Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
File: KBZKV1f91XJaYIRPKufvc7EHpMA.mft (raw, json)
Hash identifier: s1C+/Ie8FFnYDVNpXbhroHTDpFWTp9O7n3qNz/n2csk=
Subject key identifier: 79:82:B6:B4:D5:62:2A:1F:90:33:9F:9C:94:0D:39:D9:EE:06:70:F6
Authority key identifier: 28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
Certificate issuer: /CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Certificate serial: 01A15A0B755F7539E7FEEDEF68BCCC9B7DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
Manifest number: 1AB1
Signing time: Tue 20 Oct 2026 16:01:02 +0000
Manifest this update: Tue 20 Oct 2026 16:01:02 +0000
Manifest next update: Wed 21 Oct 2026 16:01:02 +0000
Files and hashes: 1: 744IgXzHRA7i_KaZPXPHUM0eSxg.roa (hash: eqDQW7MUEHWcKNovBhhfViXrkME1qg3sj67Td6hUu3A=)
2: KBZKV1f91XJaYIRPKufvc7EHpMA.crl (hash: lkJGJpO1DD8zZSP1v4XmBjnMocidvnvRu3j3tXlV6nY=)
3: Q9Hzj6xYvSgvTk1AgA8SSFlzHjw.roa (hash: zRP8z6fqTAhTFBNH4EqdLJ2KR4AhqadHe/YBKRqTMqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 16:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:0b:75:5f:75:39:e7:fe:ed:ef:68:bc:cc:9b:7d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Validity
Not Before: Oct 20 16:01:02 2026 GMT
Not After : Oct 21 16:01:02 2026 GMT
Subject: CN=7982b6b4d5622a1f90339f9c940d39d9ee0670f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:04:62:aa:e3:13:36:aa:b2:a4:85:23:54:
05:cb:e3:6f:0c:00:fc:47:d1:4d:8b:86:a2:d4:d4:
18:c9:77:6b:e9:8c:2a:fe:b9:1d:db:ae:e2:5f:f2:
16:ad:ac:2a:9a:73:3b:c4:75:79:da:91:74:d2:68:
39:1a:48:f3:65:1e:da:1c:2e:9b:a5:e5:4d:90:4e:
a1:ca:19:62:d2:a4:9d:3c:f3:5e:f0:2d:d7:d4:44:
92:d2:b0:d9:6a:ef:26:fb:61:03:c8:1d:7d:b5:1c:
91:10:64:40:9a:99:46:55:4f:3e:be:6f:8f:d1:63:
48:d1:af:2d:2c:a9:38:d3:3f:4c:5b:2f:1f:57:99:
d5:3e:12:c1:60:da:42:79:01:e8:07:c0:9c:41:17:
04:ea:41:d7:5f:d5:bd:dd:ec:bd:fb:85:4d:ce:fc:
d3:6b:34:71:37:35:49:8d:92:f3:2e:a2:b1:71:3f:
1c:4d:b4:67:56:c8:47:eb:5d:ae:72:11:d9:54:fa:
f2:57:46:c7:2d:3c:26:7b:eb:90:0b:d6:7e:70:6a:
31:e8:cb:68:33:f6:68:72:37:57:f2:9b:ee:57:2f:
e2:eb:8c:a6:fc:fb:f7:57:50:de:94:c2:f4:e9:59:
c8:6c:7e:13:b6:ea:46:43:15:75:e9:48:49:c0:99:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:82:B6:B4:D5:62:2A:1F:90:33:9F:9C:94:0D:39:D9:EE:06:70:F6
X509v3 Authority Key Identifier:
keyid:28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f7:3e:60:cb:c0:9d:47:89:54:6e:46:55:11:5b:ff:bd:4a:
2b:e3:fb:2c:0e:44:21:d2:64:a4:37:ff:d2:ad:61:d1:56:62:
3a:3f:2c:af:e7:c1:3f:78:83:27:84:df:30:34:91:0b:47:48:
73:33:e9:d4:ac:4e:04:92:80:84:7b:32:21:49:ec:2f:a0:bc:
80:9e:bf:53:95:9e:86:17:ec:0d:0f:a0:4b:50:32:b7:e0:39:
46:4c:62:5c:23:16:12:78:f8:d7:11:f1:dd:5a:77:f7:9a:10:
97:2b:9d:b4:44:9c:ca:50:a4:1f:67:84:93:38:2d:2f:a5:5c:
6d:16:39:43:9e:bf:55:1a:cc:22:7c:13:6c:59:4b:5b:03:d8:
73:5c:a8:d5:86:f2:ff:39:b3:09:17:6a:36:27:64:1c:46:58:
6c:c0:9f:74:bc:68:43:22:40:cc:bd:73:53:71:86:69:3b:fd:
d8:7e:f1:8b:60:52:5e:03:0a:3c:bd:80:5d:ec:fa:2a:bf:03:
f3:10:6f:b6:ce:15:e2:ce:a8:d7:b3:97:cd:95:0d:b4:6f:84:
96:44:20:92:9e:1b:aa:c7:6c:1d:2e:a3:a1:f5:01:96:01:a6:
3e:d9:0f:36:0e:9b:b6:f7:62:6e:f9:2b:77:5b:12:a5:be:b5:
32:a9:7a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:50:09 2026 by rpki-client