Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
File: Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft (raw, json)
Hash identifier: 1IoexUaKiQHQE7hctGAdJ3d2RIxjKL2WzZlu48wNdZE=
Subject key identifier: 2C:60:AF:23:74:E5:11:B2:8E:5E:C7:D2:D7:7B:6F:20:06:2C:8B:53
Authority key identifier: 29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0
Certificate issuer: /CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0
Certificate serial: 01A1DF4C1A17BCF273A16C9BBBF552156E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
Manifest number: 044A
Signing time: Sun 15 Nov 2026 13:01:08 +0000
Manifest this update: Sun 15 Nov 2026 13:01:08 +0000
Manifest next update: Mon 16 Nov 2026 13:01:08 +0000
Files and hashes: 1: 6DNwF30LCDUKZspUSvniSglbK78.asa (hash: ct9NJHmgg+w+Ve0ZATSvPFBlaRSn0jlVfWPGuCu05Cw=)
2: Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl (hash: QgvrVL/+DTCeGzRLmSpRSqzkCXL2cCUDGQdSRhs5sig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:1a:17:bc:f2:73:a1:6c:9b:bb:f5:52:15:6e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0
Validity
Not Before: Nov 15 13:01:08 2026 GMT
Not After : Nov 16 13:01:08 2026 GMT
Subject: CN=2c60af2374e511b28e5ec7d2d77b6f20062c8b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:0b:a3:c6:69:b7:76:71:96:39:74:9f:82:
19:96:70:da:1a:b2:5f:ae:a0:6f:3d:61:f8:9d:a3:
76:45:2f:5f:5a:95:8e:43:f0:1e:21:0f:77:96:a7:
cc:20:c1:d0:25:99:cd:54:f8:12:b3:26:43:7c:e3:
44:e9:8d:99:25:56:9e:e6:d2:64:a4:94:59:60:11:
cc:c9:1e:30:9e:45:2f:d6:30:d8:f8:6f:d6:43:e6:
dd:15:92:d6:82:21:8b:e4:0f:31:0d:67:b1:02:2b:
a6:fd:5c:61:9b:67:d5:38:42:bb:06:bf:4b:bd:21:
64:3c:fa:d5:74:ca:af:34:e7:5a:c7:35:38:f9:4a:
62:1b:e6:81:f9:54:7a:e2:f9:7b:43:b3:59:00:7c:
d6:4b:8b:e5:6c:e5:94:df:19:14:e4:6c:27:d1:15:
a2:1d:64:5a:58:63:37:82:8a:e0:e1:15:eb:b4:58:
e3:b8:6e:35:69:51:5d:49:be:c0:11:ae:cc:7d:53:
07:17:77:05:41:f6:35:6e:5c:e2:cc:2c:b5:2d:34:
5a:2d:c8:a5:f2:3b:42:a8:c0:0a:73:31:47:e9:ba:
1b:a4:6f:3a:41:48:6a:98:04:f9:b7:78:8b:fc:52:
09:a4:47:0e:b9:82:92:77:bf:2b:ac:be:dd:3e:61:
d5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:60:AF:23:74:E5:11:B2:8E:5E:C7:D2:D7:7B:6F:20:06:2C:8B:53
X509v3 Authority Key Identifier:
keyid:29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b4:bf:bc:c9:a8:52:5c:db:54:2e:60:54:ac:98:de:c3:61:
3b:c3:4c:63:f9:2e:e2:36:46:68:b8:e3:40:db:5e:1a:a2:3e:
1a:8c:ec:2c:23:5a:ab:9c:96:a1:75:13:b2:b0:b0:4c:0c:3e:
28:26:ac:98:a7:d9:80:09:bc:de:6b:32:0f:64:a0:b2:68:2d:
33:e9:0e:de:35:42:a7:3f:c6:f6:a8:7f:4d:68:ef:8d:fa:ee:
32:da:c7:58:ad:57:38:ca:ff:6b:8f:16:96:89:6c:95:63:7e:
9f:47:28:af:aa:40:e9:a9:cb:ad:5e:9b:88:f0:45:3c:85:95:
2f:24:6e:32:68:29:de:33:7e:e0:6f:bc:00:61:ac:e9:77:01:
55:77:07:89:32:d5:e0:37:36:9a:26:7d:dd:b8:cb:48:56:c4:
b6:56:de:d7:2d:62:87:1f:1b:5d:26:7c:e0:0b:cf:77:3f:d8:
fe:c1:df:ee:24:17:98:25:e8:05:9f:be:ce:6b:c3:9c:f4:d8:
20:4a:49:b5:87:50:e8:57:79:27:2e:7e:05:2d:62:fb:30:b6:
20:35:ce:c7:75:b0:ff:10:1a:dd:ea:8b:b8:ef:1f:2b:17:13:
3b:9c:af:41:59:c4:e2:f3:d3:03:84:19:e6:e7:b4:98:50:d5:
35:5f:c0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:19:51 2026 by rpki-client