Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: kW3n7lszX0pVRKTIkC3PvyiocNwc/yuMTM+mhWOK6Uk=
Subject key identifier: 25:01:A8:93:FD:DD:90:62:05:D7:A1:BB:F6:9C:44:C2:3C:B2:F8:89
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 01A002B8F77F71AD1CD1F3A2D5509AC4A583
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 08CA
Signing time: Sat 15 Aug 2026 00:01:11 +0000
Manifest this update: Sat 15 Aug 2026 00:01:11 +0000
Manifest next update: Sun 16 Aug 2026 00:01:11 +0000
Files and hashes: 1: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: l+1M7JkKCX3aMYwASeSj+mOStgGy3T68X1Jr3fyZaf4=)
2: cHwhEhAGxzfypZx4-M1NRLg_x6g.roa (hash: iI8gUBUQGaxZbo8P6CcEli8I0PR4IRfA40i94puh4EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:f7:7f:71:ad:1c:d1:f3:a2:d5:50:9a:c4:a5:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Aug 15 00:01:11 2026 GMT
Not After : Aug 16 00:01:11 2026 GMT
Subject: CN=2501a893fddd906205d7a1bbf69c44c23cb2f889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:19:62:3a:67:48:96:d9:96:49:b8:dd:35:
b3:39:e5:0d:f1:be:94:10:93:12:26:10:19:8d:c1:
40:89:4d:9f:35:64:85:85:84:8c:58:3d:ed:44:42:
ca:e8:d5:38:61:72:e5:89:28:59:0f:1a:4a:93:34:
3f:0f:8d:96:c1:f3:95:a2:60:5a:23:b8:3a:46:68:
8c:92:23:6f:d6:e3:fc:79:dc:67:64:e0:28:b0:ff:
24:09:ec:ba:46:3e:86:dd:1d:47:60:40:c6:d5:e3:
aa:0e:7e:93:7d:3b:c7:a1:48:02:fd:0b:7e:bd:91:
05:d4:5a:e2:d4:32:be:ad:4e:ff:4c:64:d6:77:74:
b4:6f:6f:29:3e:d1:d9:d8:7c:03:1d:ac:4b:bd:43:
22:69:87:f0:7e:5b:d3:e2:70:e6:7e:85:6e:23:86:
24:bf:ff:bf:1d:21:f1:2a:fb:38:f0:ab:2a:3d:29:
1c:96:64:93:de:03:72:9f:6f:43:ec:82:3a:2d:ae:
bb:b1:99:06:8c:1e:b7:2d:73:30:d9:a6:2c:80:d4:
ba:8d:fb:c5:88:47:89:ec:2a:a4:c6:8b:ae:2a:6c:
a1:d1:69:7d:76:c4:41:20:3e:dc:6d:3f:14:72:1a:
98:1f:12:22:8e:83:39:29:4a:a1:ca:2d:ef:74:dd:
05:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:01:A8:93:FD:DD:90:62:05:D7:A1:BB:F6:9C:44:C2:3C:B2:F8:89
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d7:aa:11:51:96:84:c6:e4:a5:3b:f7:6e:13:bc:8d:76:1d:
03:98:01:3b:2c:43:d2:3c:1f:09:02:69:d2:e1:00:24:a5:02:
8e:e8:49:3d:57:22:45:31:a9:a6:e7:f1:c1:71:61:cd:2a:21:
26:54:50:11:61:4a:5d:bb:50:94:31:62:97:3b:a5:03:af:c7:
4b:38:44:9b:b9:ce:63:de:a3:64:cf:98:c8:0d:ec:c5:79:be:
53:31:21:cb:99:f0:0b:b6:b7:2b:09:09:2f:ba:93:59:db:75:
3c:3c:74:7e:53:7e:15:57:cd:99:0a:3b:f7:69:e9:7b:81:2e:
46:6d:3c:9b:e7:11:fa:21:69:4b:c1:e4:d2:c0:b9:df:ea:0d:
fc:f0:45:08:74:e5:4d:3a:ca:2d:3c:cc:b2:5e:58:dd:d1:3b:
54:11:66:cb:2b:ab:ac:d2:f1:55:59:ec:05:a5:86:8a:24:9a:
9e:80:7d:f3:72:f2:79:e5:68:06:b5:6c:13:ba:c8:60:e5:93:
54:45:90:74:fa:7c:75:aa:63:e4:4d:6a:a5:7b:97:fc:73:e5:
2b:13:ee:cb:e9:22:23:8f:a4:4b:c5:ed:e2:dd:f4:7e:70:bd:
32:17:dd:89:76:95:89:58:00:8c:63:88:e8:61:2a:7b:f5:13:
69:b0:2c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:39:54 2026 by rpki-client