Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
File: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft (raw, json)
Hash identifier: iVK8O6X79MUhBai/p7stCLOC1bc+4/eSgYXxF95lqDc=
Subject key identifier: BD:71:D9:10:37:EB:18:BF:DC:80:02:48:F5:A3:9D:12:56:19:78:7F
Authority key identifier: 29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
Certificate issuer: /CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Certificate serial: 01A0E10744136A557BE6AA51822097B0B41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
Manifest number: 064A
Signing time: Sun 27 Sep 2026 04:02:24 +0000
Manifest this update: Sun 27 Sep 2026 04:02:24 +0000
Manifest next update: Mon 28 Sep 2026 04:02:24 +0000
Files and hashes: 1: 77Whh77iKwt1yOOYU4DtYorlBOk.roa (hash: tO7vF8xusHO1O0mKViJ8yyoCaEKBRB4DR9BPRK3Lwnc=)
2: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl (hash: 8WukZ4Mi/8al/vX93+e7CXPX9/f9NW5CjykQoiS9PeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:07:44:13:6a:55:7b:e6:aa:51:82:20:97:b0:b4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Validity
Not Before: Sep 27 04:02:24 2026 GMT
Not After : Sep 28 04:02:24 2026 GMT
Subject: CN=bd71d91037eb18bfdc800248f5a39d125619787f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e9:a5:a4:68:2c:cd:50:46:3a:69:dd:60:a1:
c0:1f:97:3d:4b:6e:fa:fe:54:e8:03:94:df:98:7a:
16:b7:e4:48:77:02:53:36:21:90:94:37:da:e5:32:
8e:30:53:bb:2a:95:9c:f0:07:87:9e:6b:d7:cf:4f:
73:f9:37:ed:85:98:2f:1e:7c:0c:10:6c:94:cb:46:
8e:6e:a6:d1:1a:ad:f7:33:28:74:46:28:5b:48:c0:
f7:9c:38:ce:b6:74:dd:b1:df:a8:09:7c:f4:a3:3f:
40:32:bd:74:05:38:3d:95:03:fd:79:bd:05:36:8f:
35:8f:ce:a4:53:0f:f8:66:6f:44:75:0d:1e:21:69:
7b:db:53:9e:e5:c8:2e:15:d5:dc:21:78:e5:cb:e0:
38:a8:90:df:0e:60:8d:44:0b:d4:4e:fe:69:46:19:
8c:59:f9:9d:7f:9a:1b:f9:74:be:0b:8b:d9:d8:7a:
18:c0:fa:1b:89:07:b2:ca:3a:31:4e:69:b4:d3:ad:
43:e2:a6:1b:b7:54:04:4d:2f:e2:0e:82:3a:69:54:
8e:b1:cc:9e:42:0f:70:f7:e8:66:6f:1e:78:6c:4d:
a4:28:62:b9:4d:97:a8:71:83:05:6b:c3:b0:84:f6:
5f:1b:fb:73:82:1b:e4:41:96:db:a7:d1:e4:bb:65:
6e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:71:D9:10:37:EB:18:BF:DC:80:02:48:F5:A3:9D:12:56:19:78:7F
X509v3 Authority Key Identifier:
keyid:29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:82:c2:e1:1f:3b:29:59:d1:f4:e6:76:50:e6:b5:6e:b2:b0:
6b:67:08:04:c5:84:ca:f1:80:ee:eb:cf:cf:0e:de:f8:72:85:
c1:02:27:1b:5d:1a:5f:60:0a:4e:0b:b5:cf:21:d8:9a:4c:10:
71:24:e3:6a:b3:47:62:9c:29:fb:52:91:93:86:97:e2:1f:b8:
13:a8:6a:62:d4:de:b2:d9:f3:63:b2:46:6e:4b:18:0a:07:26:
c8:18:9e:e2:de:35:ae:f0:7c:69:89:4f:0a:2a:cb:a4:56:3f:
1c:63:84:58:ba:e4:b5:a1:c2:d5:48:6b:01:51:8a:82:00:51:
22:71:0d:c7:2d:69:ea:90:69:b7:e6:5f:d5:f1:14:6a:4b:a5:
0f:af:8a:13:4d:c5:f5:d5:1a:92:cc:c8:21:4d:38:e5:26:bb:
36:73:df:75:45:f7:b7:97:6b:58:e0:6f:fd:3c:1e:64:9d:54:
5e:a3:6b:da:42:1e:60:2e:a9:6a:20:42:73:a7:77:6b:bf:c8:
a9:55:7a:2a:49:08:50:e3:64:1b:1c:1f:9a:11:c8:14:27:a2:
c8:78:b8:fe:52:63:1f:6f:d3:5f:52:3c:9e:6e:67:62:1f:ab:
df:cf:04:f1:ec:95:d7:28:b2:f5:c6:22:00:35:02:cf:5e:7c:
ca:45:24:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:43:50 2026 by rpki-client