Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
File: KBZKV1f91XJaYIRPKufvc7EHpMA.mft (raw, json)
Hash identifier: aydgcGc6euQb2TWGUFqtR/ZJaqLsPKC93zzIVX1Qrpc=
Subject key identifier: 83:F3:D3:30:8A:F2:40:1C:19:FC:CF:B3:3F:0C:30:06:01:1F:B7:D3
Authority key identifier: 28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
Certificate issuer: /CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Certificate serial: 019D265F71129017259EABAAFD8C3E980E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 19:01:22 +0000
Manifest this update: Wed 25 Mar 2026 19:01:22 +0000
Manifest next update: Thu 26 Mar 2026 19:01:22 +0000
Files and hashes: 1: 744IgXzHRA7i_KaZPXPHUM0eSxg.roa (hash: eqDQW7MUEHWcKNovBhhfViXrkME1qg3sj67Td6hUu3A=)
2: KBZKV1f91XJaYIRPKufvc7EHpMA.crl (hash: R4tkQ1UurrCNuRBXHu2ezsWyDfM+2magp0oIvcQx91Y=)
3: Q9Hzj6xYvSgvTk1AgA8SSFlzHjw.roa (hash: zRP8z6fqTAhTFBNH4EqdLJ2KR4AhqadHe/YBKRqTMqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:71:12:90:17:25:9e:ab:aa:fd:8c:3e:98:0e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Validity
Not Before: Mar 25 19:01:22 2026 GMT
Not After : Mar 26 19:01:22 2026 GMT
Subject: CN=83f3d3308af2401c19fccfb33f0c3006011fb7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a5:af:f0:52:94:a9:44:88:c0:db:ed:fd:f0:
a3:86:81:32:f5:82:74:cb:7e:66:ed:dd:e8:f9:21:
0f:12:47:e2:41:25:5f:5a:d3:c7:f3:1d:4b:be:4b:
97:75:14:d2:87:9e:d3:1c:4c:b9:4f:3d:12:82:23:
30:01:69:bd:4b:ac:36:3c:d9:ef:06:f7:29:db:82:
21:71:e4:e4:0b:b7:6e:29:1c:53:8b:54:c8:f3:2e:
40:40:f7:4a:a5:a4:12:ae:3f:cf:95:e5:aa:3e:e1:
75:52:a4:ed:cf:7f:e3:4c:9d:0c:a5:76:50:ba:02:
b9:06:49:bd:1c:93:44:0a:c0:c4:b8:b7:19:e3:3c:
c4:dd:97:90:aa:1e:c3:56:70:fb:43:e2:6d:d0:c6:
fa:b4:f3:27:0b:e5:0f:b7:c7:17:26:74:60:d5:e9:
31:a9:f0:22:a3:2c:82:c6:8f:5c:9c:ee:d6:63:a0:
76:c2:e9:47:08:02:02:4c:f8:b7:89:e6:b1:0a:ff:
fb:82:e1:2e:a2:21:a1:9a:68:6a:1f:ed:f2:77:a6:
87:31:01:33:8a:3e:30:fb:32:42:be:bd:c9:65:3f:
f6:af:47:5c:d6:b2:dc:c8:a1:e1:c7:ba:7a:36:49:
92:5b:d0:f8:48:b4:af:0f:5b:4a:be:6e:a2:71:5a:
ec:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F3:D3:30:8A:F2:40:1C:19:FC:CF:B3:3F:0C:30:06:01:1F:B7:D3
X509v3 Authority Key Identifier:
keyid:28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:26:c2:1b:86:2c:48:14:82:7f:37:62:92:81:2a:15:9a:bb:
d2:e8:b7:f6:53:39:67:98:db:4c:70:bf:4d:81:42:15:43:66:
b0:0f:0b:8d:80:e3:57:98:8a:55:8e:1b:68:55:c2:35:54:b0:
92:34:ba:82:03:4a:fa:9d:83:4e:67:bd:f1:bb:d1:1e:2e:c4:
9b:a9:67:64:5c:20:ae:4b:d0:a2:5b:02:d1:f1:26:7f:02:bf:
b3:2e:7e:8a:6a:9d:43:a6:d3:0a:86:b4:9e:5b:55:cd:af:42:
74:c6:b5:77:24:47:96:9f:5c:a7:15:31:e5:9b:9d:8c:36:a2:
26:f9:b1:54:47:27:c4:11:ad:36:d9:a7:57:8f:5f:02:e5:e0:
5a:87:53:f6:ba:10:bb:e1:86:0e:59:41:df:c6:e3:58:02:e5:
33:db:1b:fe:d0:fc:40:08:3e:12:0c:5d:c5:16:79:76:fd:f7:
1f:a5:4e:9d:0f:d2:10:b9:8e:b2:54:d5:b4:d1:61:8c:3b:97:
48:88:1e:ff:67:b1:60:34:b2:d0:41:90:d0:ec:a3:f2:1c:e1:
cf:0c:87:b2:73:41:45:c0:17:70:07:72:1a:9b:1b:dd:d2:95:
aa:78:ba:9f:e6:15:75:d4:53:26:8c:cf:0b:0a:08:fb:d3:a6:
23:4e:e6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:22 2026 by rpki-client