Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
File: KMID1l3y1lvbzzyINELdq1WjvN4.mft (raw, json)
Hash identifier: WWlt1cjcLHarnBv+zZsVu6hwm3Bc6tXruaCJtXjugnk=
Subject key identifier: 39:CE:EC:D7:B8:39:77:22:C8:20:29:5D:0A:8E:9C:A8:94:4E:AE:BB
Authority key identifier: 28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
Certificate issuer: /CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Certificate serial: 01A08B3175C6EA64EAA0482E28B7E00F830F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
Manifest number: 1036
Signing time: Thu 10 Sep 2026 12:01:09 +0000
Manifest this update: Thu 10 Sep 2026 12:01:09 +0000
Manifest next update: Fri 11 Sep 2026 12:01:09 +0000
Files and hashes: 1: 4Okejz2k1ubGfI-GRgB_ARKBmuk.roa (hash: wHN9epTREmpbGi1iOO1PMq2WQBeGFf6WjNTcLZ9jeLg=)
2: KMID1l3y1lvbzzyINELdq1WjvN4.crl (hash: O3QQkCoJWVNB4IkS5tCLvilPV3MNIwW015m0OS5sgss=)
3: PcKBEnG4Fc83PTLXnIgOvRcy3V4.roa (hash: dksZAzhosBbHaXLsuDmV40VTdGY6aq3NK9xY13PmQvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:75:c6:ea:64:ea:a0:48:2e:28:b7:e0:0f:83:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c203d65df2d65bdbcf3c883442ddab55a3bcde
Validity
Not Before: Sep 10 12:01:09 2026 GMT
Not After : Sep 11 12:01:09 2026 GMT
Subject: CN=39ceecd7b8397722c820295d0a8e9ca8944eaebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e2:06:d3:97:0f:21:3a:e4:bc:2f:43:c6:07:
1a:da:ff:bb:91:fc:f6:f6:25:59:7a:30:37:2e:c4:
32:d4:f2:65:55:1e:19:6e:29:7b:f1:51:00:28:aa:
47:50:9f:85:08:15:0a:a0:ea:f9:de:96:82:c3:3a:
ed:83:49:37:be:a4:70:92:f5:7e:81:26:ed:ab:16:
90:e2:34:a7:54:cb:76:ae:9b:93:28:8f:b0:e8:a5:
59:1d:c3:05:d3:9e:cc:2b:75:39:fc:f4:c3:29:82:
4f:bf:bd:e3:8f:ea:d8:76:f8:11:27:06:c4:53:bc:
12:a1:78:d2:df:03:c4:51:da:7b:14:a2:90:de:17:
80:bc:2c:0f:cb:7b:eb:10:2f:bb:5f:d4:8c:52:a8:
2b:a7:40:6c:c5:36:95:c0:77:99:c3:1e:2f:40:c2:
71:18:07:bd:71:6e:3e:2f:79:46:13:c2:c5:68:3f:
1f:87:dc:dc:c8:da:41:c5:be:b0:6b:97:c1:8e:f7:
dc:43:72:3c:52:be:f2:b2:9a:06:57:85:ab:d6:f3:
9c:41:4c:a3:c3:74:f1:41:c5:6b:df:7c:d3:80:f7:
a1:bb:1b:a1:fc:d4:74:09:11:68:30:d0:03:29:00:
af:8a:cb:08:29:03:8b:82:3c:17:b6:4c:0a:c1:82:
fa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CE:EC:D7:B8:39:77:22:C8:20:29:5D:0A:8E:9C:A8:94:4E:AE:BB
X509v3 Authority Key Identifier:
keyid:28:C2:03:D6:5D:F2:D6:5B:DB:CF:3C:88:34:42:DD:AB:55:A3:BC:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMID1l3y1lvbzzyINELdq1WjvN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/49c3e1-1f7f-4e58-b02b-88592043026f/1/KMID1l3y1lvbzzyINELdq1WjvN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b1:4b:08:9b:9e:52:cc:ee:d8:4f:7a:38:dd:39:92:ad:bd:
79:0b:67:31:79:16:4b:40:c5:7b:d9:21:9d:c0:ea:80:8a:0a:
c6:bc:25:4c:7d:9a:9e:54:40:5f:9a:61:f8:a8:55:69:70:99:
bf:66:a7:7c:c2:ac:84:51:02:fd:da:6d:2b:da:b1:0c:c1:5c:
15:3d:5f:9f:5b:5b:8c:c5:9b:9b:6a:bb:1a:2f:09:65:a7:d6:
be:aa:61:7b:ab:f3:13:02:9d:df:fb:21:92:6f:f7:fb:b5:5f:
02:7d:a1:87:0f:3b:7e:33:38:f8:24:3f:6e:4f:e0:0d:e8:d7:
57:6b:9b:1d:5f:57:3a:92:eb:2e:8e:c5:4f:72:10:e2:13:9f:
4e:1e:5c:53:8b:41:df:ad:64:08:eb:56:e4:ac:8d:87:97:8f:
a4:21:a9:44:c2:1b:b9:2a:94:da:64:52:9d:fd:14:35:34:d4:
b1:6d:ec:aa:58:21:2a:5f:34:22:dc:20:82:4d:42:11:f3:45:
89:36:e4:26:fc:98:87:44:9d:d6:46:99:9d:e3:b9:b0:e9:3c:
19:b7:18:a8:2d:a4:fc:89:43:8d:fa:06:c2:7e:2d:1c:08:46:
31:1a:3a:b0:cf:71:a3:46:a1:65:b7:35:eb:5f:99:d4:2a:2d:
bc:aa:7d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:26:33 2026 by rpki-client