Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
File: KMID1l3y1lvbzzyINELdq1WjvN4.mft (raw, json)
Hash identifier: hkMXt0/oCiul8QsSMdt87CG84wkapUjoQXE18D+EYQA=
Subject key identifier: BE:0F:3A:B8:3B:88:8F:A4:ED:40:22:E6:86:B0:37:25:E4:EA:84:F0
Authority key identifier: 28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
Certificate issuer: /CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Certificate serial: 019D3789BE48380C8913B39E858CF163DA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
Manifest number: 0E7D
Signing time: Sun 29 Mar 2026 03:01:07 +0000
Manifest this update: Sun 29 Mar 2026 03:01:07 +0000
Manifest next update: Mon 30 Mar 2026 03:01:07 +0000
Files and hashes: 1: 4Okejz2k1ubGfI-GRgB_ARKBmuk.roa (hash: wHN9epTREmpbGi1iOO1PMq2WQBeGFf6WjNTcLZ9jeLg=)
2: KMID1l3y1lvbzzyINELdq1WjvN4.crl (hash: nSHpyHZ5NxG5Ey/Cd3fJwDxbYGqUpXWudrVK3ZiN8Lo=)
3: PcKBEnG4Fc83PTLXnIgOvRcy3V4.roa (hash: dksZAzhosBbHaXLsuDmV40VTdGY6aq3NK9xY13PmQvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:be:48:38:0c:89:13:b3:9e:85:8c:f1:63:da:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Validity
Not Before: Mar 29 03:01:07 2026 GMT
Not After : Mar 30 03:01:07 2026 GMT
Subject: CN=be0f3ab83b888fa4ed4022e686b03725e4ea84f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:ae:6d:9a:05:b8:0d:32:ac:3f:4a:86:4f:
8f:ca:96:31:e1:88:22:bd:17:c4:3b:d1:0d:d5:dd:
3e:04:67:34:c6:2f:a4:0a:99:e2:dd:86:1e:7b:da:
88:d9:3e:c8:06:44:aa:fc:9d:42:06:d0:9f:ca:03:
58:72:8c:d9:bb:2b:23:39:4c:bd:7d:db:99:12:d4:
6c:70:13:03:3d:97:5b:88:af:3b:c2:1b:68:2f:56:
9b:01:b1:79:4c:d6:75:04:82:40:91:0e:a8:12:f4:
90:49:34:c0:32:be:0d:8a:5c:9f:e2:8e:1d:0a:44:
90:5d:34:e7:b2:29:bc:26:65:7a:43:ca:bb:fb:96:
15:47:5b:2a:bf:84:0c:20:ad:50:a9:db:8b:07:71:
6b:3a:89:28:38:d9:2d:c7:aa:8a:66:3a:05:d6:df:
d5:c8:0c:ad:de:ec:81:96:91:ad:17:84:f4:a7:5d:
95:67:86:b8:75:be:a2:c6:30:19:bd:0c:b3:b7:20:
dd:47:55:c0:21:6f:75:14:1c:b9:22:b3:63:91:f9:
77:d4:f0:e9:c8:57:eb:bb:de:99:57:4b:fd:7f:ad:
ec:9d:3c:8d:4a:6c:d8:df:24:24:d6:40:01:2c:55:
7c:bd:a1:32:76:57:52:65:d1:db:2e:34:70:d9:cc:
01:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0F:3A:B8:3B:88:8F:A4:ED:40:22:E6:86:B0:37:25:E4:EA:84:F0
X509v3 Authority Key Identifier:
keyid:28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:e4:a9:38:40:34:d4:a9:bb:a1:b4:eb:04:96:ef:64:63:80:
e1:66:2c:0e:e5:96:17:56:ad:8d:d9:3a:cb:17:a1:d9:81:93:
b1:b5:5e:73:4f:31:82:66:27:e3:87:46:b3:00:a9:0d:25:f5:
b8:b1:00:cc:96:f5:45:43:b9:fd:f8:38:bb:cc:4b:f6:ec:3e:
a3:f5:b7:89:97:17:f9:e2:8e:f5:1f:a7:d5:9f:3b:0d:c0:4e:
73:46:e4:a2:36:f4:f1:4a:09:9a:8d:44:cb:55:6d:a8:bc:b7:
10:d6:e9:a4:1d:e1:b4:3c:77:90:d8:51:e7:38:20:70:3c:7a:
01:4b:d5:54:32:6d:20:46:e8:97:f1:42:6e:c7:93:3d:26:14:
66:26:07:19:16:8a:f8:bc:6a:5c:c4:6d:e3:da:03:8e:7b:f7:
ff:40:74:20:9f:c1:50:35:5e:65:ff:7f:b9:5a:86:c7:53:2a:
18:7c:db:c8:21:1c:7b:a6:d2:65:a7:d6:2e:33:93:c5:df:c6:
5b:64:5b:05:7f:eb:94:cd:07:2b:16:35:c6:b9:0c:4a:5b:d6:
56:65:f6:34:5e:d0:d9:ed:35:81:a5:54:d0:e7:97:b0:0f:32:
bc:ca:a0:c3:49:7f:9f:58:6a:80:ce:14:e2:d6:2a:37:c9:3c:
00:32:d9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:47 2026 by rpki-client