Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
File: KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft (raw, json)
Hash identifier: 4qwDdSbnpSUCC73M6A5U4H0QzONXxqjPJGnabfFkypM=
Subject key identifier: DC:29:48:FF:E1:14:40:0C:EB:A7:A3:6B:36:DC:90:1E:69:04:1A:C5
Authority key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
Certificate issuer: /CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Certificate serial: 019D2A0486116DA60A297954A1608B4F47A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 12:00:32 +0000
Manifest this update: Thu 26 Mar 2026 12:00:32 +0000
Manifest next update: Fri 27 Mar 2026 12:00:32 +0000
Files and hashes: 1: 9rvSIJG4GAUEEFzw4LIIEomRjLs.roa (hash: vIaPvb+ycmPmGlSHBmqVI505OuvAOEDswUw9t3/PGlc=)
2: KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl (hash: 4lWLvmxHs3/oVEPeskegxutBSwF4/XSVVvbQZoUU88U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:86:11:6d:a6:0a:29:79:54:a1:60:8b:4f:47:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Validity
Not Before: Mar 26 12:00:32 2026 GMT
Not After : Mar 27 12:00:32 2026 GMT
Subject: CN=dc2948ffe114400ceba7a36b36dc901e69041ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:d3:82:66:cb:2f:2f:cb:36:a5:23:15:97:
72:35:83:d9:4d:bc:ae:0c:12:68:50:4c:57:a5:8f:
48:43:0c:03:99:05:93:79:0b:50:2d:b5:bb:b9:7c:
6d:24:2b:b3:01:78:7a:33:c9:c4:dc:f4:e4:b3:cc:
9b:27:6f:a8:ee:10:91:1d:f6:08:9b:ff:c3:58:ae:
78:8e:66:16:28:da:ab:bc:c5:53:4f:a3:46:18:44:
ff:68:71:1e:d4:a8:1f:6b:89:8d:2f:69:64:fe:5a:
5b:92:bd:4e:fc:69:03:5d:a8:65:2e:7e:c4:e9:3f:
f2:35:22:6c:7d:1e:b6:f6:ab:13:4a:81:d4:d6:39:
29:87:ac:df:c1:6f:fe:07:91:d1:3c:13:88:2e:dd:
07:26:b9:9b:b9:b7:4d:9b:d4:4f:93:81:78:24:00:
22:34:6b:3c:f5:c9:d8:e8:74:ad:fa:da:a4:eb:0c:
7f:d2:c0:62:45:27:b4:29:e0:1a:5e:a3:aa:23:67:
88:22:55:8c:c1:1e:4e:df:2a:2f:e1:b5:f4:eb:3b:
46:6c:69:ee:a8:49:f1:a9:a7:f2:ad:d1:49:24:7f:
da:07:b7:50:84:23:15:c7:e8:34:4d:cb:fd:2b:a0:
43:13:15:c9:dc:fa:71:71:58:85:79:c1:98:94:14:
fa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:29:48:FF:E1:14:40:0C:EB:A7:A3:6B:36:DC:90:1E:69:04:1A:C5
X509v3 Authority Key Identifier:
keyid:28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:38:fd:09:ec:5a:41:1a:fa:94:e0:52:73:37:3b:e6:88:12:
bc:4c:64:e5:10:72:58:c2:10:54:aa:c0:38:25:a6:22:ec:ba:
48:3e:0c:28:a6:42:56:f9:e7:79:fd:b3:8b:94:2e:b9:6f:b7:
e7:98:ef:0a:79:d8:88:32:82:f6:30:8a:85:61:3c:85:55:f8:
9f:6f:3c:ed:99:b0:2f:c6:6e:b0:e2:29:ba:4a:10:8d:86:6c:
a3:72:e8:04:21:45:c3:68:a2:10:44:2a:70:ac:81:e7:64:b9:
83:8f:47:25:e7:23:ae:c5:6a:87:17:88:da:d2:09:fa:71:50:
40:f5:c4:e4:46:d4:e5:5d:cc:81:7a:c6:07:a5:e5:ad:b6:e7:
2c:8d:ac:26:f7:be:4a:a3:5a:67:db:98:8a:97:bd:5d:aa:89:
82:45:ee:e9:66:1d:fe:72:ab:7c:a6:78:71:40:91:29:11:3f:
13:46:bf:7b:e3:ed:50:22:cc:ad:14:8d:2f:c7:eb:ff:04:a6:
e7:2a:b4:b4:50:dc:0b:fd:66:41:aa:65:a6:b0:18:03:cc:bc:
bd:0c:07:3e:23:ff:6b:da:0b:7b:cb:1b:6f:f5:40:81:b5:aa:
77:99:a6:84:99:de:e6:39:07:57:56:20:a9:47:a6:42:07:b8:
d7:09:eb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:16 2026 by rpki-client