Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
File: KBZKV1f91XJaYIRPKufvc7EHpMA.mft (raw, json)
Hash identifier: YV2DX3Lh7NL0z9LeAtLOkmjVqgzp/AJ7k9ySvrgm2XQ=
Subject key identifier: 19:A7:A4:95:80:77:13:20:24:80:B4:03:B1:9D:0F:17:39:C5:8B:29
Authority key identifier: 28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
Certificate issuer: /CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Certificate serial: 01A0F59FD1A9FC09B4BD84BC03DB03F78E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
Manifest number: 1A7D
Signing time: Thu 01 Oct 2026 04:01:26 +0000
Manifest this update: Thu 01 Oct 2026 04:01:26 +0000
Manifest next update: Fri 02 Oct 2026 04:01:26 +0000
Files and hashes: 1: 744IgXzHRA7i_KaZPXPHUM0eSxg.roa (hash: eqDQW7MUEHWcKNovBhhfViXrkME1qg3sj67Td6hUu3A=)
2: KBZKV1f91XJaYIRPKufvc7EHpMA.crl (hash: Q1KgJlG21PCRLu+KeGzYQsI6e2oNivmW2cbQm2o8BUc=)
3: Q9Hzj6xYvSgvTk1AgA8SSFlzHjw.roa (hash: zRP8z6fqTAhTFBNH4EqdLJ2KR4AhqadHe/YBKRqTMqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:9f:d1:a9:fc:09:b4:bd:84:bc:03:db:03:f7:8e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Validity
Not Before: Oct 1 04:01:26 2026 GMT
Not After : Oct 2 04:01:26 2026 GMT
Subject: CN=19a7a495807713202480b403b19d0f1739c58b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:05:c1:51:69:3a:fb:26:a3:18:fb:b6:09:
a7:5c:e1:b5:78:60:f2:a8:42:22:55:ac:69:43:ce:
71:09:72:0a:24:0b:e2:9f:61:83:9d:3c:7c:2e:c3:
80:db:73:d2:4f:8d:01:cf:1c:d9:88:61:60:cd:14:
15:6c:f5:29:5e:a6:5b:80:e2:38:f3:df:85:c0:d3:
9b:48:e2:77:87:9b:2e:d0:26:f5:73:af:a2:15:63:
55:66:cb:b9:76:87:24:0d:c6:a2:99:df:a5:c6:d7:
a1:cc:32:67:72:ad:e8:9b:52:fb:5a:70:9d:06:36:
a1:b9:f5:e6:cd:f1:f7:0c:91:df:06:ae:3c:0f:9b:
ca:90:1c:2c:49:a1:a4:4f:7b:9b:ce:31:3f:26:31:
1c:bc:d5:15:a4:ef:f5:43:7a:f7:ec:48:f5:f4:ea:
06:cf:74:3d:1f:6b:54:21:e1:28:2d:66:fb:d2:58:
c1:38:71:f2:ae:76:2f:a7:50:c1:b1:9b:3e:0d:93:
2e:51:c7:33:60:15:ef:7c:68:0a:03:ba:07:b5:fe:
7a:c9:54:43:07:49:9d:f5:95:56:f5:25:7f:ce:c6:
83:48:db:07:5c:be:27:b4:00:15:6e:60:15:ed:a8:
15:3d:e8:0d:ca:de:a0:6f:8e:f0:df:67:15:f7:c0:
c4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A7:A4:95:80:77:13:20:24:80:B4:03:B1:9D:0F:17:39:C5:8B:29
X509v3 Authority Key Identifier:
keyid:28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:58:1e:dc:95:a4:ae:1c:e7:1e:2a:1e:10:9d:da:58:7b:19:
