Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.mft
File: KOVsaNwJ-8UDxrZxtXoEomfoK5E.mft (raw, json)
Hash identifier: PhURFj3WwAhGZJlPrqL5+VvEc+qkE2bkiPCIwiHgnAI=
Subject key identifier: 56:EE:38:E1:9D:37:24:E9:A4:01:6A:55:B1:2E:32:74:DC:D8:84:AC
Authority key identifier: 28:E5:6C:68:DC:09:FB:C5:03:C6:B6:71:B5:7A:04:A2:67:E8:2B:91
Certificate issuer: /CN=28e56c68dc09fbc503c6b671b57a04a267e82b91
Certificate serial: 019FA0DFD441A90DEE34F078A38D8F73007C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KOVsaNwJ-8UDxrZxtXoEomfoK5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.mft
Manifest number: 48
Signing time: Mon 27 Jul 2026 00:00:51 +0000
Manifest this update: Mon 27 Jul 2026 00:00:51 +0000
Manifest next update: Tue 28 Jul 2026 00:00:51 +0000
Files and hashes: 1: KOVsaNwJ-8UDxrZxtXoEomfoK5E.crl (hash: zmSRx5544HTJk+nf+/lalnFwiGcRnC1cCEFpAEFzpaA=)
2: xnOGv6tQRxHcvaugZBbY2118Zzk.roa (hash: O4YWxbU/3fPET1eHT64GDXgkT1S9zSgi4NLlsKzdn9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KOVsaNwJ-8UDxrZxtXoEomfoK5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:df:d4:41:a9:0d:ee:34:f0:78:a3:8d:8f:73:00:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28e56c68dc09fbc503c6b671b57a04a267e82b91
Validity
Not Before: Jul 27 00:00:51 2026 GMT
Not After : Jul 28 00:00:51 2026 GMT
Subject: CN=56ee38e19d3724e9a4016a55b12e3274dcd884ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:61:43:8e:a7:37:26:08:a3:4e:5e:60:8c:f3:
ee:db:b9:d6:15:4b:a8:43:b1:cb:a4:76:ba:14:12:
84:fa:6a:9d:c0:d9:8a:92:ca:ca:6c:58:85:ae:ed:
6e:f4:f1:a1:41:d4:9b:9a:9b:a9:a7:27:17:75:04:
0c:38:2b:ff:f8:79:9b:62:61:de:47:43:92:35:41:
fc:40:32:7a:8b:25:fa:f6:37:83:fd:39:a9:09:34:
e9:18:fb:8e:2f:5e:1a:d9:a3:d7:02:b6:28:3c:83:
4c:95:73:89:54:e2:23:52:4b:73:d4:6c:c6:28:31:
4f:a9:ea:ef:55:be:36:3c:39:76:4a:11:4c:f1:e2:
09:10:15:04:4f:fd:cf:b4:4e:3d:c8:f5:05:d1:b9:
99:ed:09:c1:01:e5:dd:37:c2:95:76:23:16:58:a5:
bc:40:e6:0d:2d:35:ad:5f:1f:d1:03:34:ba:4c:4a:
0e:87:be:cb:83:9c:f3:07:08:c3:e6:0d:f1:e5:e6:
72:2c:c2:58:58:c5:0e:7a:6e:c0:fe:af:d9:1f:49:
36:b8:d2:74:3c:e0:90:6e:53:d4:ca:4b:c9:72:62:
16:99:9c:7e:c4:0d:96:4a:c4:46:c1:32:18:0b:66:
25:44:c7:75:69:c1:dd:a0:23:af:5a:58:93:f8:5d:
bf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EE:38:E1:9D:37:24:E9:A4:01:6A:55:B1:2E:32:74:DC:D8:84:AC
X509v3 Authority Key Identifier:
keyid:28:E5:6C:68:DC:09:FB:C5:03:C6:B6:71:B5:7A:04:A2:67:E8:2B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KOVsaNwJ-8UDxrZxtXoEomfoK5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:57:01:c9:f9:e8:86:3c:f6:db:bc:a1:69:a3:5e:9c:2d:d8:
75:b6:55:30:b3:df:f7:b6:23:35:b9:6d:52:f4:ab:6b:bd:c3:
36:a1:2d:e9:a4:24:3b:bc:8b:53:09:8e:04:e2:60:9f:50:30:
fa:79:46:db:5b:7c:17:e1:37:b5:29:f5:a9:bb:f4:1e:b2:43:
ed:c5:dd:6a:ab:65:e3:47:03:8f:35:24:e5:e4:0c:d3:ba:fe:
9a:e1:5a:07:92:4a:2c:dc:7a:03:25:fa:5d:76:d4:e8:60:76:
a5:c3:e8:00:11:c8:89:5d:26:ec:00:d5:d6:0c:37:0b:db:f9:
d1:3f:16:3d:95:29:a8:e9:aa:08:2d:9c:ec:e0:88:4f:c6:ff:
18:97:6c:a4:31:31:eb:53:a6:32:df:db:94:f9:51:10:79:d1:
85:7b:bd:56:e5:27:42:68:53:5a:06:d6:34:f8:e6:d4:a6:39:
1d:00:dd:2e:25:b4:40:c1:49:9b:68:88:e3:05:6f:55:2a:db:
51:30:56:9b:6a:9c:51:3a:cb:d7:a9:a8:a8:68:e6:52:18:90:
e7:69:c8:cc:be:6d:ee:b7:46:5c:61:74:61:d9:b9:c6:04:07:
41:d3:3b:cb:35:12:1e:6f:78:21:d8:56:c4:07:07:d5:a5:b9:
b0:fb:67:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:32:45 2026 by rpki-client