Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
File: KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json)
Hash identifier: TEE5Pl/PhrD+nenvXPwQbswB8Jn7e1LZJ69uDHwgjoI=
Subject key identifier: D5:D0:F6:D9:67:E9:D7:0D:AA:77:CC:A2:49:60:6E:8A:07:C9:9F:FE
Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
Certificate issuer: /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Certificate serial: 019F92481041C3B6815F982621A2CADBE518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
Manifest number: 16D2
Signing time: Fri 24 Jul 2026 04:00:23 +0000
Manifest this update: Fri 24 Jul 2026 04:00:23 +0000
Manifest next update: Sat 25 Jul 2026 04:00:23 +0000
Files and hashes: 1: E5pify1OXDiAsSHZ575A3rO94ME.roa (hash: j8qs/DidOZTlSj0X8OZwnqxIOGwaKtwZi2fTCHavq7Y=)
2: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: EWKlmdBNjqaOaC8HCFJUulW+FRrjOcM/sKhSoShRCCA=)
3: K_L02ygxWP1iEq4feCmKwUc-f_I.roa (hash: 7BqwctA7sfIPSXcYea3BP+4rzmnGuO4NUJM5EyZPoUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:10:41:c3:b6:81:5f:98:26:21:a2:ca:db:e5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Validity
Not Before: Jul 24 04:00:23 2026 GMT
Not After : Jul 25 04:00:23 2026 GMT
Subject: CN=d5d0f6d967e9d70daa77cca249606e8a07c99ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:85:b3:45:71:84:81:d7:a0:0a:ab:76:14:45:
4b:b8:cb:59:e0:3e:21:ae:bd:ea:f6:da:5b:b7:eb:
ad:6a:3b:2c:d7:b2:68:33:4c:42:0f:14:66:82:52:
d3:04:f3:52:09:32:d6:f3:c1:20:84:1e:27:3f:f6:
dd:51:c1:95:fb:0c:b6:11:16:05:55:fa:f6:c4:6c:
28:3d:a7:c1:e3:64:7a:7c:f0:fd:71:0c:d8:3f:94:
5f:94:a1:1f:c6:46:5c:cf:f7:d7:3f:86:fa:05:a7:
7c:60:cc:8a:9a:19:be:5c:4c:11:0b:b8:c3:fd:80:
4e:b9:4e:08:ec:90:e6:7b:ee:84:bd:8c:54:9e:42:
71:0b:30:9a:b2:71:12:cb:fb:e7:36:8c:8c:0a:d1:
f5:2e:cf:f8:fa:a5:cb:87:0f:3a:54:2d:84:22:95:
89:41:49:ab:53:6b:bd:37:17:de:43:d1:15:e6:68:
ac:8e:06:b2:d9:af:fe:7d:6a:ed:71:1c:7d:93:e2:
02:15:ca:b2:14:3e:84:d3:40:f1:ee:2c:3a:db:4f:
e2:f6:96:40:5e:7b:65:a6:fc:52:f6:b4:8a:37:d1:
a2:21:0c:e3:d9:65:7c:ca:f6:3c:c4:a8:26:84:7c:
3a:28:85:c0:0a:aa:43:c5:3d:88:d6:4f:9a:b1:96:
8e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D0:F6:D9:67:E9:D7:0D:AA:77:CC:A2:49:60:6E:8A:07:C9:9F:FE
X509v3 Authority Key Identifier:
keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:89:58:45:e1:97:7b:f8:f9:6e:3a:88:bc:31:38:4a:1c:04:
c8:51:f0:b0:38:78:37:3b:af:40:47:1a:b2:d6:4d:d2:a5:68:
da:6d:c3:31:7e:e3:c2:75:98:90:be:1e:cf:83:9a:02:a7:f3:
50:87:6d:a8:37:d7:d3:22:ef:64:aa:ee:f2:5f:38:ce:40:c1:
be:99:39:3b:11:2c:46:c4:0b:8c:e5:90:61:a1:c8:9f:c6:1b:
08:bc:d6:c1:3a:5d:5e:93:4b:bc:53:2b:ad:70:47:28:0b:88:
36:f1:61:c6:e2:9f:45:26:79:07:c7:7b:81:59:70:3d:f2:85:
65:04:36:6b:08:44:29:0a:f7:df:ec:b2:ba:ea:a3:b7:4d:c9:
63:4b:af:d0:63:2c:05:4c:0a:2f:79:b5:e9:33:0a:8e:2f:0b:
b8:eb:1d:35:a4:c5:39:09:70:8d:d4:2b:08:af:b8:1c:8b:68:
67:8e:74:1b:de:62:64:7e:33:e1:66:50:05:77:3e:3c:10:4a:
37:70:ca:50:8a:36:e6:1e:87:f7:ef:27:45:d3:cf:c8:d3:74:
65:d0:ed:21:ee:c7:57:1b:90:72:c5:96:ad:b0:5c:fb:05:98:
62:0f:e9:2d:16:b0:46:ad:5d:82:e2:c9:70:52:85:a7:62:24:
72:3f:49:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:34 2026 by rpki-client