Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
File: KBZKV1f91XJaYIRPKufvc7EHpMA.mft (raw, json)
Hash identifier: ynn/s2wQc+5UYvyQELDagsYviUQ5sNJBSPsDKz3B7dU=
Subject key identifier: 2F:81:1B:07:60:12:A6:1C:EF:CB:47:6B:68:0A:01:CC:8B:DE:4D:71
Authority key identifier: 28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
Certificate issuer: /CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Certificate serial: 019F94365C47E73488CA7349915377EDBF11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
Manifest number: 19C6
Signing time: Fri 24 Jul 2026 13:00:18 +0000
Manifest this update: Fri 24 Jul 2026 13:00:18 +0000
Manifest next update: Sat 25 Jul 2026 13:00:18 +0000
Files and hashes: 1: 744IgXzHRA7i_KaZPXPHUM0eSxg.roa (hash: eqDQW7MUEHWcKNovBhhfViXrkME1qg3sj67Td6hUu3A=)
2: KBZKV1f91XJaYIRPKufvc7EHpMA.crl (hash: BVuQ2oqmb5vE3jTrcUb0BQjZR7p8pSGlDsDKTsKenGg=)
3: Q9Hzj6xYvSgvTk1AgA8SSFlzHjw.roa (hash: zRP8z6fqTAhTFBNH4EqdLJ2KR4AhqadHe/YBKRqTMqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:5c:47:e7:34:88:ca:73:49:91:53:77:ed:bf:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28164a5757fdd5725a60844f2ae7ef73b107a4c0
Validity
Not Before: Jul 24 13:00:18 2026 GMT
Not After : Jul 25 13:00:18 2026 GMT
Subject: CN=2f811b076012a61cefcb476b680a01cc8bde4d71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:37:c6:b7:ee:21:cb:9d:82:16:d0:4b:76:
3e:dd:b6:4f:55:a8:9a:69:0b:b7:f8:b5:0f:47:57:
c7:81:69:72:9f:9b:38:7a:7d:2e:a3:48:d4:3c:7b:
e9:71:f8:de:3a:cd:26:8e:77:56:1f:22:4c:50:e9:
b2:de:ec:a6:41:89:e7:3e:97:7b:bd:e5:23:14:00:
0a:51:63:ca:f9:c7:e7:10:ca:44:f4:7c:71:a0:91:
24:4d:d6:5e:37:43:78:52:57:2e:3f:02:a7:03:5a:
43:dd:30:7a:e2:a3:99:89:e4:97:25:59:a5:bc:cb:
6e:1a:cd:16:e8:01:c4:a7:bf:f0:e3:e9:e8:3b:1d:
35:12:65:c1:4e:5f:6d:b6:d3:48:40:3f:7f:3b:2e:
41:ef:d8:60:9b:9f:a4:ef:1b:4c:00:b2:7e:1a:ea:
8f:1a:45:58:ed:df:c0:a2:5e:42:05:0e:f1:5a:6f:
c5:59:80:ff:26:b9:39:f8:e2:fe:3e:60:c7:88:1d:
b4:8f:68:ca:67:b0:65:92:9e:72:72:f9:c1:4d:6f:
2f:cc:33:00:4c:5c:22:a9:1e:8e:23:31:54:b0:e3:
dd:02:6f:0b:cb:b1:08:b6:08:6f:fa:30:ec:8c:0a:
f8:8b:77:26:9f:ba:88:9e:db:dd:ba:35:1b:d3:24:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:81:1B:07:60:12:A6:1C:EF:CB:47:6B:68:0A:01:CC:8B:DE:4D:71
X509v3 Authority Key Identifier:
keyid:28:16:4A:57:57:FD:D5:72:5A:60:84:4F:2A:E7:EF:73:B1:07:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBZKV1f91XJaYIRPKufvc7EHpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/95535b-e630-457f-8a01-aeae5bbc3920/1/KBZKV1f91XJaYIRPKufvc7EHpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:63:f0:48:70:33:6f:9f:c8:e6:df:e6:98:80:93:b1:2b:eb:
40:62:12:ab:71:f3:cd:39:5c:68:9f:64:20:d5:d0:64:d9:d0:
4c:0b:28:06:0f:f7:01:4b:e7:cb:a3:62:06:c2:a1:a0:a3:89:
ac:17:4c:b0:5b:aa:2d:03:23:f9:79:ce:f5:e3:a2:2e:c6:a6:
88:9b:f7:ea:46:fe:1f:ca:2d:4d:e4:25:96:de:30:05:37:82:
9a:71:a2:0e:01:d1:c9:05:9c:d4:4a:20:ae:c4:91:7a:b0:93:
23:57:d1:0b:11:b2:52:8e:aa:27:c5:8a:08:51:6c:35:26:7e:
c3:3a:6b:b1:26:60:8c:54:9d:19:49:a5:2a:b0:f9:08:98:68:
81:01:86:ff:71:f1:e1:cd:c3:87:08:99:07:94:6c:4e:c7:31:
8e:82:b9:96:06:ec:93:42:a5:7d:9b:0b:a5:43:7d:1d:1e:f2:
a8:ea:4d:80:c0:65:13:b7:a1:18:80:8f:f2:71:d1:e3:36:40:
e1:58:fc:26:ae:0c:de:d0:1c:b2:71:19:63:82:73:99:6d:f9:
bf:cb:d4:d5:d5:b4:7c:f0:2e:34:a0:27:fe:c5:44:61:93:24:
5b:83:a1:62:41:5c:07:08:a4:4f:6b:74:87:20:73:2d:b7:98:
c3:e5:78:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:13:55 2026 by rpki-client