Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
File: KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft (raw, json)
Hash identifier: uj4N+jov+oMNUJWtVDrhlirV9GaXqJxSnRe0FFUSFps=
Subject key identifier: 85:5D:D8:66:7B:64:3E:BA:A3:89:77:AE:A5:73:88:4F:D6:CB:60:04
Authority key identifier: 28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
Certificate issuer: /CN=2811818f95be6690e8aabc5befa217346abcd574
Certificate serial: 019D99D06519CCB24B3D2F0841A8B5D0270E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
Manifest number: 02A7
Signing time: Fri 17 Apr 2026 05:01:04 +0000
Manifest this update: Fri 17 Apr 2026 05:01:04 +0000
Manifest next update: Sat 18 Apr 2026 05:01:04 +0000
Files and hashes: 1: KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl (hash: Td8kpK1DzcSGnkdtafAzoCj89r0LVqiax1x/9xG5Ohk=)
2: cjM0znzLJC2QR0PgnNVfAe1h_mI.roa (hash: niPdw0pZGGHLaXhD+OqWZAWoags/W4iskvjHWI94b6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:65:19:cc:b2:4b:3d:2f:08:41:a8:b5:d0:27:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2811818f95be6690e8aabc5befa217346abcd574
Validity
Not Before: Apr 17 05:01:04 2026 GMT
Not After : Apr 18 05:01:04 2026 GMT
Subject: CN=855dd8667b643ebaa38977aea573884fd6cb6004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:2d:58:1d:20:fe:ed:f6:cf:eb:5b:2a:06:
6b:6e:96:19:a5:31:df:b4:d4:d7:7e:1e:17:f3:af:
30:ba:71:6c:45:4e:70:73:5a:d0:09:ab:d3:eb:c0:
c7:fb:7b:d4:5f:82:80:2c:9c:29:b4:4c:9d:ee:c5:
ef:e4:c1:d5:28:63:47:41:5d:cd:ef:86:ae:01:bc:
12:fc:9b:dd:29:d7:46:26:20:79:4a:c7:13:4e:c9:
e2:f0:55:b6:d4:0a:87:36:8a:0a:1d:07:a9:95:7d:
d1:d9:fd:9b:ec:b6:92:75:eb:18:e5:62:f6:6d:49:
c9:cf:04:a2:17:0e:ab:3f:02:e4:4e:a6:57:3c:48:
6f:77:a2:05:e3:e7:a4:2a:e1:40:58:37:78:47:16:
8b:50:a4:46:ca:aa:48:f6:8f:3d:94:da:a8:a3:6a:
bd:f3:0b:33:04:0c:bc:34:57:3d:51:9f:e6:6f:a3:
09:74:6c:51:b9:71:a4:93:cd:5b:ea:ed:3a:6b:d9:
64:9b:9b:4b:2b:cc:c5:0e:a2:48:37:44:4f:63:74:
bf:0c:a1:b2:a6:4f:ac:e3:de:b2:db:8d:da:0d:48:
b0:0d:35:ce:e2:44:95:3a:ee:46:9c:4c:93:83:78:
b8:bb:61:11:c9:91:0c:46:ee:90:a2:2e:85:a4:8b:
86:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5D:D8:66:7B:64:3E:BA:A3:89:77:AE:A5:73:88:4F:D6:CB:60:04
X509v3 Authority Key Identifier:
keyid:28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:97:18:ed:e3:98:71:28:47:96:5a:27:ba:62:58:cf:e3:b2:
