
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
File: KIBHSpYWHd4pQs-58YVsL_yICQQ.mft (raw, json)
Hash identifier: jpU91150KXZ8yzBdwZhAguQj7No2mVfHysz2Kg7DAe4=
Subject key identifier: 12:12:13:5E:86:6D:42:9B:76:15:4C:AD:BD:C1:96:EF:4E:62:B0:7C
Authority key identifier: 28:80:47:4A:96:16:1D:DE:29:42:CF:B9:F1:85:6C:2F:FC:88:09:04
Certificate issuer: /CN=2880474a96161dde2942cfb9f1856c2ffc880904
Certificate serial: 01A1472A1BB2CBE8C10F5994563C8F142BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
Manifest number: 0667
Signing time: Sat 17 Oct 2026 00:01:44 +0000
Manifest this update: Sat 17 Oct 2026 00:01:44 +0000
Manifest next update: Sun 18 Oct 2026 00:01:44 +0000
Files and hashes: 1: KIBHSpYWHd4pQs-58YVsL_yICQQ.crl (hash: 3iX67pFR2IljwQ2zxOlzKdgD18/il/vJEIk9zQ4gUR4=)
2: p5OtBuJ_H7AvfUmYp0Nby5w6BSc.roa (hash: oRePnKuJGEJuRAGyqz3spXqznhrS2YOXLr+XXfpc3VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:2a:1b:b2:cb:e8:c1:0f:59:94:56:3c:8f:14:2b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2880474a96161dde2942cfb9f1856c2ffc880904
Validity
Not Before: Oct 17 00:01:44 2026 GMT
Not After : Oct 18 00:01:44 2026 GMT
Subject: CN=1212135e866d429b76154cadbdc196ef4e62b07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ce:7f:91:9d:f7:f2:fe:52:e4:f5:dc:23:8d:
23:3e:80:36:07:46:ec:c7:7a:89:a7:18:64:ae:40:
ff:3e:b7:41:9d:8c:dd:60:0c:a5:f6:23:c6:ef:02:
65:ac:3f:32:fb:76:a2:0e:c8:24:fb:76:aa:36:ab:
47:0c:d9:83:f1:84:39:9c:4e:a2:a8:74:a4:be:7c:
32:88:49:06:8d:be:5b:bb:1c:f3:59:2c:97:43:da:
63:54:29:3c:e3:ab:77:dc:4b:e3:c6:65:0e:42:da:
2e:79:53:bf:04:0b:2c:70:d5:3c:b8:94:41:9b:0b:
78:a1:78:c0:03:c8:5a:fc:15:1f:f2:81:95:27:c2:
d9:2c:83:25:07:a9:4d:62:21:b6:03:68:de:8f:17:
d6:4d:bd:d2:9d:07:77:12:1c:e5:71:4e:17:9c:64:
30:a6:41:cd:ec:9e:73:05:71:e7:5f:3a:1e:c2:2c:
07:ce:88:da:39:ce:59:3e:8e:76:2b:16:5f:bd:e5:
13:ff:5d:ab:d4:ea:fd:30:e8:89:8a:36:81:7e:e5:
1b:76:f6:d1:e5:6d:cd:8a:d9:46:f1:4e:5b:f9:ed:
99:b2:54:da:94:be:54:6e:2b:ba:21:d3:ac:64:1d:
af:4a:bf:02:1b:1a:dc:0a:31:4f:f3:d2:25:fb:24:
d2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:12:13:5E:86:6D:42:9B:76:15:4C:AD:BD:C1:96:EF:4E:62:B0:7C
X509v3 Authority Key Identifier:
keyid:28:80:47:4A:96:16:1D:DE:29:42:CF:B9:F1:85:6C:2F:FC:88:09:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d3:0f:5f:22:dd:ff:07:ca:80:d7:47:8d:52:5e:31:32:78:
1b:25:b9:91:5b:85:a1:77:17:bb:20:7f:01:62:dd:a6:86:9b:
d5:46:1f:47:99:f7:f1:43:6d:62:09:ea:d9:1d:d2:ff:71:1d:
7d:df:e8:84:8e:08:2e:81:95:0a:9e:ab:a9:8a:00:1b:8f:3b:
96:a9:b1:30:ae:62:e4:8b:d5:a7:69:79:13:9c:e9:f0:f9:19:
46:68:b0:05:f0:c8:21:97:4d:5a:e8:8f:a8:e1:4a:f3:0a:b4:
aa:25:23:0c:64:31:1e:ef:fe:63:f8:64:e5:80:3a:cf:cf:c9:
77:7d:c8:f0:ec:4a:ad:9e:eb:c9:a5:a0:b0:59:d4:42:02:51:
0b:1a:18:6b:9a:50:92:53:96:6d:42:44:6d:3b:c7:98:e8:36:
56:3d:03:27:12:99:1c:20:40:41:d3:d7:ce:82:1a:1e:ab:64:
3c:85:c4:6a:67:3d:3b:b1:c5:aa:34:d1:99:26:e1:2a:ae:ba:
60:0c:01:41:33:a7:88:38:36:fe:cf:07:42:dc:66:dd:55:fa:
ed:08:5e:5d:3a:73:97:b4:f8:c6:0d:d5:b8:66:d7:97:eb:67:
26:39:f9:ce:50:65:95:3c:01:ae:65:c2:75:ad:ae:52:cb:3a:
33:c8:fe:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:07:23 2026 by rpki-client