Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
File: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft (raw, json)
Hash identifier: 8ARM7ZfGU11YJ6guhjO6wChXmZcmB+9D4uEwAuZijMw=
Subject key identifier: D2:04:31:E7:FF:C9:EA:A6:07:C9:FE:19:43:88:94:F6:42:C9:95:CD
Authority key identifier: 29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
Certificate issuer: /CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Certificate serial: 019F837A1CCAD94A96D10701876BB174CD89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
Manifest number: 0595
Signing time: Tue 21 Jul 2026 07:00:45 +0000
Manifest this update: Tue 21 Jul 2026 07:00:45 +0000
Manifest next update: Wed 22 Jul 2026 07:00:45 +0000
Files and hashes: 1: 77Whh77iKwt1yOOYU4DtYorlBOk.roa (hash: tO7vF8xusHO1O0mKViJ8yyoCaEKBRB4DR9BPRK3Lwnc=)
2: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl (hash: zEH8R+7S0HG2x2iAgGgbQMXogK+/uSzJy9nr8kqtHac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:7a:1c:ca:d9:4a:96:d1:07:01:87:6b:b1:74:cd:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Validity
Not Before: Jul 21 07:00:45 2026 GMT
Not After : Jul 22 07:00:45 2026 GMT
Subject: CN=d20431e7ffc9eaa607c9fe19438894f642c995cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:96:44:e3:c5:66:0e:69:f7:a4:45:77:1a:55:
e0:d9:7d:e7:3e:70:c1:94:a4:59:44:cf:8c:78:08:
89:9f:cd:56:cd:c1:c8:98:00:51:02:0e:ea:a2:28:
7f:a5:a9:d3:3a:7e:bd:75:fe:de:d0:b1:2c:b2:ac:
91:4d:20:6b:32:fc:b4:46:49:98:bf:1a:93:e5:0f:
d6:51:85:c2:fa:3a:92:14:64:3a:27:59:fa:1d:fc:
58:6f:da:59:00:e0:96:93:38:f2:d6:f8:7e:64:d3:
49:9c:7d:53:6b:0d:42:85:86:dc:d5:40:e7:29:54:
38:8d:87:2f:fe:f9:54:7b:09:f7:06:c2:b0:cd:5d:
dd:b4:83:41:6a:de:96:11:3b:f8:5b:24:f8:96:a6:
b1:7c:3d:b7:75:10:2c:de:b8:db:67:40:67:67:10:
aa:2d:5b:4e:ae:38:1f:7f:41:39:8a:f5:2e:ed:09:
04:7c:5e:45:0d:ff:99:2e:73:8a:1f:da:70:1c:9c:
7b:e0:67:f3:1e:4f:15:1d:72:50:34:87:d2:b3:12:
7d:bd:76:8f:c1:d5:16:b3:9a:f2:34:25:42:70:16:
d5:7a:2b:65:78:59:bd:a8:81:65:93:ea:ff:4a:47:
6c:1b:ba:d4:0c:d6:17:5e:98:04:6f:d2:c4:e8:92:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:04:31:E7:FF:C9:EA:A6:07:C9:FE:19:43:88:94:F6:42:C9:95:CD
X509v3 Authority Key Identifier:
keyid:29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f8:57:9e:24:10:56:f5:1c:62:c5:5d:74:3c:e8:56:04:d2:
8f:b7:fc:79:2d:e2:93:80:2b:9a:1d:c1:4d:91:ca:8c:00:5c:
28:1c:84:dc:1a:f4:4c:90:34:72:62:8b:29:65:00:f7:6d:20:
a6:49:66:a5:13:83:da:b5:df:67:73:22:c8:e1:d2:0b:fd:96:
8f:28:e0:33:fd:69:88:8e:b8:90:9e:19:f1:84:ed:ad:d2:a0:
59:08:43:5c:f8:6c:2b:08:ca:55:67:ac:60:ef:85:cc:b5:eb:
ee:22:34:9b:a4:b5:9f:1d:99:73:48:49:0a:c7:40:06:dc:ab:
ec:c1:db:13:6d:f1:c0:cf:67:e1:b7:d0:9b:14:cd:50:2b:ce:
f1:e7:f3:ef:c2:12:70:e6:1f:df:c4:c0:90:55:18:c5:3b:52:
87:b8:dd:53:c4:19:60:38:10:6a:83:52:b4:8b:7c:68:9f:88:
82:d4:16:5a:95:83:f6:28:6d:b3:79:5f:ee:4c:3d:61:88:b0:
83:a1:1b:89:2b:10:cf:a2:19:21:9c:47:5f:7b:ea:fd:1a:91:
6b:8e:56:99:59:44:fb:08:61:dc:f0:97:51:66:ff:8c:08:fe:
0e:b4:f8:25:ed:d2:c7:2b:a6:3c:83:17:30:95:c8:16:37:3c:
cf:4f:51:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:51:07 2026 by rpki-client