Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
File: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft (raw, json)
Hash identifier: qU1WR+0TLAR3czFyN2Xvi8BqFw84eu0K+yaePAbhNAM=
Subject key identifier: 53:D0:F2:44:B1:10:DC:C3:F8:0F:DA:47:89:F2:ED:97:26:B7:A6:4D
Authority key identifier: 29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
Certificate issuer: /CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Certificate serial: 019FAA1A4404FE94C2AF4D4B81C15BEAE510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
Manifest number: 05A9
Signing time: Tue 28 Jul 2026 19:01:15 +0000
Manifest this update: Tue 28 Jul 2026 19:01:15 +0000
Manifest next update: Wed 29 Jul 2026 19:01:15 +0000
Files and hashes: 1: 77Whh77iKwt1yOOYU4DtYorlBOk.roa (hash: tO7vF8xusHO1O0mKViJ8yyoCaEKBRB4DR9BPRK3Lwnc=)
2: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl (hash: gfwzvlMKZ1tQu/VbsLbIMYkhWKtMOPWnxOi1RFMr0tY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:44:04:fe:94:c2:af:4d:4b:81:c1:5b:ea:e5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Validity
Not Before: Jul 28 19:01:15 2026 GMT
Not After : Jul 29 19:01:15 2026 GMT
Subject: CN=53d0f244b110dcc3f80fda4789f2ed9726b7a64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a4:9a:1d:24:d4:42:89:fb:0b:b3:97:d7:f9:
5a:cf:60:13:cc:ff:a3:6e:e1:fc:89:91:9a:36:95:
3b:66:53:a1:23:4c:b5:a9:5b:5a:bf:f0:1a:32:69:
b3:8a:df:f0:4c:94:20:ff:cc:35:f4:43:ac:61:bb:
0f:10:6a:18:dc:5c:e9:e2:a8:a9:87:4b:d4:bd:c7:
35:f9:dc:d2:00:01:e0:ee:06:08:7c:43:fa:f3:63:
36:ef:a6:1c:6c:0b:26:58:a7:81:c8:ab:4d:c6:5e:
31:18:69:b0:fe:2b:55:d7:38:8f:b9:17:2d:04:09:
5c:11:50:87:a7:ac:61:cd:ec:65:bd:5f:68:87:9e:
00:43:4e:af:3a:09:5c:6d:07:8d:9b:d1:03:4a:e8:
4a:ca:b3:76:bf:f8:f6:f3:1f:d5:9e:14:a9:13:01:
49:ea:3f:c2:38:e1:38:50:b3:0e:8f:b5:de:4a:5d:
fd:b8:91:a3:ab:28:c7:18:91:ba:9d:4e:4b:6f:3e:
db:03:fd:a6:4f:41:31:ff:9e:c5:09:c5:d8:c8:e8:
85:e4:b2:fc:b7:5c:2e:ae:50:95:01:50:f7:4f:6c:
84:5c:fc:de:d8:b0:83:e8:1e:42:f8:b8:8d:41:b4:
79:ec:18:37:57:16:59:4f:c0:63:50:24:39:6e:df:
7c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D0:F2:44:B1:10:DC:C3:F8:0F:DA:47:89:F2:ED:97:26:B7:A6:4D
X509v3 Authority Key Identifier:
keyid:29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:07:52:87:56:1e:de:22:80:43:71:04:99:24:cd:8c:b8:1d:
62:6f:94:e9:3c:41:bf:35:d6:52:2d:89:4d:ae:8d:4e:6f:4e:
dc:b0:dd:e4:89:6d:d7:38:92:b6:34:7a:b6:2f:c5:9e:8e:ef:
fa:5c:52:09:74:f6:fb:98:cc:12:1b:8b:3a:d6:37:2e:0d:ae:
7e:1d:d6:31:65:72:53:70:8c:b6:a6:dc:27:d6:67:b9:bb:a2:
83:b9:1f:ed:7c:c8:47:34:6c:73:9d:ec:f0:7d:42:47:0a:01:
9d:2d:c1:cb:90:f6:ec:51:ca:f3:bc:1a:73:16:ae:47:c1:aa:
c2:72:1c:4a:19:2c:13:ea:6f:32:32:93:42:b1:9c:66:44:55:
fa:04:3d:7a:40:d2:8b:95:ab:2c:7d:f8:af:ae:48:52:12:16:
46:30:63:b5:7d:db:6b:3d:48:37:af:79:a5:d4:8d:1d:60:52:
48:a7:b2:cd:3d:32:f3:73:e5:b6:ff:8e:17:62:aa:e7:f3:55:
ca:b2:e1:4a:5b:97:f3:29:57:97:bf:46:73:e6:89:bf:f6:5b:
e0:8e:55:be:b8:3b:bf:f7:c2:35:9f:c8:e3:85:a9:ee:7f:46:
98:27:cf:7c:1b:43:fb:25:6c:4e:8f:80:f1:7d:b3:9d:e9:2d:
c1:dc:c5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:11:40 2026 by rpki-client