Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
File: KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft (raw, json)
Hash identifier: KXQs7mJxRiMa7EzjHmW4kaF+r/wV4euTQdhnbbHYG7I=
Subject key identifier: B9:8C:6C:0D:89:42:14:07:C9:0B:6D:77:2F:A1:64:19:33:24:05:C8
Authority key identifier: 28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
Certificate issuer: /CN=2811818f95be6690e8aabc5befa217346abcd574
Certificate serial: 019D12A225015BB0EA965B67EFE40C08B81B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
Manifest number: 0261
Signing time: Sat 21 Mar 2026 23:01:49 +0000
Manifest this update: Sat 21 Mar 2026 23:01:49 +0000
Manifest next update: Sun 22 Mar 2026 23:01:49 +0000
Files and hashes: 1: KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl (hash: uz8XalddKfEeMDg3bhofwxfv9RpvWq57efTor2I1NfY=)
2: cjM0znzLJC2QR0PgnNVfAe1h_mI.roa (hash: niPdw0pZGGHLaXhD+OqWZAWoags/W4iskvjHWI94b6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:12:a2:25:01:5b:b0:ea:96:5b:67:ef:e4:0c:08:b8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2811818f95be6690e8aabc5befa217346abcd574
Validity
Not Before: Mar 21 23:01:49 2026 GMT
Not After : Mar 22 23:01:49 2026 GMT
Subject: CN=b98c6c0d89421407c90b6d772fa16419332405c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:98:98:87:d1:87:c2:aa:70:84:ee:83:17:f4:
92:bd:af:0e:be:91:ca:80:23:7f:34:ff:d5:a3:7c:
ee:bd:3a:8f:b7:36:13:d6:05:02:59:0d:8e:bf:89:
df:a2:46:e6:70:88:8a:a9:13:2c:96:df:fa:00:c0:
0b:79:33:91:34:36:be:95:64:25:f2:56:ce:53:18:
3d:78:23:4a:09:d4:85:02:7b:a7:8f:c2:02:c7:70:
3b:f9:27:7b:3d:81:46:1e:62:6f:43:07:c4:9b:4d:
e2:1e:29:32:03:fb:f0:a9:d4:e4:a5:35:09:e9:95:
1c:2d:ab:be:42:a5:78:e6:ff:ae:ce:08:e5:f4:60:
9f:ce:48:d7:e7:bf:f0:9f:f3:14:0d:ea:6a:73:dc:
39:a0:7a:ec:5b:29:98:31:7f:43:9e:c8:b8:c6:41:
bc:83:ee:1a:b1:2e:3b:b4:34:29:5b:c2:20:e1:aa:
67:4a:fc:0c:dc:bf:c3:fd:1a:86:c5:de:d7:07:6c:
13:d3:31:18:49:41:7b:ca:d8:de:6e:8f:ea:59:9e:
92:e2:81:f9:21:13:88:0a:c8:68:53:2f:d4:7a:5e:
e9:5a:53:2e:58:2b:a1:6c:9f:b1:3a:44:cf:31:d2:
c0:c8:6e:23:94:7f:6e:5f:06:60:58:86:e0:ae:91:
24:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:8C:6C:0D:89:42:14:07:C9:0B:6D:77:2F:A1:64:19:33:24:05:C8
X509v3 Authority Key Identifier:
keyid:28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ef:f5:5a:dd:9c:ce:d6:e7:04:9f:6d:f7:06:fc:53:d8:85:
b4:20:37:98:a7:b5:9c:6a:58:b5:78:8b:7f:3f:58:e1:fd:be:
3a:f1:5e:11:b0:a6:30:6e:ad:9c:54:ce:9d:3c:b3:fa:01:06:
79:85:3d:21:5e:01:e7:41:54:7c:cc:e7:4f:5d:9f:4c:e8:0d:
fc:01:0f:39:00:cd:5b:04:7e:42:82:87:0e:c4:aa:9e:d1:04:
84:9e:48:24:59:55:7d:3b:fa:36:0b:ec:ff:87:e5:e9:80:6d:
bf:92:3d:7c:c5:70:8f:72:75:6b:92:39:fd:56:86:27:28:ca:
9b:c5:02:fb:69:35:e2:6c:30:cf:2e:63:6d:a4:b7:78:ae:c7:
67:1c:72:2d:6f:a3:f6:52:4d:cc:a1:f6:48:82:b1:ec:1f:db:
09:26:b4:26:da:b1:ec:97:22:dc:8a:f6:a3:ae:dd:b0:6f:8f:
01:bd:78:5f:a0:ad:7e:a3:6a:9d:2a:f2:d6:c4:6c:2b:41:24:
2a:cf:ba:8e:82:21:5e:1d:be:fa:81:b6:8d:a0:95:1f:e1:c4:
2e:48:91:6e:74:59:f1:f9:fb:26:f1:57:bf:90:56:46:17:35:
cd:0b:1c:e8:cc:6a:41:e0:ee:12:39:95:be:7a:64:27:0d:9d:
09:2f:75:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 05:34:48 2026 by rpki-client