Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
File: kiBfWmTqH7CQrSbc_bGM77mqvY0.mft (raw, json)
Hash identifier: o5DSBJePR6OIMXymh6HXaxBSqpTaIrv917HzFG3D8NY=
Subject key identifier: B8:0C:DB:11:C0:E5:62:76:83:4C:5C:26:CF:CA:9D:90:0D:A8:9C:54
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 01A108145429F085C75370D7EA11E9F1ABEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
Manifest number: 164C
Signing time: Sun 04 Oct 2026 18:01:52 +0000
Manifest this update: Sun 04 Oct 2026 18:01:52 +0000
Manifest next update: Mon 05 Oct 2026 18:01:52 +0000
Files and hashes: 1: LASCfdMWoE20CF7WDK1PIh4LaTI.roa (hash: rIpKOSzr2MEm9EPCffOjAkuNKQPPOYskeo9lWvqTyOo=)
2: W7FoM9P8V95TjMG5CxF-kXC2djY.roa (hash: cqNL2j3ndLF7zdz8pZtr2cRhV6k7abA3ZyK4595EJ/s=)
3: kiBfWmTqH7CQrSbc_bGM77mqvY0.crl (hash: YfXaq8iDXWzuW/DbEW9u7QPKDGJS42GmhJ3nt+YTuQA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:14:54:29:f0:85:c7:53:70:d7:ea:11:e9:f1:ab:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Oct 4 18:01:52 2026 GMT
Not After : Oct 5 18:01:52 2026 GMT
Subject: CN=b80cdb11c0e56276834c5c26cfca9d900da89c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:39:4f:34:99:ad:fb:b1:4e:3c:37:64:46:
c8:3e:c8:c1:5f:fe:5e:12:1a:da:2b:0e:48:1d:2e:
ba:bb:2c:d6:62:37:5e:12:6f:84:50:e4:7f:d3:c2:
86:57:8d:23:b1:ac:b8:bc:63:3e:02:7e:6b:ed:61:
28:d0:44:b7:2c:df:73:5b:ce:ac:fb:19:f6:f5:bb:
7a:e2:f7:31:9e:d2:6b:de:d0:47:c6:6b:e4:b9:a7:
50:71:f9:48:1f:ed:8c:57:53:ab:7e:20:0b:e7:ad:
5c:7e:18:dc:9a:93:0a:be:0b:29:5e:eb:58:54:68:
8e:b6:30:87:b4:89:f5:d0:fe:55:29:10:0e:25:22:
c4:a9:08:b9:02:43:f9:a0:42:51:f9:02:58:57:c1:
83:c7:7d:38:d2:9d:85:ee:6e:8b:6e:b2:c2:8b:a3:
22:0e:c4:55:b3:76:a2:18:58:56:8f:c8:89:a9:e1:
e4:10:22:6f:8c:8a:53:4f:8d:20:2c:c9:cd:37:ec:
8e:77:96:67:79:9d:49:b6:2a:0e:85:d3:0b:01:c6:
7e:64:c1:72:f7:06:cc:ec:13:e0:a6:38:59:03:3f:
51:ff:66:71:e1:dd:d7:95:df:f0:d0:58:1a:e3:7f:
17:c1:5a:c0:57:e3:dc:36:c7:e7:11:78:13:85:5d:
66:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0C:DB:11:C0:E5:62:76:83:4C:5C:26:CF:CA:9D:90:0D:A8:9C:54
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:05:b3:27:21:4f:cf:97:c8:a4:01:6d:41:5e:b9:aa:00:00:
83:28:5e:e1:19:39:cd:3e:38:3b:d1:43:bc:ef:69:ce:a3:cb:
4d:ca:66:a2:bc:05:7a:b0:cd:c6:13:8c:11:67:58:30:28:df:
3d:70:61:70:00:c6:8b:48:31:14:60:33:cc:ec:01:fe:6f:14:
24:38:d6:f0:1b:5f:63:3a:4d:81:91:04:92:61:85:e8:99:31:
8e:22:a8:bb:da:65:ed:14:a4:09:d3:04:d1:95:a0:b1:aa:be:
d7:71:fb:49:f2:07:b5:90:94:7e:72:6d:79:25:50:01:ac:ed:
aa:93:6e:21:42:e4:e8:33:16:5f:b0:f1:b1:58:bf:a3:fd:3b:
e6:81:51:48:28:f8:cf:54:79:bf:8c:4a:d5:37:e7:69:f1:bb:
50:36:4b:e1:dd:48:eb:d1:5a:9f:4b:be:3f:c4:af:96:90:30:
06:64:d3:9c:c4:d2:e8:a6:66:c7:41:52:37:89:cd:f9:4a:95:
fb:25:57:e2:15:92:0d:66:cc:f0:4e:47:bc:93:f9:94:e5:ce:
04:35:c3:75:55:0f:2d:16:b5:44:0a:5c:9c:08:6e:7d:8e:ca:
7c:36:27:3c:b6:82:3f:c9:e0:fe:06:fb:94:c4:7a:bd:0b:15:
fc:64:0a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 02:42:19 2026 by rpki-client