Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
File: KbQgo4_encPUwgIf0JU9nr27kLw.mft (raw, json)
Hash identifier: ucwlvA3xeMVucQ84u8RI1Iv2H92JgpoETPiM7pP+b0M=
Subject key identifier: 86:AB:6F:2E:4C:AC:C2:03:3B:4A:96:13:EF:27:F1:A2:9E:4A:22:AF
Authority key identifier: 29:B4:20:A3:8F:DE:9D:C3:D4:C2:02:1F:D0:95:3D:9E:BD:BB:90:BC
Certificate issuer: /CN=29b420a38fde9dc3d4c2021fd0953d9ebdbb90bc
Certificate serial: 01A16A90B6E46794C5F6315D5E4C2232A302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
Manifest number: 0135
Signing time: Fri 23 Oct 2026 21:00:31 +0000
Manifest this update: Fri 23 Oct 2026 21:00:31 +0000
Manifest next update: Sat 24 Oct 2026 21:00:31 +0000
Files and hashes: 1: KbQgo4_encPUwgIf0JU9nr27kLw.crl (hash: byDacOOVLVKXQhzGp/trWwwTWYgfI6lAE18MLOtc2c0=)
2: omwuLvZPG_OI5FuAKOGoVvhHAhY.roa (hash: j9iA9TG/Xu3J+sOmuPiV21st08l1RRGEXzENpjL0/AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6a:90:b6:e4:67:94:c5:f6:31:5d:5e:4c:22:32:a3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b420a38fde9dc3d4c2021fd0953d9ebdbb90bc
Validity
Not Before: Oct 23 21:00:31 2026 GMT
Not After : Oct 24 21:00:31 2026 GMT
Subject: CN=86ab6f2e4cacc2033b4a9613ef27f1a29e4a22af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:08:a9:e2:f5:36:9f:11:f3:19:b6:b0:00:d6:
7e:1b:05:ea:9e:5c:49:5b:d1:c8:61:d1:c6:81:1e:
5c:5a:4d:d5:55:22:a7:b9:d4:35:b4:c5:7a:ed:0b:
d8:d1:bb:43:b0:57:fd:ad:25:fc:6f:5d:45:e7:99:
e1:d5:1f:78:64:a1:a1:89:22:96:d5:d5:67:39:f8:
6c:8a:99:43:e5:52:50:f9:ae:36:3e:d9:2c:a0:2c:
8f:24:41:a7:16:0e:de:1d:78:76:b3:50:0a:44:92:
93:3a:ca:fc:9e:47:23:46:94:72:85:97:e5:42:ef:
f0:27:35:02:bc:26:0b:05:dc:fe:df:77:d3:73:4e:
d5:35:d2:e5:34:ef:fb:1a:f1:49:fd:a8:c6:22:10:
a9:52:dc:ef:24:9f:85:28:2b:2e:b1:8e:8a:40:62:
34:95:69:8f:10:da:4e:5c:e4:5d:9a:e5:28:54:70:
53:77:83:e1:17:d1:5a:88:ad:2d:2a:7f:a6:40:1c:
7f:eb:d5:bd:c0:de:d5:e5:af:2b:3c:d6:3b:9d:3f:
5d:cb:3f:06:d2:3b:d5:c1:b1:be:78:fb:64:c0:ef:
e1:21:f7:c9:de:20:d8:b2:d2:47:d8:1d:d4:72:30:
17:32:db:35:a9:14:62:c8:3d:e6:72:39:c8:93:12:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AB:6F:2E:4C:AC:C2:03:3B:4A:96:13:EF:27:F1:A2:9E:4A:22:AF
X509v3 Authority Key Identifier:
keyid:29:B4:20:A3:8F:DE:9D:C3:D4:C2:02:1F:D0:95:3D:9E:BD:BB:90:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9b:80:ff:82:e0:1c:06:b4:ec:43:93:bc:1a:f8:87:ec:bc:
41:fe:d1:32:0f:b8:fd:60:16:95:e9:16:ab:30:07:d4:7c:8d:
2c:f2:c0:c1:6e:15:fe:73:90:06:d5:9d:71:8c:05:21:a6:6c:
60:79:c6:02:c6:7d:b4:17:87:99:2d:e1:e2:9a:f2:51:4e:b3:
e1:1b:ea:07:ad:2d:c6:d0:d3:c7:fd:ce:b6:c7:dd:b7:1e:cd:
14:0c:f7:14:81:80:ca:09:ae:67:a0:9c:2a:77:b6:e6:64:9a:
0c:81:af:62:84:fb:5d:f6:db:f0:06:2f:bd:6b:15:a2:c5:5b:
a8:a6:5c:3a:60:fb:76:9a:a4:50:5b:38:f2:57:ea:c1:95:9e:
00:7f:9d:f2:2d:ba:35:13:51:75:5f:4c:71:d4:e9:e8:f4:53:
38:fe:ff:f5:8c:79:1b:c6:52:ce:19:d5:32:35:88:5b:cb:80:
e2:ab:9b:99:02:a2:94:c0:09:af:07:11:04:7f:39:ef:21:e3:
c0:ef:cc:ce:f0:52:8b:31:37:92:a1:31:e7:f8:f6:10:7b:41:
7d:91:d0:0a:f6:30:ca:1e:33:f0:de:53:75:b6:a8:56:5e:59:
24:b9:75:9d:fd:32:76:4d:fb:bb:da:ce:53:1d:07:d2:25:a1:
da:32:af:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 08:28:47 2026 by rpki-client