Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
File: KBZKV1f91XJaYIRPKufvc7EHpMA.mft (raw, json)
Hash identifier: XsvKKpxjyVadPfde8OYjirrEJxSOuGF94UI6rJXKJgw=
Subject key identifier: 52:FB:0E:EC:91:DE:2C:A9:3A:43:73:CB:26:39:F1:4C:2C:C5:AD:76
Authority key identifier: 28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
Certificate issuer: /CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Certificate serial: 019E216D38DA2851265A34328DE59570A3A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 13:01:06 +0000
Manifest this update: Wed 13 May 2026 13:01:06 +0000
Manifest next update: Thu 14 May 2026 13:01:06 +0000
Files and hashes: 1: 744IgXzHRA7i_KaZPXPHUM0eSxg.roa (hash: eqDQW7MUEHWcKNovBhhfViXrkME1qg3sj67Td6hUu3A=)
2: KBZKV1f91XJaYIRPKufvc7EHpMA.crl (hash: vrmoVyWy+NEFTtd+jcOcgfq/3pH5H/CqMUErHG1E8sk=)
3: Q9Hzj6xYvSgvTk1AgA8SSFlzHjw.roa (hash: zRP8z6fqTAhTFBNH4EqdLJ2KR4AhqadHe/YBKRqTMqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:38:da:28:51:26:5a:34:32:8d:e5:95:70:a3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Validity
Not Before: May 13 13:01:06 2026 GMT
Not After : May 14 13:01:06 2026 GMT
Subject: CN=52fb0eec91de2ca93a4373cb2639f14c2cc5ad76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:09:a1:e4:f7:90:3e:6b:02:b4:fc:32:2d:
8d:b0:44:f3:49:52:8a:7a:ef:46:0b:41:ba:47:bf:
dc:f0:96:c4:e0:74:ad:db:d0:6d:c4:77:17:60:5b:
01:e2:56:22:84:ce:5d:c1:1c:33:da:0c:95:57:2b:
67:1f:f2:f7:78:d2:aa:55:7c:92:12:82:e1:02:e1:
3d:96:67:bb:7a:e3:38:c8:dd:b7:69:2c:b2:04:55:
a3:c5:af:31:9c:7b:54:1b:91:1c:a9:59:cb:d5:b3:
19:b7:00:14:d4:fe:43:ab:f8:25:cd:2f:32:17:70:
a9:42:ba:2f:12:12:9a:65:d1:e3:54:32:99:ee:18:
31:5f:2d:3c:16:e3:fb:66:1c:36:2f:79:60:0f:23:
4c:12:4a:4e:68:0e:94:85:83:f9:77:17:be:0a:3c:
90:a0:87:5e:7e:b0:1d:23:c3:15:42:5a:b4:28:96:
bc:e9:91:33:fc:c9:a9:39:4f:b5:bd:ce:db:ac:9f:
39:05:f5:0d:be:79:d8:e1:6f:a9:ba:e3:21:c2:8f:
f3:84:46:5b:1e:8c:90:a1:4f:26:25:15:8b:9c:30:
3a:e2:8e:ee:90:c0:f6:d7:c9:df:34:bc:bc:33:21:
f9:fe:16:05:71:e0:c0:2f:d4:a6:5c:22:3f:c0:5e:
5a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:FB:0E:EC:91:DE:2C:A9:3A:43:73:CB:26:39:F1:4C:2C:C5:AD:76
X509v3 Authority Key Identifier:
keyid:28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d5:95:93:af:a4:f7:27:9a:47:ed:7a:c5:b7:ca:b1:4b:0a:
fa:5b:f5:4f:7c:1d:b2:94:ab:41:3d:49:6b:aa:f7:b4:88:da:
ed:17:19:a1:3c:0c:91:f8:4e:36:88:fb:19:6b:58:ea:7f:f6:
da:7a:a6:0e:e3:de:93:67:34:24:a0:91:d6:e0:e4:f8:3a:8c:
57:ae:a5:d6:ea:ef:61:bf:61:6a:c8:5c:ad:59:57:ae:13:a6:
76:b6:2c:dd:b7:b0:c9:89:21:5c:84:40:aa:b3:43:bb:12:23:
86:0a:c6:34:da:a2:8f:41:e1:bb:a5:ad:34:e3:af:55:17:e5:
c2:4d:97:56:ae:d7:60:29:06:ba:37:3b:13:7e:2a:7e:34:17:
6c:e2:06:f4:19:93:14:d3:22:64:40:79:49:57:ef:53:b6:b4:
e9:21:eb:be:8f:e9:4c:3a:0c:31:79:b0:3c:95:4a:bf:62:de:
39:61:a7:47:34:70:dc:af:d5:35:c4:d0:d8:0b:51:ef:73:f9:
df:1b:a4:4e:51:d0:b3:b1:de:4d:10:51:af:c1:d5:32:01:6b:
54:c6:48:97:88:86:97:b0:6a:fe:69:a0:ed:a5:0e:ca:50:b8:
76:14:b1:08:c5:97:7c:ad:1f:42:f6:0d:a5:3a:06:4f:29:44:
d9:42:32:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:18:15 2026 by rpki-client