Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
File: KBZKV1f91XJaYIRPKufvc7EHpMA.mft (raw, json)
Hash identifier: O5VORgz2y+mNNjJqUWqe4T1grXm/sJaR16Gc1LMMtSE=
Subject key identifier: F7:7D:81:DD:59:0C:63:B1:D1:5A:B1:BC:2E:DD:7D:E8:8B:97:86:2F
Authority key identifier: 28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
Certificate issuer: /CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Certificate serial: 01A0024A9F37B2F8C88499097C14DB72C0A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
Manifest number: 19FF
Signing time: Fri 14 Aug 2026 22:00:39 +0000
Manifest this update: Fri 14 Aug 2026 22:00:39 +0000
Manifest next update: Sat 15 Aug 2026 22:00:39 +0000
Files and hashes: 1: 744IgXzHRA7i_KaZPXPHUM0eSxg.roa (hash: eqDQW7MUEHWcKNovBhhfViXrkME1qg3sj67Td6hUu3A=)
2: KBZKV1f91XJaYIRPKufvc7EHpMA.crl (hash: BPYRBD+zBhQmGCVRvcc6GhzDn4mHEMCCQFN5ChNaQp0=)
3: Q9Hzj6xYvSgvTk1AgA8SSFlzHjw.roa (hash: zRP8z6fqTAhTFBNH4EqdLJ2KR4AhqadHe/YBKRqTMqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:9f:37:b2:f8:c8:84:99:09:7c:14:db:72:c0:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Validity
Not Before: Aug 14 22:00:39 2026 GMT
Not After : Aug 15 22:00:39 2026 GMT
Subject: CN=f77d81dd590c63b1d15ab1bc2edd7de88b97862f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:61:7a:2d:5c:a2:96:15:36:3e:21:14:2b:
ba:59:e6:00:18:67:71:2c:b9:e8:90:a5:68:0a:74:
4e:48:07:e3:e1:1d:3d:46:43:fe:5f:4e:9b:ba:e6:
f0:cd:02:13:2b:78:4a:13:9d:52:eb:6e:51:58:d2:
d5:91:87:33:00:ac:06:e6:c9:cd:66:0a:b0:19:b2:
2f:38:9b:0e:59:61:f4:ce:05:b2:1e:fc:4c:f6:d0:
8c:d7:4d:b0:94:40:07:bc:b8:30:54:91:76:90:f3:
f4:3f:64:8e:1c:53:bb:9d:53:db:72:0a:ca:84:a1:
e3:ea:3e:3e:88:d4:2a:5c:ff:4e:f9:55:5c:d1:be:
19:b9:f8:d3:a6:d9:f5:6d:ed:dc:46:32:1a:4f:1d:
02:48:9c:6a:fc:eb:fb:1e:e0:65:e2:7a:1c:73:78:
11:64:f5:f6:13:a2:ec:d6:7c:a6:22:c4:18:a9:2e:
06:0b:fa:99:99:5c:5b:be:e5:cd:07:ca:d4:0a:8c:
b1:91:c5:36:2e:38:d0:de:72:80:2f:47:70:00:2c:
f7:2d:c2:49:3e:8d:9d:af:b1:6e:b1:9b:46:a2:87:
16:ab:47:87:ca:cb:eb:20:67:f8:ef:4f:6a:91:0b:
5c:1a:70:aa:f5:89:ce:22:be:01:96:0b:7c:7c:06:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7D:81:DD:59:0C:63:B1:D1:5A:B1:BC:2E:DD:7D:E8:8B:97:86:2F
X509v3 Authority Key Identifier:
keyid:28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:69:df:e7:12:06:26:1b:2d:29:c4:a9:09:65:e7:0f:bb:5d:
a3:0b:c7:e3:c3:dc:5b:9e:4b:51:ff:b6:c2:a1:be:63:40:47:
99:9e:e9:83:09:bf:bb:cb:66:11:ec:0d:d0:1e:fc:39:78:84:
2e:43:fd:0b:63:81:d0:f4:46:1d:25:f1:52:4d:c5:9e:48:8e:
88:4a:98:ea:d4:af:69:a5:75:fe:c5:5b:ac:65:97:f1:b3:05:
c7:66:35:81:94:37:91:e5:1a:8c:b2:b7:14:ee:d5:16:e4:51:
f9:2b:03:fc:7b:35:58:bf:05:11:8e:0e:1d:4f:5f:66:d9:f5:
aa:d3:84:f0:2f:71:a1:2d:a6:f2:68:c1:47:32:cd:26:36:d1:
5d:39:ef:96:15:9a:7d:90:40:db:e1:6e:2b:3c:f3:85:c6:15:
a8:6c:fe:0e:01:54:d8:f2:cd:c6:31:43:f0:8e:29:3c:22:8a:
54:cc:61:48:98:19:2e:08:10:75:f6:90:b9:33:84:e6:e4:4c:
d3:c1:4b:3b:01:ea:6f:82:18:b0:04:4b:82:cd:46:98:aa:88:
6d:25:0f:5c:40:8f:f4:92:fd:4f:c6:e7:35:aa:28:9f:34:d3:
97:4f:ba:77:c6:c6:b7:46:22:81:89:04:cb:d0:c3:f7:f0:34:
d4:e1:9c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:26:48 2026 by rpki-client