Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
File: KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json)
Hash identifier: LiiemrE7ifU41JZPFgpT7kHRtlISul+2oYXHZ14wmsg=
Subject key identifier: 32:83:83:E5:D1:A4:E7:8E:CE:DD:BF:09:5D:6D:9A:C0:22:FC:A1:51
Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
Certificate issuer: /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Certificate serial: 01A0E81C9953CDC102E7F1BB4F0ABAE1369D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
Manifest number: 1783
Signing time: Mon 28 Sep 2026 13:03:03 +0000
Manifest this update: Mon 28 Sep 2026 13:03:03 +0000
Manifest next update: Tue 29 Sep 2026 13:03:03 +0000
Files and hashes: 1: E5pify1OXDiAsSHZ575A3rO94ME.roa (hash: j8qs/DidOZTlSj0X8OZwnqxIOGwaKtwZi2fTCHavq7Y=)
2: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: m71Z47A/1q10LXzLXwVUvzAh7BMxDMB4qC0uKd6qUi4=)
3: K_L02ygxWP1iEq4feCmKwUc-f_I.roa (hash: 7BqwctA7sfIPSXcYea3BP+4rzmnGuO4NUJM5EyZPoUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:99:53:cd:c1:02:e7:f1:bb:4f:0a:ba:e1:36:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Validity
Not Before: Sep 28 13:03:03 2026 GMT
Not After : Sep 29 13:03:03 2026 GMT
Subject: CN=328383e5d1a4e78eceddbf095d6d9ac022fca151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:18:65:9e:2f:6c:4c:f3:a6:3c:fa:6b:3e:53:
9d:3c:3a:ac:bc:7a:fe:41:d4:59:55:61:ab:e8:9c:
c7:9c:e0:1b:0d:01:22:34:e0:e6:25:66:4f:72:8a:
ff:55:48:a7:70:fa:b6:34:46:db:64:e1:9a:88:9c:
fe:11:4e:28:45:60:c4:26:d7:18:72:c6:54:e4:77:
ba:78:19:a5:5d:48:be:da:5f:55:f7:63:bb:30:1e:
a7:9b:ac:a9:37:bf:87:57:b9:7d:f7:a3:22:6c:0f:
82:03:03:ca:67:11:36:11:15:3b:a1:44:cb:f6:9e:
16:8f:25:03:ca:9a:c0:da:3b:f6:f3:00:76:14:76:
83:ed:7a:70:78:d4:ce:58:0c:9a:bd:99:3b:53:01:
e7:ca:30:5b:76:63:ec:00:f8:d4:49:3b:98:cf:f9:
18:40:be:ee:91:71:1b:f7:1b:9a:0b:d6:87:71:53:
fe:21:e1:d4:3d:16:50:a9:40:e9:81:15:d0:fb:e9:
89:7b:76:c3:55:8b:83:51:bf:7c:aa:6b:58:da:f5:
b7:c9:95:29:f0:60:79:0f:cc:32:1a:2d:7b:19:33:
f2:67:64:32:b0:a3:72:b9:77:ef:df:15:67:64:9c:
84:23:a8:60:9a:53:0c:87:72:71:22:7f:bb:82:01:
31:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:83:83:E5:D1:A4:E7:8E:CE:DD:BF:09:5D:6D:9A:C0:22:FC:A1:51
X509v3 Authority Key Identifier:
keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9d:ea:9d:6a:58:3a:2f:d6:fd:e8:4c:59:2a:0b:48:ec:68:
f4:92:22:d3:66:5e:59:69:bb:4b:d0:c0:14:15:4a:ef:7b:bb:
6f:f7:0b:27:08:8b:c8:c9:9d:36:0e:40:bd:2e:49:38:4a:bd:
df:24:46:9d:07:8a:88:ce:2f:a2:e9:df:a1:7b:ab:08:91:5e:
cc:ab:50:c8:c8:b4:93:77:b5:6e:80:44:1b:c1:88:49:a9:ff:
1b:6f:42:13:2e:b7:96:ae:74:8f:e8:a2:8b:4e:6c:bc:ec:e0:
8d:f9:30:ec:ec:a0:70:98:cf:84:d8:58:7b:c8:ea:0d:e3:ab:
55:63:32:40:ed:20:25:b6:e7:16:2e:56:cd:c8:d0:c1:fb:9e:
3e:78:9f:6d:a3:9a:e1:da:0d:00:8b:fd:a9:cd:49:32:de:85:
fe:c9:29:37:2b:1a:9b:6f:bd:60:91:3d:a6:b0:45:64:41:44:
7f:ba:4f:3d:51:3b:17:1e:e3:00:e5:1a:99:40:e9:01:24:ff:
ee:35:01:8e:b5:90:8b:5e:13:da:5a:94:83:a8:0b:4e:c2:e3:
2d:d2:8a:2e:8b:08:0a:0d:fc:13:c8:d8:b6:af:f1:03:a3:8c:
d8:db:b6:69:ec:6a:56:5d:50:67:11:54:2c:1d:ba:92:30:c3:
1c:8e:e4:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoHJlTzcEC5/G7Twq64TadMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YjBmZjc5OThjYTg4NTRjZTdjNDc1YTk3MmVkMWQ1MmE1
YzYwY2QwHhcNMjYwOTI4MTMwMzAzWhcNMjYwOTI5MTMwMzAzWjAzMTEwLwYDVQQD
EygzMjgzODNlNWQxYTRlNzhlY2VkZGJmMDk1ZDZkOWFjMDIyZmNhMTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBhlni9sTPOmPPprPlOdPDqsvHr+
QdRZVWGr6JzHnOAbDQEiNODmJWZPcor/VUincPq2NEbbZOGaiJz+EU4oRWDEJtcY
csZU5He6eBmlXUi+2l9V92O7MB6nm6ypN7+HV7l996MibA+CAwPKZxE2ERU7oUTL
9p4WjyUDyprA2jv28wB2FHaD7XpweNTOWAyavZk7UwHnyjBbdmPsAPjUSTuYz/kY
QL7ukXEb9xuaC9aHcVP+IeHUPRZQqUDpgRXQ++mJe3bDVYuDUb98qmtY2vW3yZUp
8GB5D8wyGi17GTPyZ2QysKNyuXfv3xVnZJyEI6hgmlMMh3JxIn+7ggExnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKDg+XRpOeOzt2/CV1tmsAi/KFRMB8GA1UdIwQY
MBaAFCiw/3mYyohUznxHWpcu0dUqXGDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hMGQ2NzQtODdiNi00MzE4LWJlZDIt
MjY3NTQ3ZWExZTM1LzEvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9hMGQ2NzQtODdiNi00MzE4LWJlZDItMjY3NTQ3ZWExZTM1
LzEvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZ3qnWpY
Oi/W/ehMWSoLSOxo9JIi02ZeWWm7S9DAFBVK73u7b/cLJwiLyMmdNg5AvS5JOEq9
3yRGnQeKiM4vounfoXurCJFezKtQyMi0k3e1boBEG8GISan/G29CEy63lq50j+ii
i05svOzgjfkw7OygcJjPhNhYe8jqDeOrVWMyQO0gJbbnFi5WzcjQwfuePnifbaOa
4doNAIv9qc1JMt6F/skpNysam2+9YJE9prBFZEFEf7pPPVE7Fx7jAOUamUDpAST/
7jUBjrWQi14T2lqUg6gLTsLjLdKKLosICg38E8jYtq/xA6OM2Nu2aexqVl1QZxFU
LB26kjDDHI7kiA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 22:47:30 2026 by rpki-client