest next update: Mon 16 Nov 2026 09:01:28 +0000
Files and hashes: 1: KMaADXS8QQW0DnfqCFugJtvuw18.crl (hash: VEkWn0AuuEuwH945U674GP0rX8ofHK1YNvd0u8vqZdI=)
2: etmHXHHHLtcS91uDngOtEabkiBg.roa (hash: RSzmWtizgbjdSjkpsRPkAgQwWXoqPbD9+Fp30azxzoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:ab:8e:35:5a:dd:35:3c:fd:46:77:66:ad:56:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Validity
Not Before: Nov 15 09:01:28 2026 GMT
Not After : Nov 16 09:01:28 2026 GMT
Subject: CN=463e5e62b35e9cda52e216a56d1b06d5f69cbeef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cc:d2:50:98:03:76:ea:56:c0:c8:20:6f:a9:
c8:37:28:24:55:b9:1a:b2:2c:43:6b:f2:23:bd:2b:
5a:24:69:5b:1b:a3:1e:9f:6a:d9:ae:ff:78:92:2a:
26:44:74:4d:82:16:b6:ba:2f:77:5d:05:b4:05:7a:
40:0c:1e:39:85:c4:11:30:c9:fe:2b:81:8f:b2:04:
e8:fa:4f:93:3b:ce:4f:d3:44:2b:cd:81:bf:f2:45:
5b:9f:c1:7d:9e:cf:ed:f8:d1:d3:f6:4c:66:be:10:
94:9b:40:bd:71:8d:46:e7:14:48:23:cf:62:47:30:
d2:32:3e:92:b2:4d:72:92:ab:08:1e:b9:f7:36:55:
88:46:d4:cf:fb:ee:5b:07:8a:b2:8c:23:80:f6:32:
30:c3:e9:74:a0:78:f2:0b:ee:6b:a2:76:ae:73:e8:
ae:e3:fb:5b:b1:d1:dc:48:5c:64:7c:f5:8a:fe:8e:
b7:46:b2:d8:85:ba:ae:32:be:7d:3d:cd:e9:2c:a1:
dc:b3:0e:d9:e1:12:b4:05:82:a2:f6:06:d7:7a:2d:
51:af:25:a7:9e:d8:cb:5d:7c:0e:71:0b:e8:10:ce:
d3:c3:fd:40:b2:4e:d6:0b:fd:2a:4a:0c:d8:eb:fb:
82:7b:f6:66:05:23:58:a9:cf:7f:e5:bd:a9:01:d9:
f4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3E:5E:62:B3:5E:9C:DA:52:E2:16:A5:6D:1B:06:D5:F6:9C:BE:EF
X509v3 Authority Key Identifier:
keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:db:df:0d:84:90:c0:f5:4e:aa:b2:c7:12:5e:52:a9:ee:56:
85:dc:92:1b:59:e9:be:1c:e4:1c:7e:1f:87:0e:43:f6:0a:5b:
ef:72:bf:15:9b:20:77:36:f3:10:02:2d:db:52:e1:5c:47:c8:
5a:05:e4:2d:9e:74:06:62:2e:b9:95:69:4a:e2:b6:2f:d0:da:
65:01:a3:8b:9e:8c:54:14:a6:b5:47:db:f9:b9:e7:77:a4:1d:
74:88:08:45:49:67:43:d8:5a:5f:ce:eb:aa:fe:04:da:3e:97:
45:9d:1b:50:dc:cb:b0:af:a2:d9:65:e3:4c:60:34:2d:0d:c9:
9d:13:40:38:a0:bb:2e:f0:35:55:2e:23:02:e7:0e:d9:63:1b:
f7:a7:ed:88:f7:9e:c2:27:da:46:c5:4d:5f:a7:c6:56:c2:b3:
f2:b9:ae:9c:20:27:ec:9c:2b:41:b4:38:2b:f0:19:c8:b9:5c:
46:68:4e:a3:98:f5:dd:22:e0:1f:aa:be:d3:b3:01:53:2f:aa:
0f:29:c0:82:f1:84:e4:2d:e6:10:a8:cb:cf:20:84:5b:88:26:
76:28:d1:c0:f1:f6:98:c0:c9:c2:1b:51:e5:e7:19:f1:31:b9:
17:ec:e7:fb:80:ab:f8:70:07:df:ce:81:0f:2f:b5:17:47:84:
65:ed:5f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:27:46 2026 by rpki-client