Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
File: KCnrZkUGuGv6H3Avax_7SEzCyxI.mft (raw, json)
Hash identifier: AhNno5K8/KjFug1Y2bnJ9o0tmP4Uejr/UiUSR/Ef30Q=
Subject key identifier: D5:7D:91:19:E8:6B:62:2C:1E:72:3D:13:D5:64:33:BE:8C:19:54:D0
Authority key identifier: 28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
Certificate issuer: /CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Certificate serial: 01A001013D355002838CF51D27369484D6BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
Manifest number: 12FC
Signing time: Fri 14 Aug 2026 16:00:53 +0000
Manifest this update: Fri 14 Aug 2026 16:00:53 +0000
Manifest next update: Sat 15 Aug 2026 16:00:53 +0000
Files and hashes: 1: KCnrZkUGuGv6H3Avax_7SEzCyxI.crl (hash: H/cjjwD72C74l4SUhwViKWgF+pZnt4Fan4FlxId82RA=)
2: T3EGh-bdCIIZhG5HJojpnlqKL2c.roa (hash: bufDKb7bJ5Yg3D29mO4Y90yES19oPGAgCv9pA/tjktA=)
3: iUyBvay1HB04jjUCqmLzofikeiI.roa (hash: YQOqKVVvW96raR8LDZq/96IB++aevKxnzXinzAloqYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 16:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:3d:35:50:02:83:8c:f5:1d:27:36:94:84:d6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Validity
Not Before: Aug 14 16:00:53 2026 GMT
Not After : Aug 15 16:00:53 2026 GMT
Subject: CN=d57d9119e86b622c1e723d13d56433be8c1954d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5b:1a:32:2a:03:68:93:d8:5f:1f:db:3f:2b:
df:6e:82:aa:63:2d:a1:cb:16:13:ba:40:26:a6:83:
dd:6f:3b:80:b5:61:cf:fe:ee:5f:4e:dc:50:1e:b0:
03:25:4d:1b:25:c4:12:b3:c1:92:b9:9c:56:6d:ea:
2e:21:b6:ac:3e:58:fb:3d:41:f4:e2:53:6b:9b:38:
b6:3e:75:09:4a:27:b6:81:07:b9:2e:3a:f9:f0:1f:
b8:d4:be:70:a2:18:a5:4b:1a:32:c4:f8:2c:af:8d:
12:a1:af:91:25:69:0d:c1:30:2b:94:7b:c2:b5:c8:
1a:32:b6:16:86:fd:cd:f7:96:37:ed:fe:7a:2b:5f:
b4:0d:97:83:6b:a1:ed:c7:32:d1:ce:45:73:3f:80:
cd:09:17:51:ad:d2:64:49:b0:ec:2e:3a:54:11:e0:
1d:e2:e6:3c:73:59:80:0c:ac:9e:86:90:5e:d0:ae:
b2:be:5e:8c:27:f8:22:af:02:09:34:f4:0c:cb:1d:
7d:8e:ee:11:c0:df:0d:e3:b2:70:bc:5c:ee:e2:3f:
b8:d8:0b:29:49:5b:d8:68:e7:f2:51:95:ce:e1:56:
19:42:82:15:5d:36:b2:c2:64:82:5b:7a:23:61:bf:
7f:ba:fb:5f:34:7c:df:58:e5:14:d7:0f:f8:70:41:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7D:91:19:E8:6B:62:2C:1E:72:3D:13:D5:64:33:BE:8C:19:54:D0
X509v3 Authority Key Identifier:
keyid:28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e4:21:5c:dd:79:fb:8a:4e:24:53:f5:35:77:11:ea:8e:50:
25:64:0c:7f:aa:21:1e:d0:77:6b:3c:58:46:bd:47:7b:14:3d:
d4:fc:c3:b4:db:6c:0a:cf:86:a0:3e:ea:cc:23:45:4f:aa:42:
d3:24:26:d1:13:b4:e6:cf:fe:79:8f:19:09:ab:84:90:16:c7:
9d:b1:0d:24:86:0b:2c:68:d5:d5:45:c9:7e:5a:a5:e9:5c:69:
91:6e:21:0e:64:6a:db:d4:62:d3:04:f7:09:eb:e0:55:51:ba:
63:22:70:6e:78:2f:35:a4:a0:8e:42:f4:b6:5f:c3:6a:a8:35:
7a:ac:06:16:d6:29:1b:a7:eb:54:fc:fa:24:e1:69:86:60:8c:
6e:ce:53:77:c5:57:cf:84:10:21:af:85:32:4e:ec:f4:51:5f:
24:63:cd:ba:46:03:95:b1:d3:d1:47:51:75:8f:cd:b9:6a:24:
b7:0c:34:49:67:13:77:ec:09:d0:47:c0:35:6d:1d:8b:0c:1a:
13:73:0a:da:73:c8:8e:99:59:bd:d0:b9:82:8e:2b:1b:68:9d:
46:d4:af:a2:b5:ed:78:e9:e6:eb:d9:24:34:e7:5b:2a:f0:9e:
a7:44:6e:ed:79:97:f0:ae:0a:0d:92:ba:fc:87:f0:93:08:36:
42:6f:ac:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:27:05 2026 by rpki-client