Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.mft
File: KOVsaNwJ-8UDxrZxtXoEomfoK5E.mft (raw, json)
Hash identifier: r3GiTjwExXl5Aw9nnxo9aOrta5YxtAuNxmSbVrybhJU=
Subject key identifier: D5:8E:FF:81:CA:48:47:A3:B6:8C:57:8F:57:CF:CB:87:1D:3A:7B:7D
Authority key identifier: 28:E5:6C:68:DC:09:FB:C5:03:C6:B6:71:B5:7A:04:A2:67:E8:2B:91
Certificate issuer: /CN=28e56c68dc09fbc503c6b671b57a04a267e82b91
Certificate serial: 01A08A8C5E6CD9A3E169A5EFBD807071BF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KOVsaNwJ-8UDxrZxtXoEomfoK5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:00:50 +0000
Manifest this update: Thu 10 Sep 2026 09:00:50 +0000
Manifest next update: Fri 11 Sep 2026 09:00:50 +0000
Files and hashes: 1: KOVsaNwJ-8UDxrZxtXoEomfoK5E.crl (hash: DTMuKqTjJErCMZEg4c2RW5QuRq9rxtDdXCMaQETHchI=)
2: xnOGv6tQRxHcvaugZBbY2118Zzk.roa (hash: O4YWxbU/3fPET1eHT64GDXgkT1S9zSgi4NLlsKzdn9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KOVsaNwJ-8UDxrZxtXoEomfoK5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:5e:6c:d9:a3:e1:69:a5:ef:bd:80:70:71:bf:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28e56c68dc09fbc503c6b671b57a04a267e82b91
Validity
Not Before: Sep 10 09:00:50 2026 GMT
Not After : Sep 11 09:00:50 2026 GMT
Subject: CN=d58eff81ca4847a3b68c578f57cfcb871d3a7b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:91:da:4f:83:f5:9d:8a:2e:22:76:e5:3d:45:
b2:a1:5a:2a:09:fa:d8:78:af:ca:ed:dc:f9:b1:3c:
aa:1f:25:4d:4f:82:09:3b:36:66:39:6d:de:3c:30:
9f:44:03:39:05:c4:58:25:38:ad:fd:b3:fc:c6:70:
7c:ef:54:21:09:19:e3:a0:2b:03:d1:c9:eb:20:12:
02:6d:06:cb:93:a1:42:67:d7:c1:f1:a0:32:82:0d:
67:c1:d2:d3:9b:2d:8f:63:6a:64:e6:7c:08:86:dc:
b1:da:ab:87:66:fe:88:43:0c:98:02:68:59:d1:7d:
c5:c5:60:93:26:c1:14:8d:5e:89:43:48:21:12:2d:
bd:b9:a1:6f:82:10:12:66:48:39:f6:09:66:06:47:
84:1b:2c:90:85:de:17:64:a2:cc:b5:e3:be:a1:ca:
76:47:2d:54:23:1e:23:ae:c3:93:40:60:b4:49:10:
c9:d9:a4:26:0c:b0:8e:25:aa:2a:34:d2:5a:b8:09:
d2:1c:2f:7e:20:4c:9a:56:84:b8:55:dc:fb:f2:ad:
6b:b1:26:37:fa:b5:15:2d:87:0b:e8:03:ff:1e:26:
3a:c7:83:28:33:25:22:6b:70:7d:d6:f8:a5:f8:a1:
2e:30:64:cd:b8:44:f2:76:b2:d9:33:1d:bf:5d:e6:
b6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8E:FF:81:CA:48:47:A3:B6:8C:57:8F:57:CF:CB:87:1D:3A:7B:7D
X509v3 Authority Key Identifier:
keyid:28:E5:6C:68:DC:09:FB:C5:03:C6:B6:71:B5:7A:04:A2:67:E8:2B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KOVsaNwJ-8UDxrZxtXoEomfoK5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/KOVsaNwJ-8UDxrZxtXoEomfoK5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:69:cd:03:56:dd:8d:78:a9:4f:71:1e:91:a3:44:df:94:97:
e5:04:82:fb:f7:57:4e:b4:d0:ff:a0:77:ae:3c:90:36:8a:8f:
18:85:c5:50:a8:c5:ac:65:ed:3f:d6:d3:0b:8f:f1:5a:bc:7c:
be:ce:57:4a:50:a6:b4:79:b0:31:b7:4c:01:c1:63:a4:2c:b8:
89:03:ce:54:10:50:80:e8:a9:2c:bc:d6:bb:c5:43:c6:c9:7c:
29:71:e8:1f:19:81:ca:cc:7e:6c:f2:e5:7b:55:02:b5:14:0d:
82:71:af:08:81:cc:75:1b:5f:2a:3b:64:59:8c:d8:07:41:f0:
22:57:fa:15:36:5f:6b:bc:6f:43:29:0a:73:eb:ff:ff:dd:27:
a8:7b:86:ff:94:27:ea:1c:5e:d5:e8:00:74:44:f5:7c:6b:d5:
88:c1:b5:de:a2:ec:ea:cf:14:4c:df:9d:5a:bc:65:08:5b:38:
0c:06:c4:2a:6f:d0:1f:22:33:92:8f:8b:d4:37:0e:39:e0:64:
72:46:2c:20:9d:29:59:b1:b0:76:29:55:81:37:22:9d:fb:c6:
ac:48:47:b0:bf:56:0c:dc:02:c2:61:58:4c:68:7c:91:88:11:
7b:2c:aa:99:f2:e1:5a:1e:8f:04:df:21:35:7d:5b:f6:bb:d6:
e5:48:f3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:31 2026 by rpki-client