Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
File: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft (raw, json)
Hash identifier: 11IlE0p1bnPEsAimQfVtjlntzXvJtrqBKy7w7Rz0LXU=
Subject key identifier: 3E:65:FC:35:D2:FD:03:6D:DD:C2:70:D8:80:8A:00:D7:EC:6D:10:7F
Authority key identifier: 29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
Certificate issuer: /CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Certificate serial: 01A156D3905A576D490777BFDE16B5FB42B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
Manifest number: 0687
Signing time: Tue 20 Oct 2026 01:01:07 +0000
Manifest this update: Tue 20 Oct 2026 01:01:07 +0000
Manifest next update: Wed 21 Oct 2026 01:01:07 +0000
Files and hashes: 1: 77Whh77iKwt1yOOYU4DtYorlBOk.roa (hash: tO7vF8xusHO1O0mKViJ8yyoCaEKBRB4DR9BPRK3Lwnc=)
2: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl (hash: Sb5h1i3aGV2+GVhftGTxU0XLfOBWowPSjs3Elp4teG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:d3:90:5a:57:6d:49:07:77:bf:de:16:b5:fb:42:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Validity
Not Before: Oct 20 01:01:07 2026 GMT
Not After : Oct 21 01:01:07 2026 GMT
Subject: CN=3e65fc35d2fd036dddc270d8808a00d7ec6d107f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fc:40:78:0c:75:21:a2:3d:11:c1:3a:ac:57:
32:ae:ba:14:ca:23:e6:b2:a7:32:79:ce:7b:31:f7:
cc:3c:50:c7:da:a6:a1:1e:58:a7:a1:be:12:13:99:
d4:b4:f2:60:e2:89:fa:7d:86:9b:41:b2:3c:a2:9a:
74:ac:df:1f:f3:e4:79:7d:94:44:5d:1c:fc:94:92:
c3:d2:a1:75:68:cf:c7:e4:ec:0e:6d:d4:66:c6:82:
08:dd:8d:33:b0:41:47:f0:f1:c2:20:16:92:80:aa:
85:75:a7:12:6f:d5:10:1b:66:79:83:da:a9:73:56:
8c:d7:76:5d:2a:4e:6f:03:10:ff:62:8f:8c:0c:ca:
93:f1:50:ab:52:1d:f0:75:c1:09:62:c1:39:c8:7e:
ab:75:aa:38:b4:0e:49:17:4d:c1:d9:72:90:76:70:
a8:03:00:a5:dd:fc:dd:37:eb:0b:3a:77:5a:de:27:
9f:20:9c:87:f7:b0:af:e2:08:74:6f:26:3b:ba:31:
ce:63:61:ab:d2:63:a2:83:bf:06:6a:a9:a8:81:79:
63:8c:9a:96:22:bc:04:1f:ae:78:58:e7:da:c2:04:
1d:e9:86:1d:71:ff:87:7c:7e:bd:0c:61:0e:9b:dc:
4b:38:cd:ae:3e:26:19:a1:94:87:56:ea:32:82:14:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:65:FC:35:D2:FD:03:6D:DD:C2:70:D8:80:8A:00:D7:EC:6D:10:7F
X509v3 Authority Key Identifier:
keyid:29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6d:86:8f:c0:77:9c:9b:f7:04:5e:a0:a6:da:c4:50:1f:66:
e0:b7:f0:bc:29:35:81:b8:32:49:bb:88:23:66:85:83:69:a5:
53:29:8c:c7:f4:8e:95:57:00:59:be:b3:d0:3d:4f:08:61:a2:
1c:a6:02:1e:c8:ff:e5:26:3c:07:fd:26:f6:41:79:35:84:15:
3a:37:2a:2c:36:bc:bb:40:99:ac:50:26:96:e8:cd:78:5d:2a:
5f:9d:4a:42:08:df:ea:b4:e0:fd:03:ac:62:dd:d5:bb:7e:75:
bb:4d:0c:6a:57:7a:fd:28:88:6e:6e:ab:f8:25:63:45:b6:52:
45:c7:3d:5a:c1:7a:be:b4:c7:db:f8:75:9e:df:d9:ab:84:70:
7f:b3:8e:70:49:90:2d:77:09:5f:ba:d7:f4:fd:f1:a2:9a:61:
1a:7e:7e:64:17:4b:74:3a:7b:2a:63:09:e3:7b:a3:7b:b8:09:
cf:87:03:e2:0e:16:7d:1d:75:af:df:e8:2f:5a:4b:c1:39:f5:
b8:33:1d:ec:ae:62:a2:07:84:b3:11:85:83:d9:ec:45:2a:03:
eb:ca:8f:5f:69:a3:33:90:04:79:13:ba:9c:a7:67:77:a8:37:
75:fc:f4:6f:5b:0d:bc:a0:b5:7b:3e:a9:31:b6:1e:78:0e:d4:
2f:e9:41:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 10:06:27 2026 by rpki-client