Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
File: Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft (raw, json)
Hash identifier: nx1pw61k8UAMdNEb0XVKp83KMEZA6WgxySJJnZhlHwU=
Subject key identifier: 8B:06:AF:BF:11:35:F9:10:A6:28:44:90:43:3A:8E:AA:16:3E:96:38
Authority key identifier: 29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0
Certificate issuer: /CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0
Certificate serial: 01A0F3B208633F8004461C735379598F9CA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
Manifest number: 03D0
Signing time: Wed 30 Sep 2026 19:02:06 +0000
Manifest this update: Wed 30 Sep 2026 19:02:06 +0000
Manifest next update: Thu 01 Oct 2026 19:02:06 +0000
Files and hashes: 1: 6DNwF30LCDUKZspUSvniSglbK78.asa (hash: ct9NJHmgg+w+Ve0ZATSvPFBlaRSn0jlVfWPGuCu05Cw=)
2: Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl (hash: QhDsgzIZdxnkRimsK63YyqQQWqM0lbXJ2j1OhCLkb08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 19:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:b2:08:63:3f:80:04:46:1c:73:53:79:59:8f:9c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0
Validity
Not Before: Sep 30 19:02:06 2026 GMT
Not After : Oct 1 19:02:06 2026 GMT
Subject: CN=8b06afbf1135f910a6284490433a8eaa163e9638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c8:a3:22:33:48:80:33:a3:59:0c:23:ae:c6:
02:72:1c:ad:94:6b:04:65:1f:1d:dc:24:c9:1b:9f:
99:60:9a:62:3d:20:0c:0e:1e:6a:cf:6e:4c:e7:9a:
bc:07:7e:97:41:d5:90:6f:a0:f0:1c:c1:60:bd:14:
48:33:c4:3e:e5:df:2b:42:d3:29:53:59:a3:71:92:
bf:fc:ea:f4:23:82:fc:39:72:9a:ad:05:21:3d:f1:
5e:c8:72:a2:ea:f9:ec:7f:4c:52:9a:c9:d1:95:f3:
5a:1b:e1:cd:d6:f5:56:13:e5:56:1f:28:f2:f1:8b:
16:6e:6d:0d:e4:53:0d:17:de:a4:f0:8a:7b:36:76:
0e:e1:60:7d:39:8b:65:e4:e3:a3:bf:1c:c8:57:19:
8d:b7:62:84:3f:a7:ce:6f:72:09:49:9a:a3:e3:9a:
23:c7:f3:db:ff:8e:da:e3:be:93:d3:47:9d:24:26:
be:56:60:d1:5c:eb:0a:da:37:a8:c4:e0:54:b9:13:
ee:68:87:ef:f5:fb:a2:93:ea:1a:f7:eb:d2:a8:ba:
60:25:e8:69:b7:ef:36:06:31:ea:da:55:cd:89:52:
5a:3e:75:b3:b9:6c:71:ae:98:f0:a6:f4:a4:00:8b:
f7:c2:54:dc:88:a9:6c:7c:9b:8a:d0:1c:41:18:47:
d3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:06:AF:BF:11:35:F9:10:A6:28:44:90:43:3A:8E:AA:16:3E:96:38
X509v3 Authority Key Identifier:
keyid:29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:21:95:e0:95:b0:6a:2a:b1:4b:96:ff:83:ef:59:f4:ab:e9:
66:76:b5:2c:50:1c:ef:7e:4d:43:84:70:7a:ea:24:6d:03:18:
da:b6:36:d5:2a:92:ac:5f:d9:af:4d:b6:58:73:25:47:de:17:
9f:70:73:be:a5:cd:a3:f3:53:b6:52:cd:32:30:ec:f6:bf:ca:
0e:8e:ae:da:c2:23:64:14:f9:cf:8f:11:cb:e9:e2:ca:6b:93:
fe:45:ce:4e:de:18:bd:1c:1b:df:e0:6c:18:6e:5f:76:3b:ed:
6a:02:9b:32:63:70:b1:64:24:b3:cf:ff:5d:7a:4b:d1:47:d4:
60:3e:ed:dd:a2:d2:8d:9b:c8:2c:d2:b4:e6:e1:66:8b:12:33:
f7:59:09:55:8a:03:a5:61:27:f9:d2:0c:97:9c:78:15:5b:4e:
34:65:5d:23:64:b2:70:86:47:c3:8f:02:e2:8b:c9:47:8a:1a:
37:1d:15:7b:92:52:55:e9:d7:05:a8:9d:c0:96:1b:c3:b2:1a:
60:06:ed:a8:44:3f:b9:a6:85:45:79:66:89:03:8f:62:24:5e:
07:d9:e5:89:6d:53:86:ed:4b:9d:1b:bb:96:58:63:02:57:3a:
88:92:e4:51:0a:0a:db:ae:4d:57:f8:84:ba:6e:68:c4:fb:1f:
db:0b:30:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 10:42:00 2026 by rpki-client