Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
File: KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft (raw, json)
Hash identifier: XPiByTZtTsNcaa5B9A+Ct+v2k2dDGozW3plwRI0264Y=
Subject key identifier: 29:89:92:AE:83:43:FD:C9:E3:92:5B:1E:40:E9:95:71:C0:26:F3:8E
Authority key identifier: 28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
Certificate issuer: /CN=2811818f95be6690e8aabc5befa217346abcd574
Certificate serial: 019E0DAFAF64B5876EE3932AED6356EF823C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
Manifest number: 02E3
Signing time: Sat 09 May 2026 17:01:17 +0000
Manifest this update: Sat 09 May 2026 17:01:17 +0000
Manifest next update: Sun 10 May 2026 17:01:17 +0000
Files and hashes: 1: KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl (hash: E1OLWqMVjUdbYAzZntX9qd87QXWibF9j4bKb5WeYkPc=)
2: cjM0znzLJC2QR0PgnNVfAe1h_mI.roa (hash: niPdw0pZGGHLaXhD+OqWZAWoags/W4iskvjHWI94b6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 May 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0d:af:af:64:b5:87:6e:e3:93:2a:ed:63:56:ef:82:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2811818f95be6690e8aabc5befa217346abcd574
Validity
Not Before: May 9 17:01:17 2026 GMT
Not After : May 10 17:01:17 2026 GMT
Subject: CN=298992ae8343fdc9e3925b1e40e99571c026f38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:16:91:df:5e:56:da:f5:8a:92:16:fc:05:b2:
b4:a0:31:ea:66:55:cb:5f:60:7a:7e:e4:db:81:ef:
50:c0:4d:24:81:27:03:d7:bb:72:ec:14:3c:25:fb:
12:56:a8:00:af:fa:83:88:40:bb:37:ac:df:7e:e8:
a4:b3:2a:34:9b:63:47:25:58:fa:71:b2:6e:92:7b:
c4:28:50:28:b5:4a:3e:22:62:a8:94:98:df:83:43:
9a:83:bc:1f:04:de:4c:d6:43:4b:cb:ee:9c:5f:1f:
40:e8:7a:45:8d:aa:43:c8:66:4a:cc:da:34:71:fc:
4a:1d:bd:1f:c7:c7:eb:cd:e7:ba:05:95:58:58:5f:
82:73:e2:cb:f0:ad:70:a3:7d:e0:9b:1a:e3:e7:5c:
02:1a:ff:2f:7a:32:34:b1:61:61:cf:d7:64:c1:8d:
27:59:06:c0:38:b7:1d:1d:f8:9d:cf:15:a0:20:ee:
97:36:ea:89:86:d0:25:a0:8f:3b:49:81:1f:d3:a0:
f7:c9:cf:5a:e7:af:b4:fe:f8:85:f5:2c:07:84:41:
d1:de:34:77:32:f4:f7:ef:8d:21:f3:21:e0:95:46:
92:e1:56:f8:86:f8:d6:0e:7f:ec:80:ea:67:07:89:
04:51:75:cf:42:e2:3d:d6:28:39:22:b9:48:f8:c4:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:89:92:AE:83:43:FD:C9:E3:92:5B:1E:40:E9:95:71:C0:26:F3:8E
X509v3 Authority Key Identifier:
keyid:28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:41:1f:58:ba:ad:37:98:d8:0c:ee:00:da:30:7f:56:2e:31:
25:ce:de:55:71:bf:40:02:f6:88:b4:5c:ab:fa:79:60:8a:ab:
c5:b6:20:0e:c2:2c:f0:f5:e7:2d:53:db:12:84:84:21:f2:e6:
42:5b:c2:21:11:55:94:53:39:cd:fd:a0:fc:1c:e1:07:f7:b4:
1b:19:d0:0e:9f:19:99:22:a6:77:36:34:72:6a:f8:fb:c3:1e:
62:c8:5a:55:f7:d4:fe:5c:f9:48:91:a9:27:4d:4d:64:b4:ad:
a0:27:13:df:5e:06:69:e6:50:d5:59:df:35:73:78:fd:f0:db:
79:ed:9c:8e:0e:c0:a2:cf:98:7f:b1:d3:1c:65:1a:99:7d:89:
01:d5:50:8f:7c:cc:6f:d8:b5:42:f3:55:13:cb:48:24:7f:f9:
68:b4:95:b6:77:5d:53:5b:79:83:10:a6:5d:59:72:03:d0:8c:
30:73:df:12:e0:62:3f:c9:11:ec:d0:1a:ec:be:2f:c9:e0:63:
6f:20:af:f3:71:49:da:63:9c:db:64:36:0a:88:a9:81:4c:a9:
84:b7:c7:68:32:81:df:08:f5:49:ce:35:20:db:53:85:72:f6:
2a:2b:85:b2:ea:c0:39:54:35:7b:2a:b7:cc:d8:54:8a:37:cd:
35:f7:6d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 21:22:34 2026 by rpki-client