Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft
File: KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft (raw, json)
Hash identifier: qojp9whx+f5OHYulJ2N67xGYTEPgCOxPWuw8arau9v4=
Subject key identifier: 2B:C4:E0:FD:0A:47:1B:4F:07:78:9A:44:2D:6F:FE:EA:F7:D5:D1:93
Authority key identifier: 28:CB:5F:3F:B9:57:25:1A:AD:4B:A0:9D:0B:AB:73:52:B7:4B:B0:7D
Certificate issuer: /CN=28cb5f3fb957251aad4ba09d0bab7352b74bb07d
Certificate serial: 019D3752A65F7F6A4EEE05FE9AFC49E2C0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtfP7lXJRqtS6CdC6tzUrdLsH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft
Manifest number: 0D75
Signing time: Sun 29 Mar 2026 02:00:56 +0000
Manifest this update: Sun 29 Mar 2026 02:00:56 +0000
Manifest next update: Mon 30 Mar 2026 02:00:56 +0000
Files and hashes: 1: 0d0jGfKX-gxJysHLosjRpYlTW5Q.roa (hash: CvfYQwzjI8vLt2H1NJc+s052pBAhojbFkOv6NxHUB/E=)
2: KMtfP7lXJRqtS6CdC6tzUrdLsH0.crl (hash: TlYIR6OCIL1QT71/fILbqDJRfTGn11kZHYt329Buq2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMtfP7lXJRqtS6CdC6tzUrdLsH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:a6:5f:7f:6a:4e:ee:05:fe:9a:fc:49:e2:c0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cb5f3fb957251aad4ba09d0bab7352b74bb07d
Validity
Not Before: Mar 29 02:00:56 2026 GMT
Not After : Mar 30 02:00:56 2026 GMT
Subject: CN=2bc4e0fd0a471b4f07789a442d6ffeeaf7d5d193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ce:d7:fe:60:26:f8:fd:af:2d:0a:5f:54:db:
84:ea:34:03:1e:d5:54:8e:03:fb:0b:a2:ba:93:eb:
97:41:75:83:b2:5f:20:bb:38:e8:0d:4c:67:9f:c0:
c9:4f:39:f7:e5:d1:3d:64:a2:4f:52:05:43:60:38:
38:ee:df:21:d7:c1:ad:c8:da:d1:31:a8:dc:b5:24:
19:ff:cc:18:61:e8:a1:3c:76:5a:43:ab:c9:1b:2b:
55:32:26:14:79:4e:9f:54:36:15:bb:a7:ca:84:03:
74:45:1c:6d:88:e0:17:ee:f1:aa:0b:31:8d:06:65:
2d:98:ea:4e:6a:ff:67:44:b2:56:39:19:36:c5:25:
74:ef:b1:7b:09:b6:fa:02:38:40:5b:f6:69:58:e8:
78:cc:89:73:12:82:65:ee:69:6d:60:80:23:0c:54:
de:92:aa:3c:9b:16:51:69:ca:b0:27:0c:8b:a0:6e:
f1:bb:1b:11:cd:a2:f4:a3:e4:d9:28:f9:d6:7a:01:
4b:0f:5a:20:e3:8a:02:21:e5:5c:ca:40:53:1d:93:
82:1e:e9:42:29:98:82:4d:19:e0:c3:ec:44:03:e1:
bf:80:ee:27:28:bf:1e:e1:da:d6:9f:3e:ee:73:93:
26:0d:90:fb:48:d2:4a:fe:1f:f3:ee:45:be:5f:d8:
21:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C4:E0:FD:0A:47:1B:4F:07:78:9A:44:2D:6F:FE:EA:F7:D5:D1:93
X509v3 Authority Key Identifier:
keyid:28:CB:5F:3F:B9:57:25:1A:AD:4B:A0:9D:0B:AB:73:52:B7:4B:B0:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtfP7lXJRqtS6CdC6tzUrdLsH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e6632b-1fbf-496f-b355-1536fc78385d/1/KMtfP7lXJRqtS6CdC6tzUrdLsH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:83:0a:88:96:2d:e1:f5:47:9b:fd:02:51:7f:2b:07:68:ae:
15:7f:bb:6d:46:e1:f2:3e:39:ef:15:bf:72:5e:6a:c8:ae:44:
17:b8:31:2d:dc:97:0f:ba:52:19:55:0c:f3:0a:a9:cf:9a:a6:
70:5d:b5:1c:9c:ae:15:7b:8e:94:bf:7a:27:ba:93:e8:e7:05:
7c:22:1d:77:e3:91:4a:e9:70:a7:19:90:9d:12:9f:d4:29:d9:
9a:cb:e7:13:6c:fc:00:94:08:be:06:bd:8f:19:40:e9:c3:89:
e6:26:d7:be:a1:63:32:54:2c:a8:74:0f:94:88:05:8e:9a:38:
2d:de:95:0c:8e:72:b6:60:00:2a:6c:d9:ae:87:8d:86:49:41:
2c:8a:5c:5c:41:e0:17:7a:08:e9:57:30:bf:78:2e:fc:83:45:
20:3f:1a:eb:05:dc:bf:79:c4:ed:4a:38:f4:63:a9:2f:a7:49:
a7:7b:5d:a4:05:0f:a0:7d:52:42:44:3b:eb:22:af:cb:2a:28:
48:e3:45:d2:aa:8b:7e:66:d8:04:0b:fb:1f:5a:ea:4f:c6:dd:
a3:d9:17:ef:ff:ab:06:8f:c3:2c:b6:b7:90:3b:13:ba:4a:58:
ff:57:44:33:51:31:ac:74:c2:48:4d:a7:e0:14:fb:04:99:32:
68:56:1c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:47 2026 by rpki-client