Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
File: KIBHSpYWHd4pQs-58YVsL_yICQQ.mft (raw, json)
Hash identifier: P6DEe1+cCiDkkcsDL+voaZK66XXVglV1y7jZFEgrjks=
Subject key identifier: B2:BA:3B:93:4C:05:AB:E5:FB:D9:64:D2:50:E1:9D:84:84:1E:60:76
Authority key identifier: 28:80:47:4A:96:16:1D:DE:29:42:CF:B9:F1:85:6C:2F:FC:88:09:04
Certificate issuer: /CN=2880474a96161dde2942cfb9f1856c2ffc880904
Certificate serial: 01A160446F34BDAB3FFED7864BEE3947D884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
Manifest number: 0674
Signing time: Wed 21 Oct 2026 21:00:59 +0000
Manifest this update: Wed 21 Oct 2026 21:00:59 +0000
Manifest next update: Thu 22 Oct 2026 21:00:59 +0000
Files and hashes: 1: KIBHSpYWHd4pQs-58YVsL_yICQQ.crl (hash: JMMRvPDRrzT2m45GS4m2dpnlUe+64x1qF3msYZreN54=)
2: p5OtBuJ_H7AvfUmYp0Nby5w6BSc.roa (hash: oRePnKuJGEJuRAGyqz3spXqznhrS2YOXLr+XXfpc3VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 18:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:44:6f:34:bd:ab:3f:fe:d7:86:4b:ee:39:47:d8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2880474a96161dde2942cfb9f1856c2ffc880904
Validity
Not Before: Oct 21 21:00:59 2026 GMT
Not After : Oct 22 21:00:59 2026 GMT
Subject: CN=b2ba3b934c05abe5fbd964d250e19d84841e6076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b3:d8:30:1d:1c:59:e4:5f:44:25:c3:27:f4:
b3:b5:83:f7:7b:59:8b:99:50:50:c8:9b:d9:8f:08:
4f:54:55:6e:8e:fb:0f:e8:25:d6:3c:6e:a3:aa:29:
bc:8a:aa:d5:e6:15:64:e0:fe:54:0a:02:2a:ce:1c:
d0:3d:5d:1c:e9:a1:c5:cf:38:8d:a5:63:49:b9:e3:
e1:0e:d8:54:e6:ca:f6:be:ff:f0:89:0d:96:0c:ea:
be:29:cb:2f:2d:cb:54:37:7f:de:ff:99:e6:82:eb:
c1:be:e4:7d:86:c3:8c:d8:8d:57:66:26:da:f5:3d:
6d:84:7b:3c:ae:11:5d:ef:33:f5:8a:5a:bd:69:e5:
06:73:8e:bd:12:cc:52:ee:10:be:46:25:eb:5b:b3:
f3:50:f7:18:d2:af:1b:52:fe:f5:37:7a:e7:8e:11:
b5:bc:19:50:d0:b3:03:12:83:53:76:3c:eb:00:c3:
7e:ee:7c:ca:c4:66:62:88:f2:38:fe:1c:5b:3e:03:
e0:d9:56:d0:47:71:f1:a7:a4:17:97:05:b4:7d:4c:
09:67:1a:dd:15:0b:fa:ae:de:41:1c:20:27:db:d5:
56:bc:41:d6:36:84:18:4a:3f:46:de:38:84:f1:83:
83:c8:2f:a5:a6:eb:5f:1f:3d:ec:86:6b:2a:34:e9:
25:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BA:3B:93:4C:05:AB:E5:FB:D9:64:D2:50:E1:9D:84:84:1E:60:76
X509v3 Authority Key Identifier:
keyid:28:80:47:4A:96:16:1D:DE:29:42:CF:B9:F1:85:6C:2F:FC:88:09:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5f:1e:32:e8:ab:4d:4a:b4:80:1e:90:d1:c6:f3:87:c9:54:
fb:76:24:01:8a:ab:e4:de:3b:94:ef:a0:ed:d1:95:50:6d:40:
40:a5:22:f8:0a:3e:9c:43:f1:f2:a5:d7:1b:44:f8:2a:bd:d2:
63:e3:4b:7a:75:ff:3a:aa:0f:57:29:df:98:29:ee:ea:1c:e2:
81:6c:bd:df:fa:6b:e3:ab:73:92:3d:69:6a:9d:cd:bd:18:3c:
96:97:d8:97:59:68:84:80:94:68:f4:7d:9e:ea:8c:83:c6:66:
d3:09:e3:c1:cd:97:e1:be:74:1a:e5:05:4a:c6:6c:73:16:dc:
24:ff:e0:c2:6f:e9:41:1e:7d:79:25:d4:a4:de:f3:14:a9:ea:
39:33:ff:c0:4b:64:09:dc:57:1f:1e:73:a4:01:a4:54:53:fe:
18:c9:da:b0:4b:f8:7c:e2:f9:06:74:1d:b0:9d:b9:9b:c4:ad:
b5:10:fe:12:33:95:93:e7:35:0f:fd:6a:9e:c8:09:83:53:51:
02:96:52:5c:b6:c5:da:b4:1b:75:6f:82:30:50:da:e0:f6:da:
31:e8:ee:5e:a8:7f:e7:be:31:63:a8:27:8c:8e:b2:c3:d0:60:
64:49:f6:5d:7d:d9:97:26:70:d9:0e:ad:65:3d:f8:b5:75:c3:
cb:3e:32:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:19:14 2026 by rpki-client