Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
File: Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft (raw, json)
Hash identifier: rqgJzO86IUQgiWOx09JTQ5f9qU7Gtgx7pMYfiylCYk0=
Subject key identifier: F4:22:36:6A:60:78:D8:53:AE:40:63:49:E8:74:6D:E8:23:57:3C:A2
Authority key identifier: 29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0
Certificate issuer: /CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0
Certificate serial: 019D9C2C640B56ABCCFB618524E8D21E4653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
Manifest number: 0215
Signing time: Fri 17 Apr 2026 16:00:48 +0000
Manifest this update: Fri 17 Apr 2026 16:00:48 +0000
Manifest next update: Sat 18 Apr 2026 16:00:48 +0000
Files and hashes: 1: 6DNwF30LCDUKZspUSvniSglbK78.asa (hash: ct9NJHmgg+w+Ve0ZATSvPFBlaRSn0jlVfWPGuCu05Cw=)
2: Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl (hash: pPeniAX28wHqy2D9hqm5FtE4EmV6EUOGck252+96I9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:64:0b:56:ab:cc:fb:61:85:24:e8:d2:1e:46:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0
Validity
Not Before: Apr 17 16:00:48 2026 GMT
Not After : Apr 18 16:00:48 2026 GMT
Subject: CN=f422366a6078d853ae406349e8746de823573ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4c:3e:9a:a7:d4:29:c3:03:7a:52:94:69:33:
49:a0:68:8d:82:d7:01:06:23:ce:17:8d:a5:ae:f3:
44:c7:42:88:6d:fa:4e:2c:63:82:77:dc:af:88:44:
74:1b:da:b2:d9:41:89:32:e5:b8:d5:75:91:8f:65:
76:08:2d:ea:60:2c:28:b4:29:83:0e:78:9c:9b:72:
be:35:d4:39:82:39:74:9d:1a:6e:8a:ee:98:35:97:
30:22:5c:a0:a4:57:28:1e:98:48:6d:5e:a6:cb:1c:
19:28:b7:f8:bc:12:b9:0d:52:f0:f3:60:b5:2e:4c:
06:78:c9:fe:ba:10:da:6d:cc:14:82:f0:79:c4:bb:
f0:e9:a2:e5:e6:aa:19:64:00:72:03:8b:23:99:7a:
5f:4e:c4:4f:0b:7d:43:cf:24:4b:3d:61:23:fe:c8:
57:58:fa:4f:6c:64:1d:d6:3e:6a:43:89:1a:d7:be:
b7:9b:37:d8:c7:95:66:c6:8c:26:e2:9e:49:83:eb:
26:05:52:d6:33:43:29:82:c2:f7:3e:fd:8b:38:da:
ce:67:3b:39:bb:81:16:29:52:dd:44:5b:73:e3:8a:
ed:dc:2a:ae:0d:30:6d:87:89:b0:d4:2a:76:20:c6:
c0:92:1a:de:ef:57:4e:78:75:d4:0e:32:09:0d:1d:
13:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:22:36:6A:60:78:D8:53:AE:40:63:49:E8:74:6D:E8:23:57:3C:A2
X509v3 Authority Key Identifier:
keyid:29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:39:24:1f:1a:16:aa:43:b5:f5:1c:ce:e7:10:fa:4b:a0:7e:
75:12:e4:a5:b8:17:84:31:04:41:a9:26:3c:a0:00:a9:cd:a6:
ed:a3:0f:51:50:e0:14:16:46:3f:5f:8a:1d:2d:d3:27:90:78:
12:26:22:d6:5b:0b:e8:f1:04:23:63:07:5d:95:cb:be:f4:74:
cd:e4:de:f5:17:41:ee:c9:dd:e0:f1:40:05:56:0c:44:7c:d3:
4f:19:48:57:f8:aa:f2:c5:0a:2c:98:2e:dd:94:56:a3:3d:d0:
87:4d:01:5b:84:e3:f0:b0:f8:94:7d:ef:05:b0:66:11:b6:ef:
d1:85:ea:d8:49:c9:d5:1a:f5:ba:6d:9a:92:6b:20:7a:b8:15:
fa:c5:a1:21:21:1f:5f:13:4b:46:f7:9c:e0:cd:48:ba:63:6b:
73:94:38:49:aa:22:12:b2:b0:46:a9:b7:7f:15:21:77:20:8d:
db:16:44:3d:ef:0f:fc:31:80:38:30:1f:0f:ab:14:58:3a:9c:
54:0b:32:cf:d5:1f:50:56:27:6b:90:ef:f2:67:99:30:6d:7f:
2a:b5:80:a2:50:23:06:4a:cf:dc:c2:33:b9:5c:8b:e1:02:2d:
52:90:23:83:f5:59:ed:bf:80:2c:f3:82:8b:e8:9e:0b:fe:88:
9e:2d:f0:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLGQLVqvM+2GFJOjSHkZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Yjg3NTViYzUzZWYxNzc0NmJkMjk2ZWYyOGJhOTAwY2Q5
OGZiZTAwHhcNMjYwNDE3MTYwMDQ4WhcNMjYwNDE4MTYwMDQ4WjAzMTEwLwYDVQQD
EyhmNDIyMzY2YTYwNzhkODUzYWU0MDYzNDllODc0NmRlODIzNTczY2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkw+mqfUKcMDelKUaTNJoGiNgtcB
BiPOF42lrvNEx0KIbfpOLGOCd9yviER0G9qy2UGJMuW41XWRj2V2CC3qYCwotCmD
Dnicm3K+NdQ5gjl0nRpuiu6YNZcwIlygpFcoHphIbV6myxwZKLf4vBK5DVLw82C1
LkwGeMn+uhDabcwUgvB5xLvw6aLl5qoZZAByA4sjmXpfTsRPC31DzyRLPWEj/shX
WPpPbGQd1j5qQ4ka1763mzfYx5Vmxowm4p5Jg+smBVLWM0MpgsL3Pv2LONrOZzs5
u4EWKVLdRFtz44rt3CquDTBth4mw1Cp2IMbAkhre71dOeHXUDjIJDR0TdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQiNmpgeNhTrkBjSeh0begjVzyiMB8GA1UdIwQY
MBaAFCm4dVvFPvF3Rr0pbvKLqQDNmPvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2JoMVc4VS04WGRHdlNsdThvdXBBTTJZLS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wNjgyMzEtN2NmYy00MDY4LTg2YjUt
OWFiNGFkOGI0ZmY0LzEvS2JoMVc4VS04WGRHdlNsdThvdXBBTTJZLS1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8wNjgyMzEtN2NmYy00MDY4LTg2YjUtOWFiNGFkOGI0ZmY0
LzEvS2JoMVc4VS04WGRHdlNsdThvdXBBTTJZLS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATkkHxoW
qkO19RzO5xD6S6B+dRLkpbgXhDEEQakmPKAAqc2m7aMPUVDgFBZGP1+KHS3TJ5B4
EiYi1lsL6PEEI2MHXZXLvvR0zeTe9RdB7snd4PFABVYMRHzTTxlIV/iq8sUKLJgu
3ZRWoz3Qh00BW4Tj8LD4lH3vBbBmEbbv0YXq2EnJ1Rr1um2akmsgergV+sWhISEf
XxNLRvec4M1IumNrc5Q4SaoiErKwRqm3fxUhdyCN2xZEPe8P/DGAODAfD6sUWDqc
VAsyz9UfUFYna5Dv8meZMG1/KrWAolAjBkrP3MIzuVyL4QItUpAjg/VZ7b+ALPOC
i+ieC/6Ini3wJA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:59:51 2026 by rpki-client