Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
File: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft (raw, json)
Hash identifier: D/Lm6CvAA4JuFHFE85+CI3oEGLhFag+mojyLo9MDVJE=
Subject key identifier: B5:E1:C6:06:1E:C6:BB:4B:AD:7F:D4:C9:BE:04:56:A6:2F:46:C8:DA
Authority key identifier: 29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
Certificate issuer: /CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Certificate serial: 01A10F5F400D154B770EE2AB8987FB71A9CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
Manifest number: 0662
Signing time: Tue 06 Oct 2026 04:01:02 +0000
Manifest this update: Tue 06 Oct 2026 04:01:02 +0000
Manifest next update: Wed 07 Oct 2026 04:01:02 +0000
Files and hashes: 1: 77Whh77iKwt1yOOYU4DtYorlBOk.roa (hash: tO7vF8xusHO1O0mKViJ8yyoCaEKBRB4DR9BPRK3Lwnc=)
2: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl (hash: IpPLryJanJJDh1yXeimx2motFrYF1H+3X9ayfv0fBMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 23:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:5f:40:0d:15:4b:77:0e:e2:ab:89:87:fb:71:a9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Validity
Not Before: Oct 6 04:01:02 2026 GMT
Not After : Oct 7 04:01:02 2026 GMT
Subject: CN=b5e1c6061ec6bb4bad7fd4c9be0456a62f46c8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5e:f4:81:be:57:dd:da:3f:04:6a:dd:15:89:
e6:08:64:4c:b9:04:d1:f7:fe:51:d3:ee:79:91:01:
53:be:f8:2c:c1:e3:36:bd:a7:91:a7:80:f6:f4:8a:
ba:40:23:af:94:2f:e5:f5:51:f8:cb:3a:32:86:c5:
75:16:cc:ea:1c:83:d8:1d:80:e6:0f:cd:4b:20:8d:
75:5e:ca:fa:f5:46:e9:97:cd:67:cc:2d:0d:7b:ba:
5f:10:c1:15:c4:ba:c2:f3:65:24:c9:fa:c5:66:5b:
3f:07:58:6a:dd:d9:c4:c8:17:e6:0f:6d:08:7b:ac:
f7:11:22:5e:ef:9a:1c:78:33:e7:4f:97:c6:41:af:
17:af:05:78:57:78:97:2e:b8:74:34:37:2e:08:4b:
c0:5a:50:36:9a:82:f1:6c:84:6b:a7:cb:38:58:77:
65:1a:47:a2:4e:e6:4d:8e:b3:5b:8a:50:2f:f1:e1:
34:51:7c:94:bf:15:ab:81:21:a8:cf:3e:0d:49:5d:
32:ca:58:5c:e2:07:3c:8b:7a:f1:37:b1:14:bf:ab:
02:fb:eb:ea:3f:4b:66:d4:22:1b:b8:4b:0f:5a:24:
81:6a:27:7d:63:92:7b:d4:71:31:81:da:fc:86:be:
ca:4e:fc:0d:02:17:f3:98:75:bf:20:36:19:0a:a2:
ef:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E1:C6:06:1E:C6:BB:4B:AD:7F:D4:C9:BE:04:56:A6:2F:46:C8:DA
X509v3 Authority Key Identifier:
keyid:29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:7d:89:ec:4f:28:65:8a:d4:98:f6:14:22:12:05:b4:b5:1f:
