Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft
File: kpbYTmTVXsgSR2-4BvD-daCL-ys.mft (raw, json)
Hash identifier: tAlpvTPNxICtm3xAdGbYTyLUPzvkJ17/ZtJGjDUZO6k=
Subject key identifier: 65:81:9B:B7:5C:22:05:45:52:15:58:A6:78:CC:49:C2:2B:87:22:29
Authority key identifier: 92:96:D8:4E:64:D5:5E:C8:12:47:6F:B8:06:F0:FE:75:A0:8B:FB:2B
Certificate issuer: /CN=9296d84e64d55ec812476fb806f0fe75a08bfb2b
Certificate serial: 01A17C606F21F7B686456C1FFCFFD6879F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpbYTmTVXsgSR2-4BvD-daCL-ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 08:00:57 +0000
Manifest this update: Tue 27 Oct 2026 08:00:57 +0000
Manifest next update: Wed 28 Oct 2026 08:00:57 +0000
Files and hashes: 1: WMTxNqy5dxe24um7JtSXmDnNRnM.roa (hash: TxZKxHcS8Fj+JFe1cwBosTBaRiZeeZ2HacumzoOW+L8=)
2: kpbYTmTVXsgSR2-4BvD-daCL-ys.crl (hash: vpl8KFLJHZ35pxrGeRfmyJtFQCqB9O4TImidY0GW+Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpbYTmTVXsgSR2-4BvD-daCL-ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:60:6f:21:f7:b6:86:45:6c:1f:fc:ff:d6:87:9f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9296d84e64d55ec812476fb806f0fe75a08bfb2b
Validity
Not Before: Oct 27 08:00:57 2026 GMT
Not After : Oct 28 08:00:57 2026 GMT
Subject: CN=65819bb75c220545521558a678cc49c22b872229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:76:f2:79:e9:c8:38:61:c9:98:a9:0b:9a:f5:
e1:3b:51:39:bc:a2:38:a1:1e:5a:58:46:8a:4b:f0:
09:f6:05:2b:c1:f0:43:c1:69:84:c8:25:88:39:25:
ed:6f:a5:8c:3c:5e:8a:38:3e:3f:06:4c:eb:2b:70:
93:eb:65:fc:b9:f7:61:29:f2:4b:65:0d:b7:b0:38:
ea:b1:86:0c:f1:3a:b7:0c:e0:fd:4e:25:79:8c:5a:
48:ff:d8:6c:68:81:eb:5e:17:aa:f6:83:e3:28:5a:
b6:56:42:c7:8f:71:d4:84:a6:ca:0e:ae:b2:db:26:
25:99:ee:61:08:4d:2c:ee:50:81:e1:50:41:52:0a:
0a:7a:66:3e:ab:b9:30:2b:2a:14:b8:d0:79:e8:8d:
a1:87:6f:02:bd:d7:96:f3:2b:99:9e:b0:10:c9:05:
cf:3e:c9:7d:d3:72:28:5f:59:c9:28:a4:d3:e3:40:
0a:af:f9:54:fa:30:0d:8f:31:4f:c3:0e:f3:3c:e4:
3a:1e:20:09:20:93:06:37:ba:80:f0:da:ba:ba:78:
f1:8c:fa:54:a7:8a:ca:5a:11:65:84:9d:a5:fd:2d:
d2:4f:86:b1:ec:a7:88:ee:83:a1:b4:2f:85:be:6c:
40:3a:b8:17:03:0c:9b:15:d5:aa:e6:eb:d3:8c:10:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:81:9B:B7:5C:22:05:45:52:15:58:A6:78:CC:49:C2:2B:87:22:29
X509v3 Authority Key Identifier:
keyid:92:96:D8:4E:64:D5:5E:C8:12:47:6F:B8:06:F0:FE:75:A0:8B:FB:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpbYTmTVXsgSR2-4BvD-daCL-ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a54eb1-33de-401f-935a-f349284509b7/1/kpbYTmTVXsgSR2-4BvD-daCL-ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:14:cb:52:bf:b0:e9:68:b8:18:bb:d6:c9:10:3b:94:ce:5c:
0a:9c:9c:9b:73:ba:48:16:2f:44:c5:83:d7:5d:6f:3e:66:47:
8e:df:2d:7c:11:df:82:0e:00:b4:7a:12:50:e7:ad:f6:93:0e:
08:cc:3d:db:cb:08:f0:1d:64:1d:ab:a9:4d:53:1c:b5:48:a6:
b0:70:21:74:8d:37:23:13:13:3b:dc:92:5e:49:78:e9:be:94:
d1:4d:c8:53:a3:43:e4:ae:63:55:71:2a:1a:1f:18:61:81:cb:
e9:9b:df:ac:07:de:20:56:11:91:e5:7e:ce:7b:e5:e5:94:76:
76:b0:06:c7:86:cf:c4:05:78:08:be:69:67:b3:3a:43:98:5d:
b1:71:ef:e0:27:b1:1a:47:a0:6a:14:b1:33:31:63:9a:3c:0f:
ba:c7:fb:1e:b8:3b:22:0a:24:e0:9e:42:e4:4b:db:ca:13:a3:
3f:86:b4:03:01:33:62:3f:51:32:c7:22:38:90:2b:83:da:52:
db:a3:2a:f0:77:56:a3:19:3b:8a:9d:0e:fc:bf:11:30:71:80:
c8:0c:17:fa:9b:fb:ff:79:61:f3:80:de:e6:4c:f2:0f:25:ec:
13:28:a8:95:95:d5:eb:a6:f1:0c:6e:86:f7:2e:ee:32:0e:61:
70:0a:33:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:33:12 2026 by rpki-client