Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
File: KbOnF2ZaETfpncj60i4-f5jbiXM.mft (raw, json)
Hash identifier: kbkQB+WTE3oD5j4jwqRcNZwQXiT6HACBXdBrQjoqr6U=
Subject key identifier: 67:37:20:EA:CD:22:26:39:73:53:CB:08:77:62:E1:F8:EB:62:FC:BE
Authority key identifier: 29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
Certificate issuer: /CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Certificate serial: 01A0DE058778479B64424CA017CCFEE5F01A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
Manifest number: 1A78
Signing time: Sat 26 Sep 2026 14:01:39 +0000
Manifest this update: Sat 26 Sep 2026 14:01:39 +0000
Manifest next update: Sun 27 Sep 2026 14:01:39 +0000
Files and hashes: 1: KbOnF2ZaETfpncj60i4-f5jbiXM.crl (hash: h1k/4PgeMQaE+xGydy5BCP8bsxB2NGspjRzDFy+22/k=)
2: Ty9RnsnK3EDnysBvDikYp04oggo.roa (hash: oWmmAPgiMnRBuVQF4Wy8CU51nd17TmIJOxZ3k8HDTIo=)
3: VmNdh6laZxyVCC_g82mHnoN0sjg.roa (hash: fCIZoEHtubiL+1CEYbmHMAzOgcDhgRWMLUT6hfUtnUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:de:05:87:78:47:9b:64:42:4c:a0:17:cc:fe:e5:f0:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29b3a717665a1137e99dc8fad22e3e7f98db8973
Validity
Not Before: Sep 26 14:01:39 2026 GMT
Not After : Sep 27 14:01:39 2026 GMT
Subject: CN=673720eacd2226397353cb087762e1f8eb62fcbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3b:c6:4f:0c:f2:e2:41:40:5f:c1:ab:69:68:
e1:a3:72:ff:3c:5b:12:52:f7:2d:9c:f9:e9:15:4f:
47:c8:84:e9:35:3f:d1:78:63:a8:61:b7:6b:2e:75:
3c:07:92:44:d0:eb:46:1e:1f:a5:b6:e8:89:cc:e7:
f0:e1:71:2c:92:ce:8b:33:26:aa:4b:60:55:0f:60:
8b:4c:00:bf:9f:fa:71:bc:83:14:12:26:9b:62:47:
16:78:39:f1:2b:c4:a2:55:01:2b:15:09:10:ae:a5:
23:b4:e0:e0:61:da:32:b6:97:95:8a:43:44:b8:20:
6b:e1:32:da:ff:7e:05:98:6e:fb:55:b5:81:9f:32:
3b:bc:23:14:b2:c9:ad:79:96:f7:29:24:f9:f3:48:
84:19:93:b3:16:0c:94:84:20:87:15:ea:df:f0:e2:
48:11:44:76:18:90:7d:a4:ea:5f:2b:9e:e9:3b:3a:
eb:73:5c:d5:52:fa:04:c3:f7:85:f2:64:ef:91:c1:
4d:84:8b:98:22:78:3b:2f:0b:81:d4:ed:d0:d4:de:
b9:11:b9:49:2c:0d:95:b6:7d:31:98:e1:2c:85:98:
fb:39:b8:7f:1f:a9:fe:03:02:90:3c:ac:c1:d3:48:
02:1b:bf:98:c5:71:f1:b2:d8:ba:79:b8:41:2c:75:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:37:20:EA:CD:22:26:39:73:53:CB:08:77:62:E1:F8:EB:62:FC:BE
X509v3 Authority Key Identifier:
keyid:29:B3:A7:17:66:5A:11:37:E9:9D:C8:FA:D2:2E:3E:7F:98:DB:89:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KbOnF2ZaETfpncj60i4-f5jbiXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/acd28e-52ae-4ac9-b028-669f7a761631/1/KbOnF2ZaETfpncj60i4-f5jbiXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d6:d8:af:df:d3:80:e8:0e:c3:7e:4a:b0:a9:3d:36:9d:43:
35:f8:4a:d7:88:e1:b6:b6:08:41:3a:2d:4d:38:d4:87:5f:94:
0f:cd:84:1a:9a:ce:3e:07:a3:5b:8a:72:cd:1b:64:35:ec:96:
b6:b2:1e:5e:6f:ce:26:6d:e7:6c:69:87:7c:f4:f7:9c:9e:51:
03:51:d6:da:4b:7d:90:32:92:af:ee:3f:90:5e:3e:36:c0:43:
c1:0d:21:60:c3:02:93:1f:0c:69:ce:9c:18:05:2d:8e:aa:cc:
26:95:64:84:fc:fe:5c:ec:0d:a3:c6:f2:d9:b1:a1:1c:73:fb:
ea:59:29:99:69:e6:dd:a9:7c:67:f2:7c:67:79:c5:b5:ae:43:
2f:b0:c8:02:8b:d5:a8:77:c7:44:4c:4e:9d:04:99:6b:3d:79:
f8:0d:b2:9a:a2:c7:31:d3:7e:cc:98:51:36:d8:06:77:11:18:
63:33:18:65:96:d2:18:1f:81:51:66:91:c3:53:76:8b:78:54:
b9:7a:ee:a3:12:d5:c0:17:f6:97:03:8c:c2:53:58:4d:70:de:
e5:33:38:7f:9f:72:71:84:23:67:85:f2:27:30:2f:ea:78:30:
fa:b5:22:ab:ea:55:da:83:f5:01:29:7e:8f:65:f0:66:f6:c8:
b5:f3:64:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:43:04 2026 by rpki-client