
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.mft
File: KJXdKTdOKsyr5NiuxD9Np80SBfM.mft (raw, json)
Hash identifier: hbrLMeMXh/JoQZZEN3US6V8MOyeJCuvLHd9aIQhkPMs=
Subject key identifier: DA:F1:57:3B:73:DC:C5:14:C0:E8:76:E4:5C:A4:98:EB:B7:4E:39:40
Authority key identifier: 28:95:DD:29:37:4E:2A:CC:AB:E4:D8:AE:C4:3F:4D:A7:CD:12:05:F3
Certificate issuer: /CN=2895dd29374e2accabe4d8aec43f4da7cd1205f3
Certificate serial: 019F09D0203008712084C80BFE24599A1C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJXdKTdOKsyr5NiuxD9Np80SBfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.mft
Manifest number: 96
Signing time: Sat 27 Jun 2026 16:01:02 +0000
Manifest this update: Sat 27 Jun 2026 16:01:02 +0000
Manifest next update: Sun 28 Jun 2026 16:01:02 +0000
Files and hashes: 1: KJXdKTdOKsyr5NiuxD9Np80SBfM.crl (hash: 8MhT84D13mxRKe89YzMAraoDT5jfjoJyjBzsyrFEL00=)
2: l29f1pwR90G9hmQYKMzdnPcuWRI.asa (hash: RNcM3GXoyy5iuqkZ/xhWwSNrSjX/280dh47k+2z7ykw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJXdKTdOKsyr5NiuxD9Np80SBfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:d0:20:30:08:71:20:84:c8:0b:fe:24:59:9a:1c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895dd29374e2accabe4d8aec43f4da7cd1205f3
Validity
Not Before: Jun 27 16:01:02 2026 GMT
Not After : Jun 28 16:01:02 2026 GMT
Subject: CN=daf1573b73dcc514c0e876e45ca498ebb74e3940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d2:1a:cf:7e:71:25:de:b3:2c:a9:09:2b:6d:
6c:1d:57:51:89:86:88:e3:b6:40:9c:48:5b:9d:61:
00:47:56:35:aa:5c:f2:d8:e6:68:13:12:19:71:d4:
55:68:92:e4:ce:c9:fa:39:cf:53:e7:03:73:7c:1d:
00:58:99:69:6a:d1:c6:f2:8f:94:a3:80:22:fa:3b:
2c:52:dc:60:1c:af:cf:d4:c8:54:aa:1c:7f:fd:1c:
cc:79:15:15:c8:5c:c4:96:29:4e:e4:7f:ee:65:03:
90:c1:84:56:fb:83:26:f0:a7:36:26:de:04:0a:eb:
87:99:84:a9:9b:fb:70:a3:87:1c:99:df:bc:c4:4d:
3b:45:90:5f:bb:da:e6:d5:74:ce:b7:e6:b4:64:8b:
c2:bb:a4:9f:58:80:6b:43:41:a8:a0:4c:8b:6f:ce:
90:ad:17:a6:82:f1:53:52:50:d8:64:d5:52:0d:14:
31:04:36:a9:b8:eb:14:89:a1:54:67:e8:69:58:ce:
89:fa:85:f8:62:0c:39:24:32:72:2e:c5:3b:06:50:
05:f2:35:87:84:6e:74:78:64:cc:08:73:8f:22:3f:
c9:e3:b2:fb:72:e0:16:ab:4b:97:28:ad:bc:b3:1d:
9b:4d:bb:9e:dc:35:d6:14:2e:9f:c5:fa:59:47:49:
bf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F1:57:3B:73:DC:C5:14:C0:E8:76:E4:5C:A4:98:EB:B7:4E:39:40
X509v3 Authority Key Identifier:
keyid:28:95:DD:29:37:4E:2A:CC:AB:E4:D8:AE:C4:3F:4D:A7:CD:12:05:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJXdKTdOKsyr5NiuxD9Np80SBfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f3883f-c057-41fd-a15e-ac7ef9e84ab6/1/KJXdKTdOKsyr5NiuxD9Np80SBfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:3a:4a:65:95:91:4a:78:63:b5:56:e8:5a:9b:ac:59:de:02:
85:3a:66:10:9a:97:c4:e8:eb:b3:61:8d:d3:5a:ec:58:bb:3e:
81:cb:e0:8c:d9:63:dc:b5:b6:51:23:bc:7b:07:18:55:47:2a:
f3:ae:9a:e0:c0:cb:95:1d:da:22:d7:1b:67:6d:00:6f:dc:cc:
e7:c8:c3:e2:1e:43:20:5b:4d:6a:df:12:a0:77:c5:10:6c:8e:
7e:5e:3a:e9:5b:2b:bc:75:4b:c6:1b:4e:ae:3d:5b:b4:25:d2:
15:46:13:22:67:08:a5:1a:83:f9:55:92:fe:ce:bf:e6:a9:61:
a4:be:50:5a:22:7e:39:93:c2:0f:3e:f8:77:a8:c3:b8:9e:b9:
01:90:73:45:66:53:a9:8c:ba:1e:32:f5:c3:00:4a:f1:c4:ab:
76:0d:3f:35:bf:1b:b1:75:05:ab:e3:b9:47:8a:dd:f4:82:8a:
f3:a7:cd:29:b6:a3:7f:bf:7a:19:03:a7:90:cc:f1:a4:06:ae:
ba:69:f0:ba:a4:66:57:2b:7a:1a:bf:40:c4:3d:7d:db:2d:de:
bf:0f:24:9f:4e:6e:91:ae:6f:09:6c:84:8f:74:67:bf:fc:1b:
2a:e3:b1:f7:48:35:cd:b5:2f:c3:2f:8c:c9:ae:2d:d0:ef:9b:
29:45:f8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 00:57:45 2026 by rpki-client