e2:c4:a3:f3:0b:2d:7c:b6:a1:bb:5e:46:fe:d5:6e:67:6d:bb:
58:73:42:17:7f:86:e9:70:fa:26:f5:5b:ef:63:35:54:67:a5:
90:0e:71:02:86:7c:26:ce:f0:b7:58:ef:29:c7:8d:38:a1:34:
ae:af:2d:ca:de:de:78:f1:45:04:69:10:07:96:e5:a8:57:07:
44:69:bc:1d:8d:a0:70:b2:8a:34:c0:a9:ef:fe:34:c6:54:66:
78:ee:63:7c:b9:de:20:ac:f1:75:9d:60:d7:47:d2:20:6a:af:
50:d5:d9:5a:83:c4:dd:1e:c6:1e:84:ba:48:77:15:32:8b:73:
a3:e4:db:ff:ab:fb:b5:16:97:75:cd:a4:d2:55:95:af:ae:50:
76:93:09:f0:18:b4:f2:6c:c3:7a:fd:5e:f0:36:8f:10:0b:f8:
35:4c:5f:59:b1:7f:02:5a:80:fc:8f:ad:c1:57:5a:fc:ac:81:
b5:1e:af:74:4f:e7:e6:89:08:7c:04:89:fd:2a:fe:44:dc:ba:
01:71:88:58:c9:27:61:19:4b:4e:37:88:bd:91:a7:08:35:c0:
e7:4e:85:59:67:03:e2:fa:58:56:5f:9d:a9:86:d8:fa:54:c2:
fd:fa:f1:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD1n9Gp/Am0vYS8A9sD944pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTY0YTU3NTdmZGQ1NzI1YTYwODQ0ZjJhZTdlZjczYjEw
N2E0YzAwHhcNMjYxMDAxMDQwMTI2WhcNMjYxMDAyMDQwMTI2WjAzMTEwLwYDVQQD
EygxOWE3YTQ5NTgwNzcxMzIwMjQ4MGI0MDNiMTlkMGYxNzM5YzU4YjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3wFwVFpOvsmoxj7tgmnXOG1eGDy
qEIiVaxpQ85xCXIKJAvin2GDnTx8LsOA23PST40BzxzZiGFgzRQVbPUpXqZbgOI4
89+FwNObSOJ3h5su0Cb1c6+iFWNVZsu5dockDcaimd+lxtehzDJncq3om1L7WnCd
BjahufXmzfH3DJHfBq48D5vKkBwsSaGkT3ubzjE/JjEcvNUVpO/1Q3r37Ej19OoG
z3Q9H2tUIeEoLWb70ljBOHHyrnYvp1DBsZs+DZMuUcczYBXvfGgKA7oHtf56yVRD
B0md9ZVW9SV/zsaDSNsHXL4ntAAVbmAV7agVPegNyt6gb47w32cV98DE1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmnpJWAdxMgJIC0A7GdDxc5xYspMB8GA1UdIwQY
MBaAFCgWSldX/dVyWmCETyrn73OxB6TAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JaS1YxZjkxWEphWUlSUEt1ZnZjN0VIcE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NTUzNWItZTYzMC00NTdmLThhMDEt
YWVhZTViYmMzOTIwLzEvS0JaS1YxZjkxWEphWUlSUEt1ZnZjN0VIcE1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85NTUzNWItZTYzMC00NTdmLThhMDEtYWVhZTViYmMzOTIw
LzEvS0JaS1YxZjkxWEphWUlSUEt1ZnZjN0VIcE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVge3JWk
rhznHioeEJ3aWHsZ4sSj8wstfLahu15G/tVuZ227WHNCF3+G6XD6JvVb72M1VGel
kA5xAoZ8Js7wt1jvKceNOKE0rq8tyt7eePFFBGkQB5blqFcHRGm8HY2gcLKKNMCp
7/40xlRmeO5jfLneIKzxdZ1g10fSIGqvUNXZWoPE3R7GHoS6SHcVMotzo+Tb/6v7
tRaXdc2k0lWVr65QdpMJ8Bi08mzDev1e8DaPEAv4NUxfWbF/AlqA/I+twVda/KyB
tR6vdE/n5okIfASJ/Sr+RNy6AXGIWMknYRlLTjeIvZGnCDXA506FWWcD4vpYVl+d
qYbY+lTC/frx0w==
-----END CERTIFICATE-----
Generated at Thu Oct 1 13:24:17 2026 by rpki-client