Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
File: KIBHSpYWHd4pQs-58YVsL_yICQQ.mft (raw, json)
Hash identifier: dZSN0YMCCupizPe6+hBPTrFWnV6kF2r3d3HHcF9mgpM=
Subject key identifier: A7:D9:60:B1:CE:DE:19:1F:5E:98:0E:19:DA:B1:8B:BC:77:D8:14:16
Authority key identifier: 28:80:47:4A:96:16:1D:DE:29:42:CF:B9:F1:85:6C:2F:FC:88:09:04
Certificate issuer: /CN=2880474a96161dde2942cfb9f1856c2ffc880904
Certificate serial: 019F94A51D250FD73E88B1B63205D5D257DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
Manifest number: 0586
Signing time: Fri 24 Jul 2026 15:01:16 +0000
Manifest this update: Fri 24 Jul 2026 15:01:16 +0000
Manifest next update: Sat 25 Jul 2026 15:01:16 +0000
Files and hashes: 1: KIBHSpYWHd4pQs-58YVsL_yICQQ.crl (hash: bV9hJxl1bUbAbtEN+1hshv0tzhd8T8RogMQ5mLYvbTw=)
2: p5OtBuJ_H7AvfUmYp0Nby5w6BSc.roa (hash: oRePnKuJGEJuRAGyqz3spXqznhrS2YOXLr+XXfpc3VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a5:1d:25:0f:d7:3e:88:b1:b6:32:05:d5:d2:57:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2880474a96161dde2942cfb9f1856c2ffc880904
Validity
Not Before: Jul 24 15:01:16 2026 GMT
Not After : Jul 25 15:01:16 2026 GMT
Subject: CN=a7d960b1cede191f5e980e19dab18bbc77d81416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:40:b8:0f:25:c0:25:b0:f1:96:9a:d6:62:
35:5d:06:08:95:23:5d:6e:4d:15:d5:3b:a2:c4:66:
cf:9d:97:c6:66:a4:b3:b5:ae:4e:20:70:57:e0:9c:
d8:c3:02:2d:81:e7:bc:58:40:ac:6c:96:2e:2d:df:
0b:5e:2c:21:d2:fa:bf:75:93:73:53:3d:ff:4c:8b:
7a:17:d3:4d:5d:01:9a:16:36:4e:32:81:01:04:79:
76:84:9a:51:81:bf:86:27:97:8b:09:39:4f:ce:8f:
8c:7e:fe:bc:5b:56:e7:92:59:fc:43:ed:f6:97:4b:
a2:39:91:f4:51:c7:92:f2:da:2b:95:9b:b9:07:19:
05:1d:28:81:04:7b:f2:ea:b9:98:9e:51:14:80:88:
8b:6b:57:88:a2:7b:47:ba:17:eb:84:a4:99:c0:a4:
55:14:4d:8e:b5:78:1d:e0:48:09:39:c3:46:22:b0:
46:f3:05:27:11:f3:68:a9:91:c0:e4:ac:99:a3:15:
05:df:78:72:ee:f7:ed:c9:4a:0a:75:ae:40:a6:bc:
82:e3:07:85:10:d8:4c:c5:d3:7f:8a:d9:f0:d6:9b:
d6:e7:5f:25:f3:fa:26:7b:85:53:e7:4f:39:2a:79:
f1:66:86:72:41:a9:96:33:25:ec:81:bb:ad:cc:ef:
11:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D9:60:B1:CE:DE:19:1F:5E:98:0E:19:DA:B1:8B:BC:77:D8:14:16
X509v3 Authority Key Identifier:
keyid:28:80:47:4A:96:16:1D:DE:29:42:CF:B9:F1:85:6C:2F:FC:88:09:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIBHSpYWHd4pQs-58YVsL_yICQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/693cc3-ab75-44c6-a740-7461a56ce95e/1/KIBHSpYWHd4pQs-58YVsL_yICQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:df:20:ee:95:93:5a:38:22:ce:22:fc:45:53:b9:e6:8f:a1:
2e:ef:59:36:16:56:63:3a:cb:55:92:72:af:b7:d1:8f:e8:f4:
b9:04:27:a3:43:37:32:a6:7b:56:96:77:35:75:59:8d:f9:23:
0c:a1:ac:12:a5:cb:2b:1d:59:06:ae:be:1c:fb:d5:0f:fd:2b:
86:7e:49:d5:54:28:74:09:17:e6:50:ec:6e:6e:c0:43:4b:8b:
ba:7a:63:30:4a:07:2e:ba:1f:eb:4f:28:ab:8b:23:84:b6:ea:
62:76:c8:f0:f0:ca:2c:90:37:df:be:82:c6:b3:ea:0d:d5:6f:
c0:e4:78:20:2a:df:69:15:4f:69:c6:ab:cd:3b:f9:52:8c:8a:
3d:53:a6:40:40:c7:16:3d:17:81:79:67:30:ad:38:43:b7:8b:
fa:fd:9c:37:1d:a9:dd:a6:ed:88:6a:79:e9:ea:df:d7:8f:86:
b6:90:b2:65:f7:1b:b1:3b:2b:39:13:84:21:47:e6:c3:8e:37:
31:34:35:a6:86:d9:8a:b7:35:ee:49:6c:79:27:f7:8b:83:11:
9c:c7:14:a0:9c:56:24:4d:61:cf:05:ec:cf:02:20:e0:9a:e6:
12:f0:77:bb:d7:b0:60:38:42:be:38:93:b0:9e:01:5e:5e:1c:
96:57:ae:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:43 2026 by rpki-client