Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
File: KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft (raw, json)
Hash identifier: SABTOaf3b5HkGnA0NgrXVya3cAPZllqfiD+pkscvX4g=
Subject key identifier: 0C:0A:61:0A:EB:C0:77:CC:86:DD:25:00:85:81:EB:8D:1E:D3:1C:8A
Authority key identifier: 29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
Certificate issuer: /CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Certificate serial: 019F09CFF4C71B0ACB24B8A017EF84DB1F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
Manifest number: 0A2C
Signing time: Sat 27 Jun 2026 16:00:51 +0000
Manifest this update: Sat 27 Jun 2026 16:00:51 +0000
Manifest next update: Sun 28 Jun 2026 16:00:51 +0000
Files and hashes: 1: KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl (hash: EpBI7XKZS3AQWBFvHwKbhdZd9Smr2FuBNXgwZb7PN7c=)
2: lfbAYKVXMdZ42U9_T9C8OZdlAFo.roa (hash: v7lM7R+6ILWW0k1iy98P/XQH6IMSFCizQ4V8D9n6X0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 13:58:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:cf:f4:c7:1b:0a:cb:24:b8:a0:17:ef:84:db:1f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=292d6b805e11ec38034f07789dcd25d1c17fa01e
Validity
Not Before: Jun 27 16:00:51 2026 GMT
Not After : Jun 28 16:00:51 2026 GMT
Subject: CN=0c0a610aebc077cc86dd25008581eb8d1ed31c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:41:d9:18:ba:93:ab:9b:33:94:c8:41:06:28:
c0:e0:54:49:17:16:83:2d:fd:8a:2d:59:53:c7:be:
2e:ed:a8:10:ed:71:e7:d5:c9:9e:07:e6:57:0d:e4:
60:6a:63:c9:7b:5f:5a:7c:41:38:b5:5e:f7:cc:11:
22:c7:e5:19:bd:fd:7f:3e:0b:d9:16:bb:5e:21:05:
59:90:6d:10:ca:1c:5f:50:01:01:c6:d6:8e:1c:13:
ff:12:af:5b:f7:7d:bd:50:6d:6f:07:47:4c:46:c8:
49:1c:5d:cf:d1:82:43:f1:13:d4:e8:ed:c9:87:8d:
f0:9e:3d:7c:e0:d0:3f:4a:06:53:e4:36:67:a3:ce:
ac:a3:6b:49:10:c3:d3:36:8f:75:aa:a1:b1:9e:53:
90:b8:f2:ad:ef:3f:78:3f:64:2f:31:dc:6a:3f:ac:
fc:d7:15:77:e1:47:c6:51:11:29:0f:e6:5f:7c:e6:
76:e1:dc:54:3f:58:70:7b:5d:47:a3:6b:f6:d8:61:
a5:4d:26:9a:26:e5:8e:68:fa:54:0a:d8:03:e5:61:
1f:15:7a:bd:14:c0:6c:48:1b:de:a6:75:9a:78:68:
56:70:18:dd:be:1e:a6:93:46:22:f6:85:fc:a6:42:
e2:43:4d:77:71:6e:db:27:94:2b:1c:e5:ba:b8:aa:
95:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0A:61:0A:EB:C0:77:CC:86:DD:25:00:85:81:EB:8D:1E:D3:1C:8A
X509v3 Authority Key Identifier:
keyid:29:2D:6B:80:5E:11:EC:38:03:4F:07:78:9D:CD:25:D1:C1:7F:A0:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KS1rgF4R7DgDTwd4nc0l0cF_oB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8b3341-f85b-4c15-a989-510cf26bca65/1/KS1rgF4R7DgDTwd4nc0l0cF_oB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c6:ae:79:c1:f0:98:9f:f8:54:90:f0:4d:6c:88:4c:a3:a6:
c5:f4:33:d3:76:90:16:33:af:e7:dc:fe:16:db:38:ef:52:c9:
f6:a1:28:1b:21:4a:a7:ac:1f:87:46:b2:f7:d6:22:0e:5f:59:
74:0d:8f:49:0a:23:c6:a5:a6:35:20:4f:20:fe:88:c8:25:4a:
d6:36:08:c7:cd:7b:de:da:d8:c4:85:01:00:17:1d:fa:51:c3:
65:7b:93:50:35:e4:a3:28:2c:5b:0d:04:e6:ff:a2:28:90:56:
12:d1:90:c3:84:2a:e4:6c:4d:a4:51:d0:4e:b7:00:68:50:bd:
be:0f:94:c3:33:cd:df:63:b1:ff:c9:ef:79:7e:41:80:27:fe:
d1:0a:92:fd:20:a1:0a:4b:94:0c:49:86:6a:1d:5a:9c:90:45:
a1:eb:68:10:ce:bb:d8:60:18:88:63:f2:72:6c:0a:0e:4e:33:
0a:10:8b:06:af:12:7e:d9:1f:55:5b:dc:c2:9c:69:25:52:81:
03:c1:56:cf:ad:21:35:18:47:2c:04:53:7f:30:03:b1:49:16:
14:9c:f2:8a:b1:cf:85:76:87:30:0d:37:ba:41:6a:55:5d:4e:
7c:21:30:17:af:9d:43:41:08:f5:27:ff:09:e9:ec:3d:eb:da:
84:a7:59:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 18:22:21 2026 by rpki-client