Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
File: KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json)
Hash identifier: T+f+3fYQs7lbXjsksgEraTutPnz1T5/ha2MuOiONT9A=
Subject key identifier: 1F:F8:D1:53:1D:18:6D:30:F4:84:0D:BA:2A:E6:37:3B:6D:98:BA:E5
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 019FD57353B26033725DB35DE41A230EE85E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
Manifest number: 17C8
Signing time: Thu 06 Aug 2026 05:02:12 +0000
Manifest this update: Thu 06 Aug 2026 05:02:12 +0000
Manifest next update: Fri 07 Aug 2026 05:02:12 +0000
Files and hashes: 1: AO06uJHkVshYcEPLGfhX8Uw9gpc.roa (hash: 5SvwdBIYhvyrwzSR8AKYSXgpfbX0MUkDamcTaTo4pOY=)
2: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: XjR6WSUj5Brrb+mWk/kMpp1r3ltnhh2WCjAqW0a+00c=)
3: WM9U0hGxJGDphWFsCWq6RtezmLM.roa (hash: cyewkrvQm5BjotgRNgGfFmYEz1ELODgyWDHv/Kj0w6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 05:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d5:73:53:b2:60:33:72:5d:b3:5d:e4:1a:23:0e:e8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: Aug 6 05:02:12 2026 GMT
Not After : Aug 7 05:02:12 2026 GMT
Subject: CN=1ff8d1531d186d30f4840dba2ae6373b6d98bae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:2c:8e:f5:c1:b7:eb:0b:20:6d:78:4d:5b:
62:eb:a3:f8:b1:f8:6e:01:ea:4b:89:fd:c3:02:59:
0d:23:99:6e:fc:da:2b:76:c4:d0:0a:bb:95:fa:f8:
4e:38:28:da:70:76:2a:3c:86:c9:e2:61:3a:e5:84:
a3:cf:c4:07:5c:7c:0f:18:4e:bc:8b:01:7a:37:45:
20:6d:c5:ca:ce:d7:49:11:2a:6b:f9:d8:63:f0:fa:
b9:fa:19:bb:7c:a8:e9:8a:be:e5:c1:fa:cc:92:52:
d0:92:27:9c:b7:3f:be:73:20:8f:8e:21:fc:09:8f:
e9:4a:f9:ed:87:e3:cc:71:8f:da:ef:36:24:59:90:
bb:b3:f0:1c:be:da:4d:df:be:ac:96:a9:1e:bb:d1:
83:b0:d4:93:02:5f:fb:d3:2c:70:2b:f2:79:c6:d8:
5b:eb:5b:74:7b:ff:4f:2e:a3:c6:bf:25:1d:55:6d:
0a:69:98:e8:db:66:f4:14:6e:ee:9f:dc:8f:d6:74:
87:23:43:f4:ba:b4:6e:c1:93:e7:26:17:34:91:e9:
43:3e:3e:fe:54:72:69:1e:02:47:e2:40:b7:bb:18:
7b:5f:37:f6:55:b1:c6:c5:9b:89:cf:0e:c3:36:d6:
2d:7c:ec:06:4b:5c:a2:c2:3e:6c:39:31:25:ed:93:
bc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F8:D1:53:1D:18:6D:30:F4:84:0D:BA:2A:E6:37:3B:6D:98:BA:E5
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4a:da:d3:e6:58:0e:88:d2:03:00:ca:c9:6e:3d:4c:86:a2:
37:3e:08:ba:e6:44:81:5d:31:27:cc:66:ed:56:ac:00:b1:54:
d1:f1:0f:c4:d1:02:db:d3:ba:6a:f4:31:3f:c4:87:8e:07:67:
89:f6:70:84:8b:c3:46:15:f6:f9:6b:01:b3:d7:cc:3d:30:0c:
18:e8:06:f4:a4:38:2c:42:f4:df:82:f2:53:f0:3b:19:23:84:
de:0c:11:c4:bc:ba:d2:16:4b:91:d3:7f:d7:e9:d8:2c:c0:4b:
15:6a:f9:31:09:b1:fe:4d:e6:fe:c7:df:e3:ea:52:26:b8:4f:
ab:a4:5c:50:87:de:bc:86:4b:66:f5:29:1e:4d:36:90:95:c9:
1a:04:a8:6a:3d:ea:23:93:56:6e:44:b4:07:34:e6:da:82:17:
2d:60:d3:0e:f1:87:5e:56:20:3e:9e:b2:9f:bc:36:0a:02:00:
93:43:89:9b:12:b3:4d:6e:3b:2c:8d:d5:e7:7f:4d:5b:c4:f9:
20:f7:4d:f3:f8:20:82:a8:c6:a5:df:7d:68:eb:5f:7e:ba:59:
1f:79:d7:b7:23:e6:e0:53:4b:aa:9f:59:25:85:6a:8b:f0:59:
09:bb:28:26:6a:7d:24:e0:44:6f:4e:3b:d5:b9:cb:93:b0:2f:
46:52:c1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:38:28 2026 by rpki-client