
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
File: KIBHSpYWHd4pQs-58YVsL_yICQQ.mft (raw, json)
Hash identifier: scfTQR2QcgLcqxhByOSyVJHBeLoliJMCWZMbguY0Wvw=
Subject key identifier: BF:A0:45:D3:A7:AB:2E:F5:B9:F4:1F:5B:CC:9A:96:88:0C:43:B9:C1
Authority key identifier: 28:80:47:4A:96:16:1D:DE:29:42:CF:B9:F1:85:6C:2F:FC:88:09:04
Certificate issuer: /CN=2880474a96161dde2942cfb9f1856c2ffc880904
Certificate serial: 01A0D91732D21C98DDC3E1F6BD7061B4E1FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
Manifest number: 062E
Signing time: Fri 25 Sep 2026 15:02:51 +0000
Manifest this update: Fri 25 Sep 2026 15:02:51 +0000
Manifest next update: Sat 26 Sep 2026 15:02:51 +0000
Files and hashes: 1: KIBHSpYWHd4pQs-58YVsL_yICQQ.crl (hash: KMioPdCJmys8FWutCznMR+PSowOQzx79Z98jbC5CQss=)
2: p5OtBuJ_H7AvfUmYp0Nby5w6BSc.roa (hash: oRePnKuJGEJuRAGyqz3spXqznhrS2YOXLr+XXfpc3VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:32:d2:1c:98:dd:c3:e1:f6:bd:70:61:b4:e1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2880474a96161dde2942cfb9f1856c2ffc880904
Validity
Not Before: Sep 25 15:02:51 2026 GMT
Not After : Sep 26 15:02:51 2026 GMT
Subject: CN=bfa045d3a7ab2ef5b9f41f5bcc9a96880c43b9c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:68:2f:b4:05:b9:55:8f:6a:ed:27:98:30:
20:3c:5c:62:7b:03:b6:e9:a1:f2:51:d5:ac:80:b9:
36:6e:ea:7a:cb:ac:66:70:0a:6a:73:24:3f:e1:40:
5b:93:34:78:d4:5b:f7:54:fc:b4:c1:6c:c7:0c:1e:
a6:e3:7c:fa:56:fe:22:38:45:c9:79:1a:a9:bf:8e:
10:fa:1a:89:6c:6c:65:d1:9c:01:d4:4b:f4:f0:71:
98:ae:07:c1:49:fe:46:47:33:c1:ce:93:cb:71:83:
61:54:bb:dd:20:64:4d:9b:20:62:8d:1f:cc:b0:76:
ea:49:17:1c:37:21:74:97:d0:aa:ca:d6:5d:c1:e9:
83:cc:ba:95:61:c9:26:94:0d:df:fc:28:e1:59:fd:
c4:fc:e3:b0:f0:df:27:29:63:cf:da:41:7a:3b:40:
99:19:b0:03:bb:13:9d:3c:1c:b3:15:13:cb:be:8e:
f2:a3:a2:3f:81:a2:e7:10:60:8d:70:90:a7:6b:0b:
da:53:0e:c3:b1:7a:81:29:c9:ab:64:cd:00:44:73:
42:ae:ed:75:8f:3f:d5:b5:ca:64:d3:49:e4:a2:ed:
4b:be:06:39:cd:2b:8a:3d:2a:c6:6a:9f:40:39:0d:
31:cf:95:29:38:3f:8c:a2:7f:6e:28:a4:9e:a9:e0:
6e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A0:45:D3:A7:AB:2E:F5:B9:F4:1F:5B:CC:9A:96:88:0C:43:B9:C1
X509v3 Authority Key Identifier:
keyid:28:80:47:4A:96:16:1D:DE:29:42:CF:B9:F1:85:6C:2F:FC:88:09:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b7:ca:32:55:e7:e8:81:0e:ad:0b:19:87:1c:7a:0f:6f:4d:
f5:0e:59:6b:b8:72:a3:3f:b6:77:bf:a1:5d:e9:9b:d8:c6:c0:
07:5c:07:d2:4f:be:11:32:b6:43:5f:8e:d1:2e:af:f7:d0:c1:
52:06:39:6e:b5:2b:af:31:d1:98:36:e9:16:48:4c:3c:f1:fc:
92:f8:fb:79:34:17:e6:22:3a:db:94:b0:f6:4f:65:fb:15:12:
33:64:98:1e:b2:a4:f1:d9:26:af:79:12:79:d9:dd:93:b6:d0:
73:0b:c4:cc:5a:7d:c1:5b:fd:ef:b9:81:ac:c3:c7:d5:9e:c0:
8a:9d:3c:47:e4:a9:ee:6c:7c:8d:b8:99:31:44:4d:83:70:ca:
3d:8e:26:52:3b:ea:e5:e8:b0:41:a5:3c:7a:ff:04:a2:2b:56:
c2:8e:02:94:92:4e:fc:69:86:55:81:0a:b2:ff:d8:3c:22:04:
5d:c4:40:db:11:5c:4d:04:fa:69:31:ce:0f:12:56:ef:1e:a1:
22:ff:91:42:9a:c0:22:ac:b7:8e:85:f3:b1:85:ec:54:4a:10:
64:a6:9b:00:72:cb:09:24:62:d9:fd:b8:78:82:ca:59:fc:ed:
08:81:ad:32:ac:22:fd:a1:25:d8:22:d7:a8:b5:ae:da:f2:f5:
27:c8:49:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:24:32 2026 by rpki-client