9e:5c:f3:91:c4:1f:5f:5b:96:9a:e4:de:50:75:39:9e:21:a6:
f1:2b:bf:d6:d3:45:77:69:e6:37:24:71:47:ff:11:ef:bb:a0:
ae:84:d4:dc:08:4b:6d:fe:fd:f7:90:fd:23:eb:44:20:64:14:
3a:72:82:4f:e8:34:a5:02:82:8b:0e:3b:02:ed:cb:64:ee:d4:
5f:e6:f8:f6:be:49:1a:1c:26:e1:63:88:b3:ff:23:52:44:c4:
fb:f5:23:b0:16:ec:b1:a7:b2:f9:9e:b7:7a:36:f8:8d:b0:f7:
7d:7d:6d:b2:58:42:19:0f:b8:50:7f:98:44:d0:40:4e:3f:d3:
49:7e:2e:55:6e:25:be:8c:db:13:78:c4:b5:a5:b0:37:2d:c4:
20:38:cf:f1:63:87:53:35:7f:3f:a9:29:a6:58:07:f7:01:a9:
9b:87:7a:c3:53:5d:77:db:b2:2f:bb:5e:58:18:93:3f:19:38:
9d:12:4f:f3:ef:19:70:fe:09:9a:2f:7c:64:78:3a:a4:ee:ab:
38:1d:bc:0f:fa:09:0b:36:14:6d:5c:23:50:00:6a:47:fe:e4:
58:f1:f0:20:31:21:18:c0:e2:ee:91:96:6e:18:7d:e2:11:68:
08:b8:db:5c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Z0GUZzLJLPS8IQai10CcOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTE4MThmOTViZTY2OTBlOGFhYmM1YmVmYTIxNzM0NmFi
Y2Q1NzQwHhcNMjYwNDE3MDUwMTA0WhcNMjYwNDE4MDUwMTA0WjAzMTEwLwYDVQQD
Eyg4NTVkZDg2NjdiNjQzZWJhYTM4OTc3YWVhNTczODg0ZmQ2Y2I2MDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7AtWB0g/u32z+tbKgZrbpYZpTHf
tNTXfh4X868wunFsRU5wc1rQCavT68DH+3vUX4KALJwptEyd7sXv5MHVKGNHQV3N
74auAbwS/JvdKddGJiB5SscTTsni8FW21AqHNooKHQeplX3R2f2b7LaSdesY5WL2
bUnJzwSiFw6rPwLkTqZXPEhvd6IF4+ekKuFAWDd4RxaLUKRGyqpI9o89lNqoo2q9
8wszBAy8NFc9UZ/mb6MJdGxRuXGkk81b6u06a9lkm5tLK8zFDqJIN0RPY3S/DKGy
pk+s496y243aDUiwDTXO4kSVOu5GnEyTg3i4u2ERyZEMRu6Qoi6FpIuGIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVd2GZ7ZD66o4l3rqVziE/Wy2AEMB8GA1UdIwQY
MBaAFCgRgY+VvmaQ6Kq8W++iFzRqvNV0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JHQmo1Vy1acERvcXJ4Yjc2SVhOR3E4MVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS84OWU2NTUtYmQ3OS00OTg0LWI2NDkt
NDJlNTdlZjYwMDBhLzEvS0JHQmo1Vy1acERvcXJ4Yjc2SVhOR3E4MVhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS84OWU2NTUtYmQ3OS00OTg0LWI2NDktNDJlNTdlZjYwMDBh
LzEvS0JHQmo1Vy1acERvcXJ4Yjc2SVhOR3E4MVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA5cY7eOY
cShHllonumJYz+OynlzzkcQfX1uWmuTeUHU5niGm8Su/1tNFd2nmNyRxR/8R77ug
roTU3AhLbf7995D9I+tEIGQUOnKCT+g0pQKCiw47Au3LZO7UX+b49r5JGhwm4WOI
s/8jUkTE+/UjsBbssaey+Z63ejb4jbD3fX1tslhCGQ+4UH+YRNBATj/TSX4uVW4l
vozbE3jEtaWwNy3EIDjP8WOHUzV/P6kpplgH9wGpm4d6w1Ndd9uyL7teWBiTPxk4
nRJP8+8ZcP4Jmi98ZHg6pO6rOB28D/oJCzYUbVwjUABqR/7kWPHwIDEhGMDi7pGW
bhh94hFoCLjbXA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:32 2026 by rpki-client