Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
File: Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft (raw, json)
Hash identifier: 57a2HB8Rue5hfE2fAewRx+vwYT6Lh/ws/Cp2Xj5nIkM=
Subject key identifier: D2:9C:04:7D:67:ED:CD:BF:2C:EC:A8:B7:9B:79:A0:08:70:C1:14:E6
Authority key identifier: 29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0
Certificate issuer: /CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0
Certificate serial: 019F8E6BB3EFDFF6590CBD3FE66E3B87D8C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
Manifest number: 0317
Signing time: Thu 23 Jul 2026 10:00:50 +0000
Manifest this update: Thu 23 Jul 2026 10:00:50 +0000
Manifest next update: Fri 24 Jul 2026 10:00:50 +0000
Files and hashes: 1: 6DNwF30LCDUKZspUSvniSglbK78.asa (hash: ct9NJHmgg+w+Ve0ZATSvPFBlaRSn0jlVfWPGuCu05Cw=)
2: Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl (hash: w2scVe6lBwykI3lhMQ/lww4dPaNt+n05Pt1WckAXnTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:6b:b3:ef:df:f6:59:0c:bd:3f:e6:6e:3b:87:d8:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b8755bc53ef17746bd296ef28ba900cd98fbe0
Validity
Not Before: Jul 23 10:00:50 2026 GMT
Not After : Jul 24 10:00:50 2026 GMT
Subject: CN=d29c047d67edcdbf2ceca8b79b79a00870c114e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:8d:a2:3d:7a:c2:8b:d8:12:54:7b:af:e8:
ab:d2:8b:9c:37:2e:27:2e:c6:cc:f9:03:4a:69:84:
30:58:1b:cb:ee:9c:c5:de:1b:14:33:4a:27:90:b7:
5b:4e:76:50:f5:35:7b:c9:8d:3e:ca:37:e7:cb:4f:
ca:43:6a:27:6a:50:43:44:bf:d6:01:5d:84:3b:a8:
3b:6c:1c:d5:95:e7:4d:19:81:9b:0c:64:0c:54:a7:
a6:26:82:aa:20:72:0a:07:fb:4c:a4:89:cf:3f:1b:
26:df:be:bb:87:a4:3d:44:a4:99:7b:10:97:91:44:
71:93:64:b9:fc:54:65:18:d1:5e:17:0f:01:f7:1b:
f1:8f:6d:74:b5:7f:f4:5f:2c:cf:f1:e1:2d:cf:46:
1e:e0:c1:08:45:b8:f3:67:3d:32:17:f3:fa:02:2a:
58:74:77:bb:96:2c:75:69:72:28:2d:8b:5b:b1:09:
3a:9b:af:55:63:c1:0f:7f:11:06:f1:cc:5e:30:dc:
20:92:7e:0a:0f:37:6c:bc:22:20:c3:c0:4c:9c:54:
45:06:db:c6:46:68:e1:58:7e:b1:09:97:8d:f6:18:
c1:48:d1:8b:b9:15:9c:1a:7b:57:ef:c6:eb:ab:a8:
87:2a:91:75:34:ec:83:e9:b6:63:47:a1:87:b6:98:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:9C:04:7D:67:ED:CD:BF:2C:EC:A8:B7:9B:79:A0:08:70:C1:14:E6
X509v3 Authority Key Identifier:
keyid:29:B8:75:5B:C5:3E:F1:77:46:BD:29:6E:F2:8B:A9:00:CD:98:FB:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kbh1W8U-8XdGvSlu8oupAM2Y--A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/068231-7cfc-4068-86b5-9ab4ad8b4ff4/1/Kbh1W8U-8XdGvSlu8oupAM2Y--A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bc:c3:64:aa:23:10:77:6d:35:d5:53:77:ad:1a:e3:69:40:
bf:0d:02:48:8e:31:ed:d4:64:39:11:cb:6d:d8:b8:00:71:5e:
f9:92:bb:dc:f2:67:70:82:cd:84:67:5a:f3:4f:d8:ef:e8:55:
5b:3f:26:df:a1:c0:af:c3:ed:d2:fd:4e:9a:80:05:69:3b:64:
7d:6a:93:fa:a0:d1:5a:75:9d:00:c7:fb:72:c1:2e:23:4d:71:
9c:9a:ea:77:b3:7e:68:df:71:1d:98:b8:d4:75:0e:bd:d9:f0:
86:f4:4c:ea:60:96:42:69:4d:4c:19:34:bb:fa:e8:c1:d3:01:
a8:27:5a:9c:64:08:c5:65:97:99:61:c4:5d:f8:40:1c:1f:da:
d2:e8:b4:35:4b:4a:5f:02:56:0e:c5:99:82:fc:1b:1e:3e:99:
8b:24:29:9d:30:78:21:ba:97:be:e3:19:d9:f3:ed:6a:ed:fb:
74:21:a8:57:99:77:c9:63:b9:5c:63:01:bd:df:b6:4e:df:2f:
5d:de:5f:cb:9b:41:45:1e:66:e0:26:3d:c7:28:ca:23:d2:2e:
5f:23:bb:f1:81:83:f1:1f:c4:c0:8e:96:26:8c:50:ed:bb:2a:
ab:57:d0:80:d1:16:2f:b8:a2:77:2a:b7:31:5c:6c:6f:6a:a6:
db:1f:72:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:57 2026 by rpki-client