Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
File: Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft (raw, json)
Hash identifier: iwDumkw/uCHQDsriN8VuWwA1AW+Hn7sO7vjrjO+JUs0=
Subject key identifier: 29:FF:37:07:09:AC:04:09:71:72:8E:FA:EF:D2:DD:33:F3:7E:6E:94
Authority key identifier: 29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0
Certificate issuer: /CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0
Certificate serial: 01A0C557D99A0AB8ACAD57604FFB0B3942EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
Manifest number: 03B8
Signing time: Mon 21 Sep 2026 19:01:03 +0000
Manifest this update: Mon 21 Sep 2026 19:01:03 +0000
Manifest next update: Tue 22 Sep 2026 19:01:03 +0000
Files and hashes: 1: 6DNwF30LCDUKZspUSvniSglbK78.asa (hash: ct9NJHmgg+w+Ve0ZATSvPFBlaRSn0jlVfWPGuCu05Cw=)
2: Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl (hash: TpMSjbHev/KCuvgTL669YSVMJtl/PNuZjLGnhWMapJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:57:d9:9a:0a:b8:ac:ad:57:60:4f:fb:0b:39:42:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0
Validity
Not Before: Sep 21 19:01:03 2026 GMT
Not After : Sep 22 19:01:03 2026 GMT
Subject: CN=29ff370709ac040971728efaefd2dd33f37e6e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c7:0a:7d:af:d5:c1:8f:63:31:28:e6:2e:57:
53:98:31:bd:5d:fd:c6:e7:ef:09:c3:0d:b0:3a:63:
c7:73:4e:36:98:85:e0:1b:b4:48:0d:d5:e8:b0:a6:
fb:fe:2d:6b:a7:9d:7a:71:53:4d:08:a1:72:79:dc:
24:c2:3a:6e:73:df:ae:80:da:c5:f2:71:c6:10:19:
72:6b:75:e8:83:c9:c5:04:ef:18:e4:88:fe:1a:86:
33:23:90:43:44:5b:86:05:1a:85:62:48:96:5d:c4:
28:f1:17:6b:0c:93:fb:2f:98:03:51:d6:61:03:64:
13:df:c6:85:67:af:4c:7a:8c:2f:23:94:a1:a2:01:
21:c3:3f:97:ff:a2:e6:cd:43:cf:b2:a7:a2:f3:79:
11:27:36:68:b7:aa:ab:5e:7f:02:de:9f:1a:93:2f:
70:47:ba:d8:72:65:da:4d:b0:de:36:8d:36:0d:49:
6d:2f:0b:01:fc:31:19:f2:ff:3d:f3:38:d3:5a:e9:
17:1d:12:47:a2:ba:23:d9:aa:ad:08:6a:ad:60:b2:
bb:9f:ef:78:2d:fc:05:04:f9:6e:1d:b6:2b:2d:bb:
03:c2:32:1f:72:9e:12:3f:73:34:d8:96:56:b8:1b:
a4:48:2c:cc:ab:87:20:ca:9e:43:d7:a9:04:41:49:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FF:37:07:09:AC:04:09:71:72:8E:FA:EF:D2:DD:33:F3:7E:6E:94
X509v3 Authority Key Identifier:
keyid:29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:78:1b:89:86:79:5a:52:72:6f:95:07:69:81:4c:04:f5:12:
fc:7f:79:0f:8b:00:24:e0:3b:8a:02:93:28:a0:2d:49:2e:b0:
4c:e4:a1:ab:55:46:e1:3f:f4:fb:76:0d:d3:78:a4:59:10:82:
b4:4b:b7:63:e3:a9:ab:a1:90:db:b0:a4:61:35:8d:7b:0a:b9:
69:e3:c5:9f:d9:88:ce:1f:60:46:fa:7a:a1:74:5e:e8:9f:43:
33:49:8c:f2:42:85:2a:b7:e3:18:b7:d1:2b:98:27:56:0b:97:
21:50:11:81:ef:ef:ec:b9:e9:85:16:52:b1:3a:03:53:19:e9:
3e:d8:8c:9c:b2:62:fb:53:79:1f:c1:5a:71:7e:3f:14:eb:0b:
55:c1:00:f0:9d:6d:85:c0:c1:2b:64:5a:0a:7e:91:3f:20:6c:
5a:8f:eb:1b:61:18:f2:a0:52:d1:eb:71:2f:76:2e:bc:72:57:
2a:e6:90:7b:e9:0d:60:79:cf:ec:aa:1f:e9:53:24:f0:28:9e:
6f:db:1c:a7:2f:3e:bb:13:9e:9d:dd:36:99:41:3b:23:a1:db:
11:69:34:d2:96:a5:e6:69:39:cd:2a:a9:e2:93:b2:7a:8c:16:
06:89:39:ec:47:45:00:c3:ba:1f:9d:1d:42:bb:d9:88:90:73:
09:00:74:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:43:53 2026 by rpki-client