Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
File: Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft (raw, json)
Hash identifier: oTKirLflG/+IIvw4vV74U63ZsMveng+m8eZGv5BpfsY=
Subject key identifier: 84:94:6A:6C:A0:8C:26:C6:8B:C8:42:17:17:72:20:8B:8A:57:70:F4
Authority key identifier: 29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0
Certificate issuer: /CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0
Certificate serial: 019EBFC8E529556884230AD625C162CB9401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
Manifest number: 02AC
Signing time: Sat 13 Jun 2026 07:01:14 +0000
Manifest this update: Sat 13 Jun 2026 07:01:14 +0000
Manifest next update: Sun 14 Jun 2026 07:01:14 +0000
Files and hashes: 1: 6DNwF30LCDUKZspUSvniSglbK78.asa (hash: ct9NJHmgg+w+Ve0ZATSvPFBlaRSn0jlVfWPGuCu05Cw=)
2: Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl (hash: /QE6KPkVKElYXJFgwCBi+ggigDmoLO6RpIn5jfhoAEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:e5:29:55:68:84:23:0a:d6:25:c1:62:cb:94:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0
Validity
Not Before: Jun 13 07:01:14 2026 GMT
Not After : Jun 14 07:01:14 2026 GMT
Subject: CN=84946a6ca08c26c68bc842171772208b8a5770f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:cb:02:04:8e:cb:b1:78:b0:2a:f5:8c:0c:
de:65:9d:bf:15:78:a4:f0:84:77:c3:7a:8e:da:e7:
3d:67:6e:87:62:2b:cb:5b:9d:57:23:cc:dd:c5:ea:
fc:5b:8e:a8:95:a2:61:88:f8:33:9c:2c:2c:7e:2e:
5c:19:3f:72:f2:13:e8:9e:db:2e:2d:df:62:fa:f4:
e0:2d:ea:98:54:1e:78:b6:b8:15:02:0a:bf:09:ba:
93:52:f7:63:b5:db:53:e8:72:c0:d7:a1:05:04:27:
1f:9f:98:7e:35:f2:43:1d:66:82:c5:e5:34:9d:a7:
4b:29:16:c0:cc:31:a8:11:a2:60:4c:34:67:5a:e7:
3d:c0:ac:50:bd:6f:b4:38:a7:27:45:c8:b8:17:61:
c1:bd:4c:d0:f3:a2:e1:12:a2:f6:c0:f6:17:ec:89:
82:52:40:9d:7e:4b:18:7f:75:bb:7e:7d:49:91:94:
70:a0:03:34:a9:88:41:ce:69:f9:d5:29:03:e8:3c:
2d:72:66:b5:e6:ee:8b:06:bb:d7:b0:b8:ba:5d:5b:
89:34:fb:a1:81:bd:c9:39:bb:52:8a:6e:cf:a4:68:
68:66:65:bd:40:1f:aa:0f:cb:dd:11:07:83:bd:d9:
c4:76:06:ac:e1:11:b5:cb:ee:ae:9b:3e:3e:c0:d6:
dc:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:94:6A:6C:A0:8C:26:C6:8B:C8:42:17:17:72:20:8B:8A:57:70:F4
X509v3 Authority Key Identifier:
keyid:29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b8:d3:36:e3:68:27:1f:83:bb:bd:88:71:dd:6a:c3:bb:4e:
8d:50:b1:44:6d:90:ef:05:67:57:d4:e5:eb:4a:ce:24:c5:f4:
de:a8:36:c3:cb:a7:52:2e:95:3c:6e:8e:20:b1:21:fe:b2:ad:
1e:35:c1:e8:2b:3d:2d:82:4a:45:31:e9:9d:2d:ad:88:39:ab:
49:3e:e9:18:b4:1a:65:84:3f:a4:52:22:5b:1d:79:bc:f7:bb:
32:83:1f:45:32:89:e7:4e:53:eb:49:da:ab:61:5e:9e:b1:21:
d7:25:ed:d2:4e:a3:d0:51:a0:ed:8b:c7:b3:ae:75:c8:98:0b:
6e:be:f4:39:09:96:16:4b:93:fe:41:cf:a5:32:0c:f5:67:ca:
6c:2d:56:39:61:0f:e8:98:a1:43:d0:03:00:45:e9:f2:1c:8f:
78:51:87:de:5d:0a:0d:81:d6:15:e1:c0:f3:4c:7b:70:bd:6c:
2f:55:cf:a2:af:47:63:25:9d:a0:a2:be:20:90:b0:30:60:33:
50:c0:38:70:71:98:2d:ac:71:af:26:66:45:e8:04:7f:ca:0a:
f9:90:70:8f:d6:c0:43:4d:c7:b5:5e:8d:fa:b5:58:af:13:b7:
e9:50:3f:c7:87:94:bb:47:5b:11:89:4b:9f:51:89:3e:07:c3:
16:64:03:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:05:32 2026 by rpki-client