Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
File: KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json)
Hash identifier: qg7H/FttSruERiVBk8dPWNTkOKBhM3nOAehwiCup82I=
Subject key identifier: 91:05:90:25:96:55:06:95:B0:B1:4F:12:85:EC:17:78:26:C9:4D:64
Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
Certificate issuer: /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Certificate serial: 019E216DDA8A23DEF81A781C7B20611945D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
Manifest number: 1613
Signing time: Wed 13 May 2026 13:01:47 +0000
Manifest this update: Wed 13 May 2026 13:01:47 +0000
Manifest next update: Thu 14 May 2026 13:01:47 +0000
Files and hashes: 1: E5pify1OXDiAsSHZ575A3rO94ME.roa (hash: j8qs/DidOZTlSj0X8OZwnqxIOGwaKtwZi2fTCHavq7Y=)
2: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: I8xQENPzjdaH6e3bxFrC1Qb+ZG6uQeLYpKrgdoAvvQY=)
3: K_L02ygxWP1iEq4feCmKwUc-f_I.roa (hash: 7BqwctA7sfIPSXcYea3BP+4rzmnGuO4NUJM5EyZPoUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:da:8a:23:de:f8:1a:78:1c:7b:20:61:19:45:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Validity
Not Before: May 13 13:01:47 2026 GMT
Not After : May 14 13:01:47 2026 GMT
Subject: CN=9105902596550695b0b14f1285ec177826c94d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4f:ed:24:a9:b0:29:d4:97:3b:28:13:f9:77:
c8:06:14:aa:47:f0:d1:75:c6:7d:b0:4e:ed:df:e3:
a6:66:4e:47:fe:d7:2a:08:de:48:d1:ab:2d:9d:f1:
66:68:84:77:8e:83:7b:a5:e4:9a:35:3e:60:8c:a2:
50:00:45:bb:6b:5f:dc:85:5b:cd:45:a2:9d:0b:0f:
7f:3f:07:a1:33:a4:36:10:78:8a:c0:8b:77:ec:9c:
fe:71:f7:48:a5:c3:10:9f:06:30:eb:c1:3a:b6:8b:
00:af:88:38:f3:f6:54:95:46:a4:0d:bd:dd:8a:41:
29:da:bc:2a:e0:d2:77:78:12:24:9e:34:f8:16:5c:
b8:20:f0:d4:5c:72:3c:a2:22:75:96:d9:1a:a4:03:
8e:7f:ac:f8:17:4a:64:5d:58:c2:5b:72:01:81:9c:
62:f8:e4:b3:6c:83:80:48:fc:ac:be:4a:eb:4f:f1:
af:6f:d9:90:52:fc:f3:e8:9b:cc:e3:1b:c7:98:40:
41:3f:82:85:c9:69:d4:97:d9:e6:b2:85:26:8e:fc:
57:e1:b8:cd:3d:87:0e:4e:42:e1:35:0d:26:14:9b:
66:6a:c3:f4:c9:f0:fd:92:15:12:d3:6f:e1:58:fa:
69:91:bf:46:e5:89:c1:9b:16:b2:40:52:32:f5:64:
a0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:05:90:25:96:55:06:95:B0:B1:4F:12:85:EC:17:78:26:C9:4D:64
X509v3 Authority Key Identifier:
keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:b2:bc:cb:52:6d:58:b2:84:36:bd:bd:7a:c0:a2:0c:8a:d8:
cc:8f:90:71:0d:26:a7:5e:c4:61:24:c1:1b:88:44:59:4a:09:
7d:5e:5e:41:36:c6:8d:2c:e1:de:bd:4b:be:a6:75:2e:f1:1c:
df:47:db:16:76:4e:95:25:fb:15:82:0f:cb:3a:3a:c5:85:89:
94:3a:db:47:28:e3:29:03:bf:28:00:b9:ff:02:70:03:c8:0d:
56:13:23:54:c2:fe:3e:3f:6e:2d:84:7e:b7:a5:58:81:06:4c:
21:55:16:f2:07:6c:3d:38:1c:71:87:59:09:ac:4b:c1:3f:a7:
f4:0b:2f:be:14:a7:a9:96:c8:1a:7f:3d:a8:35:a9:ba:46:a6:
99:26:c3:87:54:c9:ff:1a:24:2b:e6:cd:9d:02:c8:5f:73:23:
4b:65:cc:b8:82:e1:d8:db:f0:f2:a5:95:00:8b:07:03:6e:96:
d0:28:e2:d2:fc:fb:c7:eb:08:a5:6f:b7:f6:ae:2a:4f:ba:bf:
91:3e:cc:13:36:f5:be:69:93:1c:ea:29:90:cb:3f:28:91:7f:
48:f0:d0:a5:ad:a5:94:61:39:ab:f1:12:dc:08:11:49:65:b8:
e1:45:95:c9:19:5a:9e:8b:b1:33:2f:45:18:79:b2:38:d0:80:
c8:33:5a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:41 2026 by rpki-client