Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
File: KbOnF2ZaETfpncj60i4-f5jbiXM.mft (raw, json)
Hash identifier: L2QnNDWKTvYqntJ+4+2x1EuKlHMZAXXkyE04kYQLHDk=
Subject key identifier: 77:7B:10:F0:7B:0C:E0:65:F4:1F:5E:59:9B:78:1B:BF:DE:DE:5F:F1
Authority key identifier: 29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
Certificate issuer: /CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Certificate serial: 019FA9079E602B2B74DA187152385E97D8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
Manifest number: 19D8
Signing time: Tue 28 Jul 2026 14:01:16 +0000
Manifest this update: Tue 28 Jul 2026 14:01:16 +0000
Manifest next update: Wed 29 Jul 2026 14:01:16 +0000
Files and hashes: 1: KbOnF2ZaETfpncj60i4-f5jbiXM.crl (hash: PoZA7g+h7DwYJ3NVxs5DL7F4XwevHVJHUX5hhANcLdo=)
2: Ty9RnsnK3EDnysBvDikYp04oggo.roa (hash: oWmmAPgiMnRBuVQF4Wy8CU51nd17TmIJOxZ3k8HDTIo=)
3: VmNdh6laZxyVCC_g82mHnoN0sjg.roa (hash: fCIZoEHtubiL+1CEYbmHMAzOgcDhgRWMLUT6hfUtnUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:9e:60:2b:2b:74:da:18:71:52:38:5e:97:d8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Validity
Not Before: Jul 28 14:01:16 2026 GMT
Not After : Jul 29 14:01:16 2026 GMT
Subject: CN=777b10f07b0ce065f41f5e599b781bbfdede5ff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:eb:98:dd:e8:d0:ee:4f:93:5a:a0:dd:37:
69:0b:f8:6f:a2:97:5a:0e:b2:2b:a0:4e:60:c9:3f:
1c:ba:86:71:1d:d9:e4:ce:3e:9c:eb:95:48:59:f9:
2e:3d:2e:30:7f:9c:61:f8:c7:9e:83:f1:9f:ee:fd:
53:c8:a2:63:8b:9e:97:ed:49:96:6e:73:32:5d:a5:
1d:b4:76:91:e0:de:88:8f:35:3c:f2:d6:eb:cb:74:
0f:39:ec:e3:4b:1e:39:45:19:7b:0b:57:2e:af:3c:
e3:72:21:2b:61:d9:6c:43:05:54:08:f3:da:84:42:
d7:3e:e8:69:5d:05:43:5c:55:58:58:b2:c3:94:36:
58:cd:87:22:6f:0e:a0:2d:6e:94:89:1a:78:4e:55:
a6:6e:61:b7:71:42:96:e5:de:d0:f1:76:a6:d8:08:
b4:73:f0:5c:a0:91:64:33:3f:7d:af:5f:e4:85:62:
3c:c2:34:3d:ef:04:f9:48:51:77:2c:7d:52:10:09:
3d:56:ea:1a:20:b9:17:ba:b2:1f:1b:70:c5:6d:a8:
52:ce:91:88:fa:06:2e:8d:3b:18:fa:c0:f2:0a:a6:
0e:e6:92:93:ca:4a:e5:50:57:d2:28:e3:cf:ae:02:
b0:6d:3b:a7:ad:33:77:91:04:24:12:c4:be:3e:34:
37:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7B:10:F0:7B:0C:E0:65:F4:1F:5E:59:9B:78:1B:BF:DE:DE:5F:F1
X509v3 Authority Key Identifier:
keyid:29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:9a:dc:bf:1f:b0:a0:fd:ce:ec:5e:8e:5b:71:af:76:0b:82:
79:eb:97:90:f4:52:4d:e6:4c:c6:7e:1c:98:44:72:60:a7:dd:
73:14:60:51:44:bc:6f:35:48:fe:c4:ec:7e:46:e8:c6:37:81:
82:a9:86:9d:3d:11:14:1f:f7:1d:2b:50:4b:9b:15:51:33:90:
52:ff:01:81:26:3f:cb:04:f1:ab:71:ed:02:35:e4:fd:6f:29:
b1:f6:6b:81:ac:cc:a3:72:12:c6:6a:b8:31:93:60:57:68:ed:
fa:67:12:1f:08:55:ec:da:cc:71:9a:44:9e:ce:9e:18:77:67:
af:08:38:80:b4:f1:a6:5d:6f:c8:37:0e:3d:b9:bd:1b:a2:6b:
ab:15:5a:f7:9e:b6:7e:c2:5b:14:4b:cb:9a:e1:84:e7:c9:b6:
96:8f:42:8b:61:e6:59:b7:fd:b2:98:29:92:f1:1d:e8:7b:d2:
f9:59:b3:ee:07:99:8c:8a:a5:fb:4c:e3:b7:5a:67:f6:d8:f7:
ba:69:5e:98:b8:4f:9f:7d:75:e3:07:98:c6:79:58:9e:b8:78:
bd:de:1e:e4:15:39:97:cc:1e:35:b0:e5:6e:29:d8:b2:0b:e0:
26:3e:dd:f5:12:fd:b2:0b:24:1c:b9:47:31:36:66:0a:dc:ea:
9a:8a:7a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:42:41 2026 by rpki-client