Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
File: KBZKV1f91XJaYIRPKufvc7EHpMA.mft (raw, json)
Hash identifier: 5Q4Zc2nb0wSVJEFyfFC/76v198jnEffcUQnu8gxt6qE=
Subject key identifier: 3B:0F:73:BB:90:93:E8:46:BE:90:DD:ED:8A:94:5C:B7:77:2F:94:75
Authority key identifier: 28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
Certificate issuer: /CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Certificate serial: 01A0FB6B3BBCD6A9D364A7432EE44F01BE5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
Manifest number: 1A80
Signing time: Fri 02 Oct 2026 07:01:43 +0000
Manifest this update: Fri 02 Oct 2026 07:01:43 +0000
Manifest next update: Sat 03 Oct 2026 07:01:43 +0000
Files and hashes: 1: 744IgXzHRA7i_KaZPXPHUM0eSxg.roa (hash: eqDQW7MUEHWcKNovBhhfViXrkME1qg3sj67Td6hUu3A=)
2: KBZKV1f91XJaYIRPKufvc7EHpMA.crl (hash: P6NtZgUfTe3xAY/dWR0ocXHaAIitiY2fokTtWaI7djk=)
3: Q9Hzj6xYvSgvTk1AgA8SSFlzHjw.roa (hash: zRP8z6fqTAhTFBNH4EqdLJ2KR4AhqadHe/YBKRqTMqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 07:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:6b:3b:bc:d6:a9:d3:64:a7:43:2e:e4:4f:01:be:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Validity
Not Before: Oct 2 07:01:43 2026 GMT
Not After : Oct 3 07:01:43 2026 GMT
Subject: CN=3b0f73bb9093e846be90dded8a945cb7772f9475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6d:73:64:93:5b:9c:70:5b:47:08:50:95:49:
1e:77:62:70:7f:93:d4:9d:91:9f:ac:33:6e:75:e2:
a4:77:de:ee:c0:c4:4d:4d:23:6d:f2:ab:64:df:08:
b4:59:6a:a4:b8:93:4a:b9:7c:05:85:a1:58:bb:4c:
15:51:7d:d4:36:7c:20:39:21:08:9d:c5:be:14:10:
85:f9:fc:04:5d:48:60:2d:ec:d1:a8:85:b2:dd:f5:
2a:af:57:38:44:7a:af:58:7a:3d:6d:31:88:af:58:
f5:bd:0a:0d:58:cd:c3:0d:da:3b:27:4b:38:1e:7e:
bf:90:b2:a9:6c:cf:0c:73:5a:a9:44:ff:82:87:00:
0d:45:7f:f4:fe:c5:d4:d9:e5:f3:62:d1:9a:60:42:
3c:7f:04:48:98:e0:29:e7:9d:4d:2a:58:08:ce:a3:
d1:cc:be:c2:2d:ec:b7:92:29:1e:5e:4e:c3:2d:52:
53:f6:fe:c7:4a:99:74:41:a3:99:cb:43:42:ec:c5:
32:4d:15:41:50:5c:af:18:78:cf:9f:f1:5c:5b:bf:
be:1c:74:7f:9e:cf:b3:48:43:fb:17:43:03:71:69:
fa:41:d3:e0:82:26:09:99:0b:92:2e:81:3d:52:7b:
f5:15:cf:90:68:52:11:ca:a6:21:b0:34:7f:90:7d:
62:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0F:73:BB:90:93:E8:46:BE:90:DD:ED:8A:94:5C:B7:77:2F:94:75
X509v3 Authority Key Identifier:
keyid:28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b2:12:65:de:91:0e:5f:38:89:7d:fe:d4:12:a6:83:24:2e:
49:29:71:cd:98:d0:31:e1:bd:b8:17:dc:9d:9f:3e:0e:d7:f5:
df:c1:b3:2d:c7:59:15:51:90:48:38:4e:db:ba:9e:0e:f0:09:
69:cb:09:11:37:fa:ea:bc:f6:07:8b:f5:b9:d0:e5:3c:29:b8:
55:f8:b0:05:19:7a:1c:e2:be:a6:d0:9c:5f:e9:58:2c:e9:15:
a1:e3:9b:c9:8c:b5:70:4a:4e:d2:c9:44:92:68:82:52:f6:d9:
17:94:41:b6:37:d0:3f:91:39:05:60:5f:1d:02:48:88:14:2c:
12:15:88:c5:24:65:00:4d:91:4e:10:f9:ad:4e:71:c7:4a:0a:
58:ea:8e:05:83:59:4b:0c:0a:0c:6d:97:68:e0:0e:e3:ef:4d:
44:40:2f:f9:c2:6d:51:21:e6:49:3b:26:9b:22:e1:a6:cc:3b:
c1:76:fc:b0:ba:93:42:d0:29:4e:38:cd:58:18:0a:44:2c:bc:
ba:bd:dc:86:7a:28:96:f5:49:c1:96:84:4e:21:0b:ef:4d:19:
ef:d7:b4:f8:c2:a2:b1:77:57:fb:10:2c:e9:a2:5d:e5:63:93:
c4:83:a7:ee:8e:b0:70:5e:44:57:4d:49:e6:2d:01:d6:d5:63:
71:94:1e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:55:01 2026 by rpki-client