Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
File: KbQgo4_encPUwgIf0JU9nr27kLw.mft (raw, json)
Hash identifier: ti1VTTeYdPZjzIynxFJN0U5JMjhUZgv4blTs98vqc+Y=
Subject key identifier: 7F:09:27:AA:81:9C:FF:23:3C:F9:FF:D8:9E:85:70:CC:F9:F1:1C:E7
Authority key identifier: 29:B4:20:A3:8F:DE:9D:C3:D4:C2:02:1F:D0:95:3D:9E:BD:BB:90:BC
Certificate issuer: /CN=29b420a38fde9dc3d4c2021fd0953d9ebdbb90bc
Certificate serial: 01A0DBA8E57ADA995530AF2B327CF5C7D345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
Manifest number: EB
Signing time: Sat 26 Sep 2026 03:01:14 +0000
Manifest this update: Sat 26 Sep 2026 03:01:14 +0000
Manifest next update: Sun 27 Sep 2026 03:01:14 +0000
Files and hashes: 1: KbQgo4_encPUwgIf0JU9nr27kLw.crl (hash: gWO4vTP1u/rVRZklWPYefPZwA6lSsiTCaalbIH7sk2c=)
2: omwuLvZPG_OI5FuAKOGoVvhHAhY.roa (hash: j9iA9TG/Xu3J+sOmuPiV21st08l1RRGEXzENpjL0/AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:e5:7a:da:99:55:30:af:2b:32:7c:f5:c7:d3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b420a38fde9dc3d4c2021fd0953d9ebdbb90bc
Validity
Not Before: Sep 26 03:01:14 2026 GMT
Not After : Sep 27 03:01:14 2026 GMT
Subject: CN=7f0927aa819cff233cf9ffd89e8570ccf9f11ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:3d:21:40:54:90:b2:29:f7:20:07:2a:d3:
d8:e0:6f:5d:1e:87:f6:41:c1:27:88:18:42:fb:cf:
e9:fc:30:9c:40:54:ab:ef:90:f7:6f:34:df:92:1e:
3b:6a:9e:54:b6:2c:a4:bd:ac:57:03:32:b8:d0:91:
3f:82:90:92:17:2e:bd:a2:db:65:25:bf:22:d0:d5:
34:dd:f8:df:84:e3:d8:5d:3d:b2:fa:e2:b4:4a:98:
2a:53:d8:4f:e2:09:91:8d:cf:f4:7c:b6:75:3b:90:
11:f3:4f:17:51:0e:7b:18:2a:e5:3a:1e:99:26:a9:
60:b6:86:eb:06:f0:65:57:f5:04:d1:9e:51:0f:dd:
d1:4e:0e:75:c5:31:0e:e7:89:f0:e7:be:83:bb:a6:
ba:13:33:fb:1c:8e:73:95:e8:3e:b7:c9:14:17:2f:
df:43:4c:48:5a:4a:8f:6a:cc:c8:13:f8:86:9f:98:
ba:83:2b:9d:48:d6:02:b7:a9:0d:b0:64:33:24:79:
09:0d:b0:7b:64:34:38:53:2f:3b:3e:ff:d9:b7:6e:
a7:35:1a:78:1e:d0:6e:fc:04:c4:79:6a:57:70:ea:
7c:44:48:72:7a:80:de:4b:46:f3:97:f6:cc:b8:a6:
06:13:e9:ef:5e:73:aa:dd:63:c8:4f:62:f5:bb:7a:
3d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:09:27:AA:81:9C:FF:23:3C:F9:FF:D8:9E:85:70:CC:F9:F1:1C:E7
X509v3 Authority Key Identifier:
keyid:29:B4:20:A3:8F:DE:9D:C3:D4:C2:02:1F:D0:95:3D:9E:BD:BB:90:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbQgo4_encPUwgIf0JU9nr27kLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/122b2d-5d87-478c-8522-89d66ac72e02/1/KbQgo4_encPUwgIf0JU9nr27kLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:6d:d7:55:37:d5:7d:89:b8:70:bd:66:2b:81:7c:f9:32:4f:
5d:47:fc:2c:5b:01:67:ad:58:ee:29:2f:f3:d1:35:2c:17:87:
bc:76:24:20:6c:b8:55:1b:86:48:a7:22:af:0a:c2:df:20:73:
7e:36:c6:10:8c:d4:9a:08:c6:d8:a5:52:b6:a2:78:96:9c:ce:
cb:34:86:66:7b:d6:02:10:bb:c3:21:36:b3:c4:23:4f:a0:c7:
c9:4a:b1:f2:2f:3d:80:78:4c:d9:e3:0f:25:e6:2c:b8:62:4c:
6f:41:34:1d:9e:ae:8d:f5:f8:a6:6e:7a:60:57:9e:fa:c7:ed:
f8:7d:da:11:80:0f:b1:1b:e3:d9:7d:b7:42:b3:f3:98:7a:e9:
a1:4b:1c:2f:c2:f9:e5:33:19:44:9c:ff:bc:eb:eb:40:12:35:
8c:47:3a:8e:14:2b:87:19:13:d9:bf:c3:06:1e:49:f6:50:eb:
02:53:34:d1:ad:5c:f4:46:35:cd:48:44:9a:e8:36:a0:18:b8:
46:9e:71:06:97:21:71:43:e6:32:f5:03:db:9d:3f:31:51:98:
15:bc:aa:1d:28:85:b9:a4:38:e7:33:cf:33:3a:66:0d:a7:b4:
b3:18:6e:7d:2e:03:ae:4d:bd:09:60:93:7d:8d:e7:c8:49:e3:
64:ca:3d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:39:11 2026 by rpki-client