e9:27:9b:13:24:21:31:0f:91:80:60:ef:07:c9:f6:03:a4:8e:
c2:f7:45:64:69:f4:bf:ba:1f:9d:3e:53:c9:b1:92:e6:8e:0e:
34:f3:aa:6c:6c:76:4d:59:69:f1:bf:f5:96:eb:ed:57:1c:37:
46:9d:5a:bd:6f:93:52:3f:ae:d0:0e:d9:31:79:b4:4a:96:81:
01:e5:c0:a9:3f:71:36:52:3d:2a:2a:4d:7c:57:d2:7d:71:db:
b6:5b:f1:fc:8a:fd:d5:3a:93:71:89:19:79:8d:ad:e6:db:3b:
b0:15:3e:6f:b9:24:79:f4:3a:10:33:1d:ab:38:3b:58:ce:f8:
bd:9b:a4:7a:92:b5:5d:72:26:3d:ee:77:3e:f3:57:c5:36:4b:
16:83:98:aa:41:4a:e9:9e:17:0f:39:f8:7d:ad:0a:26:0d:d2:
d5:14:09:14:a5:ce:ff:9e:f6:3c:be:0e:c4:62:74:75:08:1d:
92:f4:8d:4f:9d:50:30:15:52:dc:ba:e3:a9:8b:c2:95:b6:72:
29:85:59:4f:74:3b:09:26:13:4b:97:89:00:15:52:93:2c:ac:
60:a1:2a:0f:03:f5:d6:96:93:15:81:2b:8a:cc:43:42:42:0f:
00:3f:f5:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEPX0ANFUt3DuKriYf7canKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5OTZjZDY4NTMxODQ3ZTNiMGJlMGQ5M2M2NWNjMWZiNjRl
Y2QyMWEwHhcNMjYxMDA2MDQwMTAyWhcNMjYxMDA3MDQwMTAyWjAzMTEwLwYDVQQD
EyhiNWUxYzYwNjFlYzZiYjRiYWQ3ZmQ0YzliZTA0NTZhNjJmNDZjOGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw170gb5X3do/BGrdFYnmCGRMuQTR
9/5R0+55kQFTvvgsweM2vaeRp4D29Iq6QCOvlC/l9VH4yzoyhsV1FszqHIPYHYDm
D81LII11Xsr69Ubpl81nzC0Ne7pfEMEVxLrC82UkyfrFZls/B1hq3dnEyBfmD20I
e6z3ESJe75oceDPnT5fGQa8XrwV4V3iXLrh0NDcuCEvAWlA2moLxbIRrp8s4WHdl
GkeiTuZNjrNbilAv8eE0UXyUvxWrgSGozz4NSV0yylhc4gc8i3rxN7EUv6sC++vq
P0tm1CIbuEsPWiSBaid9Y5J71HExgdr8hr7KTvwNAhfzmHW/IDYZCqLv2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXhxgYexrtLrX/Uyb4EVqYvRsjaMB8GA1UdIwQY
MBaAFCmWzWhTGEfjsL4Nk8Zcwftk7NIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1piTmFGTVlSLU93dmcyVHhsekItMlRzMGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84M2NkNDEtNzI1Ni00ZDY2LTk0MmYt
NzJlY2JhMTMxYWY4LzEvS1piTmFGTVlSLU93dmcyVHhsekItMlRzMGhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84M2NkNDEtNzI1Ni00ZDY2LTk0MmYtNzJlY2JhMTMxYWY4
LzEvS1piTmFGTVlSLU93dmcyVHhsekItMlRzMGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaX2J7E8o
ZYrUmPYUIhIFtLUf6SebEyQhMQ+RgGDvB8n2A6SOwvdFZGn0v7ofnT5TybGS5o4O
NPOqbGx2TVlp8b/1luvtVxw3Rp1avW+TUj+u0A7ZMXm0SpaBAeXAqT9xNlI9KipN
fFfSfXHbtlvx/Ir91TqTcYkZeY2t5ts7sBU+b7kkefQ6EDMdqzg7WM74vZukepK1
XXImPe53PvNXxTZLFoOYqkFK6Z4XDzn4fa0KJg3S1RQJFKXO/572PL4OxGJ0dQgd
kvSNT51QMBVS3LrjqYvClbZyKYVZT3Q7CSYTS5eJABVSkyysYKEqDwP11paTFYEr
isxDQkIPAD/1kA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 07:20:35 2026 by rpki-client