Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
File: KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft (raw, json)
Hash identifier: qwjcU6bW4bRTLVFFRyhAyo3N8gNqJFxtjFWem06JpIg=
Subject key identifier: C3:3D:F2:98:5D:26:77:73:A4:7E:27:A5:D0:98:78:58:06:A7:2A:85
Authority key identifier: 28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
Certificate issuer: /CN=2811818f95be6690e8aabc5befa217346abcd574
Certificate serial: 019CAC471C54D0111D8FE003176DC7729B7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
Manifest number: 022C
Signing time: Mon 02 Mar 2026 02:01:07 +0000
Manifest this update: Mon 02 Mar 2026 02:01:07 +0000
Manifest next update: Tue 03 Mar 2026 02:01:07 +0000
Files and hashes: 1: KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl (hash: 7RWvOLo96GE5pKL6/y074IWvkcP935RJMi3MAarnlf0=)
2: cjM0znzLJC2QR0PgnNVfAe1h_mI.roa (hash: niPdw0pZGGHLaXhD+OqWZAWoags/W4iskvjHWI94b6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:1c:54:d0:11:1d:8f:e0:03:17:6d:c7:72:9b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2811818f95be6690e8aabc5befa217346abcd574
Validity
Not Before: Mar 2 02:01:07 2026 GMT
Not After : Mar 3 02:01:07 2026 GMT
Subject: CN=c33df2985d267773a47e27a5d098785806a72a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:b1:78:80:23:1a:b6:c8:ba:e3:56:d6:d6:
68:86:39:c9:84:69:67:34:af:ec:15:ad:79:a6:d9:
2e:a2:d2:97:c5:8d:17:ca:c7:ac:05:da:35:ef:35:
6d:8b:19:80:46:e0:4c:46:48:5f:3a:17:1c:7f:43:
66:9f:6a:4d:01:cc:b4:9c:71:dd:13:a2:84:fe:25:
e8:45:f3:f9:64:c3:e1:a3:58:0e:f5:6e:11:b4:11:
de:b3:1d:d1:71:aa:24:84:62:93:5b:51:75:c8:83:
4e:67:f4:3d:6e:19:2d:52:ce:71:a0:06:cb:63:2b:
cb:a3:9a:db:68:45:e5:85:8a:65:d4:09:95:51:63:
35:f5:da:99:34:a0:ed:5a:f1:e6:fa:3d:d4:74:71:
7d:8c:fe:7e:42:12:84:ed:68:74:60:57:22:e9:e5:
69:7d:a6:7d:96:78:da:7c:8f:df:e6:16:93:51:08:
94:c1:7e:90:b2:4c:ac:d5:bf:48:42:ec:61:83:ab:
7d:88:d0:94:81:69:77:a7:7f:34:33:33:bb:26:31:
16:55:d8:38:f0:5a:9d:ec:dc:74:1f:68:a5:a2:a7:
46:f3:e3:d9:cc:d7:c0:09:8a:82:c8:94:8a:9f:c8:
71:8a:d8:4c:66:1a:9e:b1:d4:55:ee:93:fd:ff:48:
f1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3D:F2:98:5D:26:77:73:A4:7E:27:A5:D0:98:78:58:06:A7:2A:85
X509v3 Authority Key Identifier:
keyid:28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:f1:e9:33:48:0e:57:21:cf:b0:9c:af:bc:6e:dd:01:0c:12:
36:7d:bf:e2:ff:1d:bf:c2:67:42:e4:b1:1e:eb:4b:b5:7c:d8:
14:97:43:5d:df:24:ad:8f:93:98:53:b2:0f:c2:61:4c:48:6f:
80:f5:c2:b3:9d:4d:f1:1b:8c:f1:38:d7:a5:99:c2:94:b1:08:
1e:42:31:09:5d:5c:13:b6:7f:ee:8c:3c:f8:14:c1:80:02:4c:
22:11:08:4f:ea:f5:f6:7d:78:5e:0d:c6:ea:78:5d:59:9c:bf:
00:40:4d:66:d6:d5:05:ce:ae:76:8f:50:58:b0:e8:f4:b6:70:
62:3d:c7:63:03:1b:05:eb:1a:ab:92:e7:14:05:5a:6f:ca:b0:
71:fd:8f:1d:c0:50:b7:cf:19:1c:59:cd:d8:8c:59:dc:96:e5:
e6:a6:41:b7:23:c4:5d:a9:d8:1a:70:06:b4:14:bc:b9:5c:d5:
3c:81:00:c1:21:5f:e4:b3:4e:a8:dd:d0:91:11:8a:c6:5e:a7:
fe:60:34:72:59:3e:c3:52:52:2d:eb:b7:85:f2:58:3d:67:d6:
99:2f:af:24:cc:18:ba:f0:88:d2:8d:f5:b3:6e:0a:64:77:63:
80:5e:21:94:f9:1a:77:c3:28:b7:45:2b:7a:dc:eb:9f:e3:57:
cd:e7:90:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:38 2026 by rpki-client