Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
File: KbOnF2ZaETfpncj60i4-f5jbiXM.mft (raw, json)
Hash identifier: U5UNai/soM9HtXd7/P9ReOH5UhKtgJojGRIhQbt5tUc=
Subject key identifier: A6:91:C3:B2:3D:56:92:D0:9D:E7:CE:1F:00:10:7E:5D:3C:E2:94:90
Authority key identifier: 29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
Certificate issuer: /CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Certificate serial: 01A1257979FE98EBD311E69323548FF03FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
Manifest number: 1A9D
Signing time: Sat 10 Oct 2026 11:01:20 +0000
Manifest this update: Sat 10 Oct 2026 11:01:20 +0000
Manifest next update: Sun 11 Oct 2026 11:01:20 +0000
Files and hashes: 1: KbOnF2ZaETfpncj60i4-f5jbiXM.crl (hash: FqaVwyihib6NidGvXUjggXjR8Xunqz2B+cINLpDN2QQ=)
2: Ty9RnsnK3EDnysBvDikYp04oggo.roa (hash: oWmmAPgiMnRBuVQF4Wy8CU51nd17TmIJOxZ3k8HDTIo=)
3: VmNdh6laZxyVCC_g82mHnoN0sjg.roa (hash: fCIZoEHtubiL+1CEYbmHMAzOgcDhgRWMLUT6hfUtnUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:79:79:fe:98:eb:d3:11:e6:93:23:54:8f:f0:3f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Validity
Not Before: Oct 10 11:01:20 2026 GMT
Not After : Oct 11 11:01:20 2026 GMT
Subject: CN=a691c3b23d5692d09de7ce1f00107e5d3ce29490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dd:1d:bb:5c:58:19:9b:29:17:b7:a8:d9:61:
b2:0c:24:4b:25:6d:86:21:79:b3:47:28:2c:2e:bd:
34:15:65:d8:04:37:9c:c7:dc:b9:38:fd:51:91:d4:
c4:d6:62:a0:60:e5:71:82:1c:3c:06:2a:77:37:6e:
50:33:84:ee:40:ac:87:62:61:94:6d:7a:a8:2f:11:
99:09:e9:b6:6c:64:b2:8a:e5:99:1b:c4:48:c9:39:
f3:bb:9d:08:54:db:a6:a3:66:de:2a:d2:2c:96:29:
a9:23:d4:d9:db:46:5e:53:b4:cd:c9:83:5f:52:45:
6f:9e:24:ed:ee:b9:82:fa:de:3d:ab:d8:97:7d:0e:
13:ce:1b:70:ec:1b:46:7d:fb:c7:5a:a1:8c:69:0d:
b7:bd:1b:8b:5a:e5:27:3d:cf:fe:31:c9:28:9b:da:
6e:72:f9:ed:77:ad:f5:bb:42:15:1f:ce:be:81:83:
b1:37:28:5d:ba:81:31:e2:b5:5e:32:7f:7c:e2:44:
3f:70:10:f9:0c:92:15:37:6a:03:f8:f8:94:5e:c4:
e2:f0:9f:2c:02:b7:8a:a0:10:44:54:a5:86:22:3f:
84:18:62:d5:89:bf:89:f8:4a:26:2e:75:9d:5a:1a:
6e:88:7d:7d:60:16:bf:26:8f:14:79:e1:92:5a:fc:
03:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:91:C3:B2:3D:56:92:D0:9D:E7:CE:1F:00:10:7E:5D:3C:E2:94:90
X509v3 Authority Key Identifier:
keyid:29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:00:75:cf:bc:a5:46:0d:02:90:52:1a:fa:98:ff:de:36:12:
78:ea:09:96:64:07:ae:6e:51:a4:ab:a7:7d:32:2f:63:b1:53:
b2:5d:5e:4c:53:3c:41:fc:44:02:ee:93:39:7b:a4:59:01:2f:
e2:b3:7f:c1:2a:87:6f:8c:f2:58:45:2f:15:50:78:0a:9a:c9:
79:13:e3:5c:92:ce:ce:11:72:15:e3:cc:42:d1:f2:31:09:e8:
c1:c4:8d:6f:c2:f6:fb:7f:75:b3:d5:bf:f9:dc:ff:9e:49:06:
a3:4a:13:15:fb:5e:d7:86:7f:da:50:ba:19:ad:77:04:2c:b3:
52:19:0f:8f:ac:59:e9:3b:b6:f8:d0:b5:0d:3f:b0:48:76:9c:
09:00:9f:3b:f2:b5:7a:ad:2d:b3:35:fe:a8:44:87:8b:02:08:
14:63:87:9e:90:4f:7e:45:7a:1b:f4:db:06:a4:cc:76:ab:fa:
a6:0f:0b:a3:d7:a4:f5:ec:f3:f2:f0:f5:28:02:fa:90:c8:12:
8e:92:77:9a:f9:3b:93:12:18:5b:c6:af:40:85:eb:36:4c:a1:
48:e4:3e:39:16:33:99:02:39:5c:fc:ff:c5:ed:7f:d9:cd:ff:
e8:00:b7:95:3a:a9:96:63:9b:ef:73:08:b2:85:9e:b7:24:03:
36:c9:a0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:25:30 2026 by rpki-client