Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
File: KbQgo4_encPUwgIf0JU9nr27kLw.mft (raw, json)
Hash identifier: H4SHTp3w+ZRXrUMNTOEvGGgL1am/IeLtgjYbcjcAi7g=
Subject key identifier: CB:F5:B7:15:DC:4F:20:47:3A:3A:6A:E2:6D:C8:51:E3:E5:57:8B:B4
Authority key identifier: 29:B4:20:A3:8F:DE:9D:C3:D4:C2:02:1F:D0:95:3D:9E:BD:BB:90:BC
Certificate issuer: /CN=29b420a38fde9dc3d4c2021fd0953d9ebdbb90bc
Certificate serial: 01A06D94887DBDE27D5EC62F2520A717C3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
Manifest number: B2
Signing time: Fri 04 Sep 2026 18:00:45 +0000
Manifest this update: Fri 04 Sep 2026 18:00:45 +0000
Manifest next update: Sat 05 Sep 2026 18:00:45 +0000
Files and hashes: 1: KbQgo4_encPUwgIf0JU9nr27kLw.crl (hash: mA86PQHqWythePzRhabAVG5u8WlB6jd5QlnqCc/YB8k=)
2: omwuLvZPG_OI5FuAKOGoVvhHAhY.roa (hash: j9iA9TG/Xu3J+sOmuPiV21st08l1RRGEXzENpjL0/AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:94:88:7d:bd:e2:7d:5e:c6:2f:25:20:a7:17:c3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b420a38fde9dc3d4c2021fd0953d9ebdbb90bc
Validity
Not Before: Sep 4 18:00:45 2026 GMT
Not After : Sep 5 18:00:45 2026 GMT
Subject: CN=cbf5b715dc4f20473a3a6ae26dc851e3e5578bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:86:9b:d8:b9:02:3b:3f:dd:44:45:c7:fd:
4e:16:97:e1:52:45:2a:eb:3c:7c:22:7f:7b:75:40:
e1:8c:0a:4b:87:3b:3a:30:98:a6:e9:66:87:b1:01:
d5:e3:6a:01:9b:d0:43:4b:11:7a:8d:8b:61:3e:5e:
80:4e:b0:3c:71:fe:ca:c3:9a:97:62:b2:6f:05:6c:
db:e7:86:03:e9:6f:c0:35:3c:38:be:e8:5d:6b:f0:
ab:9a:02:f1:2b:37:52:63:73:6c:e4:99:e5:9e:9c:
39:a1:a1:78:6e:dd:89:23:13:74:11:4f:c3:cd:01:
d0:12:30:e2:7d:9f:ec:09:ff:93:50:3b:8a:0e:7f:
2c:4b:00:cd:f9:57:83:26:0a:c6:e9:a0:42:92:90:
b6:42:0b:e0:8b:5f:d9:24:1e:fb:4e:d7:d5:81:d3:
ae:bb:da:a6:d4:61:c5:9b:e3:a0:24:60:91:39:71:
b8:16:64:91:8a:47:cd:4b:97:a6:a2:8a:17:c5:7f:
47:9f:dc:ed:bd:95:55:26:11:64:64:e9:c4:f2:f7:
c9:c9:86:4f:8a:92:11:d9:cc:9e:ac:9b:c9:c9:56:
c5:8f:d6:42:65:2b:d0:6b:3f:e7:f0:2b:2e:1f:42:
c2:f8:9f:53:d3:04:4a:c7:cf:57:4a:f5:04:48:ff:
bc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F5:B7:15:DC:4F:20:47:3A:3A:6A:E2:6D:C8:51:E3:E5:57:8B:B4
X509v3 Authority Key Identifier:
keyid:29:B4:20:A3:8F:DE:9D:C3:D4:C2:02:1F:D0:95:3D:9E:BD:BB:90:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bb:5c:4e:ed:a4:cb:2a:8c:82:c6:26:db:60:db:2d:4a:ad:
b5:1c:fb:48:4f:97:fa:21:ae:36:6e:65:82:cc:30:0a:25:24:
9a:72:d8:35:7d:f8:d2:95:34:31:11:7d:e4:fc:a7:c9:84:b1:
3d:aa:1d:b9:75:65:e0:bf:21:4a:f0:c3:32:50:15:e1:a9:3e:
f8:3e:0e:95:c5:e1:e0:8e:8e:49:4d:6d:6e:e9:3a:b3:bf:6c:
61:5b:e9:1e:1d:cd:66:72:22:c9:96:d6:67:29:9e:8c:82:b1:
28:96:fe:65:0b:ea:bf:58:2a:1c:8f:65:4e:b4:d8:b7:13:d2:
83:30:14:5d:00:05:fa:d3:0e:47:b0:ed:78:66:a6:3d:b2:b6:
35:ee:c7:07:ec:55:15:de:ee:56:92:0a:f9:01:49:87:5f:46:
c5:5a:4d:53:f6:55:9c:53:71:4d:58:a8:9b:a3:e7:fc:e9:c8:
33:37:41:d3:16:7d:24:ea:71:13:28:5f:11:40:72:b0:dc:40:
db:75:27:eb:63:eb:1a:1d:a3:1f:95:d9:59:75:2c:50:b0:29:
4f:99:5b:b1:41:2a:c1:05:b1:b6:29:9d:c6:b0:75:5e:4b:35:
67:a5:fd:b1:fc:88:72:5e:af:61:21:73:88:b7:24:a6:1b:b2:
af:b4:06:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:44:19 2026 by rpki-client