Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
File: Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft (raw, json)
Hash identifier: 8dj2/mfuRm9kfaXKk1zEpwdFLNad9Y0ScMTCUXFVGCg=
Subject key identifier: 17:56:60:E3:CE:C3:86:6B:B7:43:91:E4:5A:9F:F8:12:4A:09:D5:52
Authority key identifier: 29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0
Certificate issuer: /CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0
Certificate serial: 01A178F1181192469C7E433E90242C2ED53E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
Manifest number: 0415
Signing time: Mon 26 Oct 2026 16:00:28 +0000
Manifest this update: Mon 26 Oct 2026 16:00:28 +0000
Manifest next update: Tue 27 Oct 2026 16:00:28 +0000
Files and hashes: 1: 6DNwF30LCDUKZspUSvniSglbK78.asa (hash: ct9NJHmgg+w+Ve0ZATSvPFBlaRSn0jlVfWPGuCu05Cw=)
2: Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl (hash: HenfIzgofDBEpx1bVWxuIugRO67vsJt9MyaMysL66D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:f1:18:11:92:46:9c:7e:43:3e:90:24:2c:2e:d5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0
Validity
Not Before: Oct 26 16:00:28 2026 GMT
Not After : Oct 27 16:00:28 2026 GMT
Subject: CN=175660e3cec3866bb74391e45a9ff8124a09d552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3f:51:f6:58:fe:e1:eb:0a:66:96:91:54:2b:
23:23:68:c6:65:6a:34:9f:36:d1:ca:62:b1:ee:e4:
15:aa:34:8e:73:f6:cb:4d:1e:5c:5c:71:10:47:96:
c9:48:4d:3d:e6:f1:84:e4:d1:e2:85:36:58:c7:29:
b5:88:69:e9:2c:6d:b7:52:6f:32:9a:85:51:1d:4f:
0f:72:b2:4e:84:51:7d:eb:ef:0c:29:39:5e:a8:3d:
f7:bc:90:2d:8e:66:50:2b:46:2a:99:a5:d4:03:93:
49:96:5b:5c:c5:45:7f:8c:5d:f9:93:30:70:b3:21:
5c:d9:f2:1c:75:81:63:63:a8:39:d1:82:28:e5:c4:
5f:e1:b0:70:d3:34:d8:b8:ca:d6:10:23:3a:ef:9c:
48:ae:8b:ac:79:80:39:65:ee:e3:71:43:8a:b3:35:
51:b6:19:c9:16:73:84:f9:bd:5e:ed:5f:a9:f6:84:
18:6d:14:06:03:14:c9:a1:4c:01:14:69:35:96:7e:
9b:5a:fc:b0:4f:b4:a0:dd:06:f4:6f:b0:96:c1:e9:
b5:ee:3c:12:84:f8:01:25:4f:bd:e0:8c:06:3c:a5:
9d:f8:8f:22:3f:08:b0:cb:a5:eb:3b:ec:88:53:36:
b5:32:de:e3:9a:b4:8f:07:d4:30:cf:50:ab:10:2f:
52:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:56:60:E3:CE:C3:86:6B:B7:43:91:E4:5A:9F:F8:12:4A:09:D5:52
X509v3 Authority Key Identifier:
keyid:29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b8:d7:97:55:39:d8:84:63:40:95:cf:aa:56:d0:33:e2:a5:
e5:98:48:a9:60:86:d6:0d:eb:14:8d:64:6f:41:80:7f:a9:8b:
1f:5f:5b:60:1e:10:53:0d:2c:fd:66:71:81:a2:6f:91:48:73:
2c:f0:a9:35:ba:22:e4:bc:de:f9:51:8c:0f:14:01:c9:35:e4:
51:40:03:64:2b:e9:3f:7a:1a:a9:76:68:ab:b7:51:db:b6:e5:
e4:d1:6d:7c:0d:4f:15:47:7c:f4:90:35:9f:08:9a:98:7b:73:
41:74:20:54:f5:b2:3a:d4:06:89:2e:d7:1a:b2:09:8c:32:73:
5f:92:41:52:6f:0f:37:7e:03:79:02:be:60:f7:bc:22:19:df:
7b:76:71:26:99:f5:62:3f:ae:90:6a:e3:f9:5a:b6:a4:cb:c0:
a6:e9:2c:27:70:f3:c8:6c:75:ae:ba:6b:d8:d2:06:fd:7e:53:
16:74:a2:b8:d6:08:6c:81:8d:8e:38:75:83:6b:96:23:c2:bc:
54:a8:f4:f4:d7:a2:ab:09:88:d2:13:9f:d8:69:bf:0d:43:44:
bc:8e:c5:81:5d:78:d3:45:0a:bb:63:7d:88:d2:df:a0:a8:c2:
42:2a:08:ae:67:3f:b1:2d:2a:f1:6a:aa:16:b0:67:99:62:57:
b1:b7:f7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:47:36 2026 by rpki-client