Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
File: Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft (raw, json)
Hash identifier: /phUnrxw7FuALglPlhYGOht8vHZDxqkIrkr3YgtRgkE=
Subject key identifier: B6:EC:D8:28:23:B0:4D:11:72:7C:70:59:9F:A4:B3:22:3D:1D:62:59
Authority key identifier: 29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0
Certificate issuer: /CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0
Certificate serial: 019CF23A64DA60AD619F7D06C50103D735E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
Manifest number: 01BD
Signing time: Sun 15 Mar 2026 16:00:38 +0000
Manifest this update: Sun 15 Mar 2026 16:00:38 +0000
Manifest next update: Mon 16 Mar 2026 16:00:38 +0000
Files and hashes: 1: 6DNwF30LCDUKZspUSvniSglbK78.asa (hash: ct9NJHmgg+w+Ve0ZATSvPFBlaRSn0jlVfWPGuCu05Cw=)
2: Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl (hash: 5pVm0R64MamXUkstg61gKm7P8IAgduQ1zW9LhrXojmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 15:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f2:3a:64:da:60:ad:61:9f:7d:06:c5:01:03:d7:35:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0
Validity
Not Before: Mar 15 16:00:38 2026 GMT
Not After : Mar 16 16:00:38 2026 GMT
Subject: CN=b6ecd82823b04d11727c70599fa4b3223d1d6259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a6:87:ec:89:16:78:ab:15:d3:b9:bd:b8:75:
60:51:34:12:43:03:7a:a9:11:28:5a:4a:a4:c1:6b:
96:79:7b:29:af:da:24:8a:99:bc:2a:e6:5e:20:65:
cc:3a:19:ae:79:b1:e0:fd:90:31:95:30:46:a5:54:
5a:52:4a:5c:a7:56:11:cb:d2:b0:7e:e6:78:56:b8:
24:6e:05:41:7a:b4:e4:e0:b5:79:8d:95:13:b0:65:
96:fb:e6:df:32:f7:72:d7:d2:f8:09:98:47:f6:1b:
9b:97:19:7d:95:df:31:4f:7d:42:83:78:3a:49:5e:
9b:b4:70:5e:dd:c3:0f:16:e8:f3:0c:7f:43:4c:ec:
d3:8f:9a:f5:4e:73:ca:67:b1:eb:9a:70:ad:b2:13:
ff:54:43:2f:f6:b1:9b:64:49:15:c8:2e:7c:f7:12:
67:2b:7d:e1:1b:b7:13:6a:24:23:91:6a:80:c8:ce:
f3:8e:cd:48:44:3d:12:af:47:d9:a2:81:40:1e:ce:
64:a0:8d:da:5a:22:f4:bb:1f:7e:09:ad:c2:7d:fc:
14:ef:e0:9c:a8:85:de:50:b3:08:dc:6e:77:6f:08:
a4:5e:f7:00:a8:a7:a9:f4:ce:92:ad:98:18:14:94:
89:9b:9a:2c:ef:39:d7:af:16:44:fe:31:f2:ae:d3:
98:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EC:D8:28:23:B0:4D:11:72:7C:70:59:9F:A4:B3:22:3D:1D:62:59
X509v3 Authority Key Identifier:
keyid:29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:05:82:10:80:7b:a1:cb:8c:81:8c:29:27:a2:a4:6f:8a:96:
1b:d1:7a:50:90:f7:d2:26:78:49:64:bc:4d:3a:6d:94:fe:81:
2b:8a:df:8f:60:46:b0:08:32:a0:f8:bc:a5:7f:9d:7c:56:83:
44:b1:69:1c:39:91:1c:c4:c2:8c:9e:c1:d5:79:ca:83:80:dc:
39:25:b1:38:30:fb:ee:75:e0:60:18:14:62:e8:0a:c1:1b:04:
2f:a4:ff:30:3c:6f:9d:7d:78:09:59:db:e9:4b:d5:46:73:88:
67:3f:fa:48:ff:11:d0:ea:cd:21:02:af:f2:c7:e4:91:e8:88:
81:34:19:af:f2:67:bb:89:e9:0c:96:c8:63:96:c3:ab:4e:1d:
b3:e9:89:e5:a8:d5:ea:c1:ec:ca:c9:66:db:12:c6:be:e6:29:
4f:dc:71:b2:da:38:62:fa:a1:80:b5:96:1a:51:d8:50:8d:36:
b4:8e:89:eb:ff:6f:03:49:83:b9:5b:46:63:0d:a4:26:d8:de:
05:59:2f:4e:9e:a7:61:49:c4:5c:ef:01:ce:29:1d:48:5c:a3:
f5:0d:a3:af:23:9c:cd:f3:01:87:d0:79:96:17:05:bf:64:d2:
76:28:52:44:f1:b5:94:c1:92:f6:9d:d8:70:cd:7e:11:c1:e8:
f9:98:20:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 20:02:00 2026 by rpki-client