Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
File: KMID1l3y1lvbzzyINELdq1WjvN4.mft (raw, json)
Hash identifier: 4MHJ1uxhxuk5yMtYCnZ+JtvYdAT6rE+O2xl3aqJDDx4=
Subject key identifier: 14:C6:58:6D:EE:5C:54:AC:9A:CD:6A:3B:F7:D0:2B:5D:30:1A:BF:56
Authority key identifier: 28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
Certificate issuer: /CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Certificate serial: 01A18FE6F03E9842D2E895EB6277D4D8E1DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
Manifest number: 10BD
Signing time: Sat 31 Oct 2026 03:00:38 +0000
Manifest this update: Sat 31 Oct 2026 03:00:38 +0000
Manifest next update: Sun 01 Nov 2026 03:00:38 +0000
Files and hashes: 1: 4Okejz2k1ubGfI-GRgB_ARKBmuk.roa (hash: wHN9epTREmpbGi1iOO1PMq2WQBeGFf6WjNTcLZ9jeLg=)
2: KMID1l3y1lvbzzyINELdq1WjvN4.crl (hash: EnJjlEsWSaplC7T70EPIzfCsOsw6BR+ZLKDFbD/KnfA=)
3: PcKBEnG4Fc83PTLXnIgOvRcy3V4.roa (hash: dksZAzhosBbHaXLsuDmV40VTdGY6aq3NK9xY13PmQvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:e6:f0:3e:98:42:d2:e8:95:eb:62:77:d4:d8:e1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Validity
Not Before: Oct 31 03:00:38 2026 GMT
Not After : Nov 1 03:00:38 2026 GMT
Subject: CN=14c6586dee5c54ac9acd6a3bf7d02b5d301abf56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e0:fc:8f:7d:5c:9f:81:e7:69:3d:77:8f:61:
84:53:7f:73:90:1a:11:24:f7:c5:6a:91:ac:fc:7f:
a6:8d:e3:03:31:b1:65:0b:a8:6b:c6:8b:87:8f:73:
04:33:31:45:08:1a:48:f8:8f:24:a1:f5:56:65:9c:
82:8d:99:ff:01:5b:ad:b7:32:9f:fc:24:29:35:95:
a8:6d:00:b7:29:d2:f4:21:ec:75:92:2f:05:a8:43:
9e:6c:6c:b4:72:b3:42:31:e7:0e:87:54:94:50:49:
82:74:27:98:b5:7c:1c:79:ec:a9:0d:44:2b:6c:68:
15:55:9b:a9:a4:aa:ab:1d:60:3b:34:32:70:97:60:
d5:92:c1:e2:be:22:8d:b0:0a:cf:61:29:97:57:5a:
2d:a6:47:5a:65:ea:4b:69:6b:0d:e5:ed:eb:76:c0:
e3:8c:d2:9c:a0:55:22:2f:6f:18:e1:52:05:11:3d:
18:b6:95:bf:11:9a:f2:a4:5b:c3:ff:d3:d7:1a:9e:
d3:d4:c1:1b:5d:5a:35:f4:e1:02:58:e9:84:a9:e1:
62:98:80:67:3f:6c:1a:7d:19:43:f1:34:81:43:25:
81:c5:f7:d5:86:23:69:2b:50:2c:d5:ce:74:18:cc:
45:01:5c:65:3d:55:99:35:02:ca:d9:96:09:a7:02:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C6:58:6D:EE:5C:54:AC:9A:CD:6A:3B:F7:D0:2B:5D:30:1A:BF:56
X509v3 Authority Key Identifier:
keyid:28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f0:06:49:17:5f:bb:8c:18:84:3a:e1:22:c5:f0:58:de:a7:
bb:ab:e6:d8:56:09:4d:26:41:36:5e:dd:8b:5e:cd:d9:82:a0:
0f:4e:58:19:9f:2b:68:3f:4d:4a:cd:a2:67:88:0b:66:b6:e8:
b6:1a:72:67:47:a1:88:86:ed:ea:22:a1:b6:7f:4d:0a:c5:84:
2f:af:fc:09:8c:c5:62:db:de:e8:cf:73:74:19:39:52:ab:4b:
66:5d:04:5e:f5:f2:a9:e9:87:9c:92:a7:0d:dc:93:cb:44:7f:
47:00:b9:0b:f2:34:62:19:66:13:d7:57:5d:97:7b:4f:74:a9:
98:55:18:83:98:c7:85:44:69:13:6e:76:9c:73:ad:fe:99:92:
d5:71:0c:49:58:bc:49:d4:3a:a9:b3:ee:fe:24:cf:f3:ba:dd:
11:7c:02:92:2d:4a:be:ce:55:34:01:26:84:c6:d2:90:f8:68:
de:93:57:5e:76:fe:22:f5:ef:d0:47:fa:1d:25:23:0d:73:bc:
ab:12:e1:8f:9a:77:6e:ff:cb:28:a2:99:58:11:7f:44:52:e8:
3a:d8:c6:ef:2b:a5:81:e6:e9:6d:f5:fd:8f:47:cb:c8:74:f6:
23:c8:8d:0b:b8:e1:82:38:f1:6b:4f:97:ae:8e:28:34:73:a8:
23:71:10:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:42:23 2026 by rpki-client