Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
File: KbOnF2ZaETfpncj60i4-f5jbiXM.mft (raw, json)
Hash identifier: 24Dn95+9nPYWt6pOwFQ4b5iPbWLOqnX5Z1UfVlQla+M=
Subject key identifier: B2:75:81:62:39:9B:13:E8:66:E7:21:EF:70:EC:29:85:45:C5:4E:0B
Authority key identifier: 29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
Certificate issuer: /CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Certificate serial: 01A157AF4FC8C163F1135F15BC4C20C75F92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
Manifest number: 1AB7
Signing time: Tue 20 Oct 2026 05:01:09 +0000
Manifest this update: Tue 20 Oct 2026 05:01:09 +0000
Manifest next update: Wed 21 Oct 2026 05:01:09 +0000
Files and hashes: 1: KbOnF2ZaETfpncj60i4-f5jbiXM.crl (hash: ea5g/5GFWB5r9hhKTXJmpEbdWc56hCzsxlASQPqDveA=)
2: Ty9RnsnK3EDnysBvDikYp04oggo.roa (hash: oWmmAPgiMnRBuVQF4Wy8CU51nd17TmIJOxZ3k8HDTIo=)
3: VmNdh6laZxyVCC_g82mHnoN0sjg.roa (hash: fCIZoEHtubiL+1CEYbmHMAzOgcDhgRWMLUT6hfUtnUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:af:4f:c8:c1:63:f1:13:5f:15:bc:4c:20:c7:5f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Validity
Not Before: Oct 20 05:01:09 2026 GMT
Not After : Oct 21 05:01:09 2026 GMT
Subject: CN=b2758162399b13e866e721ef70ec298545c54e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:b7:d8:e9:31:6a:46:0e:b3:81:00:d9:94:
90:12:0f:d1:ac:a3:d4:56:82:18:2e:f3:de:7e:7a:
2d:c4:fe:90:a3:58:e4:9a:0b:85:8b:a5:da:f7:ad:
67:a2:77:78:1f:51:31:43:f5:8f:ac:b1:fc:37:02:
8a:0b:36:e9:58:4a:3f:b9:39:23:65:93:bb:53:06:
00:18:a1:4e:04:e1:0e:94:92:3b:12:66:fd:aa:49:
de:85:62:c3:25:7c:50:99:ac:a4:6e:fb:d9:e1:81:
72:a5:f2:1f:ba:6b:7b:2f:b7:16:38:de:79:22:7c:
71:2c:d3:32:55:38:b4:7d:d6:4c:b9:70:1a:14:2b:
9c:22:65:69:63:12:87:a4:72:7f:34:ca:94:86:e6:
9f:2f:fd:4d:f9:06:f7:70:01:3a:b8:06:e5:b5:0d:
c4:4d:da:01:88:54:b8:57:a7:8e:20:ee:36:1f:18:
d6:a5:c3:29:f6:48:12:ae:51:e9:83:97:0d:f2:d8:
58:ed:85:42:4b:89:94:32:ad:88:73:f6:31:4f:fc:
da:de:4d:c5:e5:61:f7:9c:47:38:66:d5:09:3e:df:
36:90:7e:3f:7c:46:4d:b3:19:20:74:6c:ed:9f:a7:
71:2b:38:75:fd:5c:c4:b3:0f:64:64:d9:12:78:58:
93:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:75:81:62:39:9B:13:E8:66:E7:21:EF:70:EC:29:85:45:C5:4E:0B
X509v3 Authority Key Identifier:
keyid:29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:88:46:e5:be:2e:f1:af:9a:57:a6:15:b5:a6:4b:5a:17:99:
40:b6:1c:0d:44:f1:45:9e:a3:c6:9a:9a:32:9f:45:da:2c:6b:
fd:36:1d:af:69:70:81:f1:d3:c5:c9:e9:5c:50:68:8d:f0:e5:
e5:67:89:b0:77:08:3d:ba:c7:32:63:3d:a3:35:0a:91:52:25:
b5:87:07:c1:6f:9e:41:15:72:e0:22:04:2e:d8:5e:e3:15:e8:
0b:d5:d1:b8:10:cd:04:ad:ed:5f:39:71:00:10:d3:d7:8c:07:
ca:3f:84:4a:08:b3:1a:24:46:f8:fd:0b:31:96:2e:d7:8a:78:
af:cb:e2:6a:fa:1f:6e:d2:2d:25:3c:f7:16:38:bf:36:57:4a:
16:12:aa:4c:f6:98:16:75:13:50:6f:fa:99:8f:e7:31:68:85:
d3:00:2c:fa:f0:e7:33:c0:b2:04:69:5c:6a:ff:65:4c:ad:33:
a9:f9:9d:e0:dc:61:c6:58:6d:22:97:f5:4a:6b:14:b2:dc:2c:
0b:92:8a:ae:59:bf:39:51:dd:df:fa:d5:25:1b:4c:08:62:60:
30:6f:10:20:43:e2:1f:d2:97:66:26:d6:e7:6d:ce:ba:f4:9c:
cf:4b:05:c7:39:5a:30:82:88:dd:9a:29:b6:f4:91:d0:ac:aa:
14:c4:9f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 09:17:30 2026 by rpki-client