Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
File: KMID1l3y1lvbzzyINELdq1WjvN4.mft (raw, json)
Hash identifier: 9wVx2hVoH80mfmhiiQBB6JNlAkttmXu2obknCIxQAzM=
Subject key identifier: CA:9C:D1:8D:7A:CE:90:76:C8:34:B1:4F:CB:E1:76:DE:4F:54:BA:D5
Authority key identifier: 28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
Certificate issuer: /CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Certificate serial: 019FA1845478A01D21A963592E2604098FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
Manifest number: 0FBD
Signing time: Mon 27 Jul 2026 03:00:31 +0000
Manifest this update: Mon 27 Jul 2026 03:00:31 +0000
Manifest next update: Tue 28 Jul 2026 03:00:31 +0000
Files and hashes: 1: 4Okejz2k1ubGfI-GRgB_ARKBmuk.roa (hash: wHN9epTREmpbGi1iOO1PMq2WQBeGFf6WjNTcLZ9jeLg=)
2: KMID1l3y1lvbzzyINELdq1WjvN4.crl (hash: b1wwG3C4F8ww2RwvCYMkvKWNzzlpm6Oc51Q6KLi6sl8=)
3: PcKBEnG4Fc83PTLXnIgOvRcy3V4.roa (hash: dksZAzhosBbHaXLsuDmV40VTdGY6aq3NK9xY13PmQvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:54:78:a0:1d:21:a9:63:59:2e:26:04:09:8f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Validity
Not Before: Jul 27 03:00:31 2026 GMT
Not After : Jul 28 03:00:31 2026 GMT
Subject: CN=ca9cd18d7ace9076c834b14fcbe176de4f54bad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:78:12:ab:74:ad:a7:40:32:99:20:27:2e:32:
7d:3f:45:52:d0:2b:18:9e:7d:c6:d2:7e:e9:f1:77:
82:36:a3:f2:74:7c:7f:37:62:07:c1:5e:f8:ba:60:
ec:4e:90:88:df:1d:0e:0e:be:7e:f8:eb:c3:03:58:
18:9a:b4:21:ec:5f:dd:46:8d:66:ea:ec:1b:2f:31:
ed:7a:ee:7b:1c:b8:b3:39:ab:ff:e1:ee:60:64:ac:
b1:33:ad:47:ee:e8:83:44:94:4c:75:bf:b1:f0:a6:
55:09:4d:e2:80:6c:65:88:53:2b:5c:46:8c:49:ca:
30:ee:41:71:b0:f6:96:0c:e2:fa:cf:cf:73:e7:ae:
f5:d1:94:50:69:71:73:e5:02:43:58:e8:d9:a6:96:
39:b0:9a:b8:a1:f1:2b:c4:26:53:15:e2:2a:1c:88:
0a:b1:bb:f1:61:43:bf:67:32:70:9b:e1:8c:57:db:
d3:d3:70:d4:18:21:7f:aa:c8:f8:87:9d:2d:25:11:
df:26:33:86:27:b0:13:41:86:0f:22:c5:fa:6d:ca:
8f:a4:3c:f8:1f:29:4d:e4:ab:b0:de:1f:0a:f0:75:
26:f9:70:2d:e0:7c:d1:7c:26:17:c6:f6:bd:04:a9:
65:6f:73:62:b9:de:f4:7a:5a:30:04:26:74:43:1f:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9C:D1:8D:7A:CE:90:76:C8:34:B1:4F:CB:E1:76:DE:4F:54:BA:D5
X509v3 Authority Key Identifier:
keyid:28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c9:bb:d6:4a:57:f0:77:0f:26:b1:a4:74:f6:7b:5d:34:5e:
9c:2e:d6:67:7c:ff:eb:ed:0d:a1:a6:ea:bb:37:0c:9f:13:20:
59:11:60:6b:97:83:54:ed:03:c6:b3:b0:c3:17:08:fd:fc:29:
19:04:c0:53:90:03:c8:df:d0:cb:8d:a1:bd:14:fb:74:10:56:
6e:dd:c1:bb:e8:c0:13:57:92:0b:aa:62:e0:97:ab:34:35:6d:
40:a1:3b:be:c9:ca:61:6b:f2:cc:02:9b:8c:4f:83:31:14:f8:
70:dc:cc:4f:20:b1:02:eb:8d:b4:c4:38:db:e1:ca:81:38:8f:
f2:2e:1a:41:a7:23:bc:6c:62:f5:77:28:93:c5:86:c6:24:00:
aa:74:ae:c0:6a:48:2f:8c:94:1e:93:05:27:28:10:14:29:e0:
58:77:96:66:7c:ff:18:da:f2:22:97:b6:10:44:02:56:fd:d7:
bc:6e:b8:50:47:38:e9:cb:a8:17:be:63:06:51:94:84:f5:f7:
15:66:f8:32:89:d5:97:68:41:cb:fc:e9:0b:72:8f:23:2b:a5:
29:1f:4d:5e:3a:2a:74:83:6a:f5:07:4d:eb:84:91:37:a6:5c:
ca:5f:f5:af:29:17:99:c1:ea:00:bc:2b:64:43:8b:a9:5c:c2:
18:b5:ed:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:46:46 2026 by rpki-client