Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
File: KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft (raw, json)
Hash identifier: /YL/Mh9s7A+pzP6nz7OluBkGwJ49XRPJkkGbKp2UzDQ=
Subject key identifier: 53:B2:D2:EE:D3:0D:7F:54:67:78:3C:F1:44:0B:47:4B:06:9D:8A:CB
Authority key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
Certificate issuer: /CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Certificate serial: 019D98185089F69F944E4D0DC1B1F0808500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
Manifest number: 18C3
Signing time: Thu 16 Apr 2026 21:00:23 +0000
Manifest this update: Thu 16 Apr 2026 21:00:23 +0000
Manifest next update: Fri 17 Apr 2026 21:00:23 +0000
Files and hashes: 1: 9rvSIJG4GAUEEFzw4LIIEomRjLs.roa (hash: vIaPvb+ycmPmGlSHBmqVI505OuvAOEDswUw9t3/PGlc=)
2: KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl (hash: f7yo7Rreh1Ow3NXfm2fhD8TorxRp54gEM2493Mo8KEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:50:89:f6:9f:94:4e:4d:0d:c1:b1:f0:80:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Validity
Not Before: Apr 16 21:00:23 2026 GMT
Not After : Apr 17 21:00:23 2026 GMT
Subject: CN=53b2d2eed30d7f5467783cf1440b474b069d8acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:68:79:1a:48:c0:bf:8c:13:53:cb:09:f7:77:
65:6c:cd:c3:76:a5:40:79:66:7c:45:50:f3:b8:b6:
20:96:c1:9e:47:a1:28:0b:aa:9d:8c:8f:ed:ec:9f:
4d:24:41:82:de:83:d3:3c:a1:cf:6c:5a:58:45:3c:
a9:8d:76:2f:e1:8b:fb:84:3b:bc:26:42:f8:35:b3:
2c:6d:63:2f:36:0c:7d:b0:5a:95:9c:d4:71:b0:7b:
ad:3a:4f:86:84:9b:77:8a:d9:32:df:23:d3:95:70:
26:11:f3:67:9a:85:1b:44:5b:2f:3a:d8:14:1a:31:
9b:7d:8c:50:80:f5:14:e4:61:9a:9f:43:5e:0a:a3:
fd:9c:76:dc:b2:f1:c3:41:da:5e:05:9b:ae:33:20:
02:e8:81:e5:57:ab:7e:f1:92:a7:5d:6f:c0:de:84:
41:cc:c8:92:59:6a:38:b8:00:f1:25:74:6c:f9:e8:
f2:64:53:86:7e:ac:94:e7:ac:4d:47:ec:a8:99:2e:
d4:00:e1:59:5d:a4:f3:7d:2c:e0:d9:31:ee:dc:f2:
e9:e9:51:ea:e6:dc:d2:fa:71:12:8d:04:b4:4c:8c:
3f:c2:20:56:dd:ca:11:9f:25:93:ee:e4:b6:9c:4d:
93:f6:7c:86:df:ba:ad:7c:ea:0d:e0:2e:da:6f:32:
06:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:B2:D2:EE:D3:0D:7F:54:67:78:3C:F1:44:0B:47:4B:06:9D:8A:CB
X509v3 Authority Key Identifier:
keyid:28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:18:4a:c5:42:f9:1f:cd:84:7c:ab:98:d3:bf:72:2f:89:47:
b0:10:4c:cb:df:09:75:71:52:0d:da:88:c9:59:d1:d3:55:2e:
16:e2:32:1b:99:b1:82:a9:83:b0:fc:44:e3:b7:e3:66:ad:ea:
f1:30:de:14:fb:51:cb:40:27:5b:f0:ac:89:69:42:af:c0:c2:
22:8b:a5:7c:72:a1:63:12:12:bc:23:98:fe:e5:87:0d:49:e3:
a4:d7:80:51:e6:00:cc:0f:32:b0:9d:d5:1e:61:a1:db:e8:6b:
ac:45:d7:d4:74:0d:29:4e:01:c5:2f:5f:2b:f1:68:a8:df:d3:
23:e1:1f:18:c3:f4:04:ea:d8:ef:3e:47:b2:91:27:0d:04:d3:
6e:b8:cc:96:cf:9c:13:7e:97:1f:ed:ed:e0:db:d0:b2:98:ce:
b8:4d:a1:1c:00:f5:19:e6:d0:fe:78:27:6f:75:95:d5:6a:13:
19:7d:81:8b:a7:98:95:b4:83:f4:97:33:75:41:f4:0c:91:88:
01:95:a3:f3:60:20:c3:ff:fa:71:44:4b:5c:21:f6:fd:a6:de:
ef:12:3d:de:95:3f:ff:bf:64:6a:11:9f:bb:cf:c0:75:cf:83:
e6:d8:3a:f6:f5:65:56:49:8d:df:30:65:6d:43:fd:95:2a:64:
59:64:6e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:44:24 2026 by rpki-client