Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
File: KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft (raw, json)
Hash identifier: kfXCeIVYgw5IWnAhOwHlZax4RIY211ZBoujTVsdusMQ=
Subject key identifier: 1F:1C:97:07:73:B8:EE:7A:D1:CB:E4:E6:77:85:8B:FD:44:13:B7:A5
Authority key identifier: 28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
Certificate issuer: /CN=2811818f95be6690e8aabc5befa217346abcd574
Certificate serial: 019D25F18CBAED64529D8F2C7A62ECA6D1BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
Manifest number: 026B
Signing time: Wed 25 Mar 2026 17:01:20 +0000
Manifest this update: Wed 25 Mar 2026 17:01:20 +0000
Manifest next update: Thu 26 Mar 2026 17:01:20 +0000
Files and hashes: 1: KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl (hash: PV0Ke8CVKge9fcH5cOwpimzsB2K9uhnl0iNuzO9ds6s=)
2: cjM0znzLJC2QR0PgnNVfAe1h_mI.roa (hash: niPdw0pZGGHLaXhD+OqWZAWoags/W4iskvjHWI94b6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:8c:ba:ed:64:52:9d:8f:2c:7a:62:ec:a6:d1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2811818f95be6690e8aabc5befa217346abcd574
Validity
Not Before: Mar 25 17:01:20 2026 GMT
Not After : Mar 26 17:01:20 2026 GMT
Subject: CN=1f1c970773b8ee7ad1cbe4e677858bfd4413b7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ac:e5:5a:2c:8f:74:9f:2d:94:11:0c:d8:e3:
33:27:a6:a2:45:f4:ba:a3:f5:b4:f7:41:5c:e3:48:
02:e2:21:07:1d:88:ab:3f:53:06:4d:34:88:29:0c:
90:33:82:25:d1:78:50:89:60:e5:fc:1e:96:57:7f:
a7:f5:d7:2b:b8:95:86:1d:0c:b3:f4:d0:b9:7a:55:
56:73:5e:a2:ec:30:75:2f:29:61:71:a4:06:7c:8f:
2e:56:0a:83:fe:f1:da:c0:19:56:58:1e:42:e3:c5:
4f:0a:cd:99:62:ab:40:e3:68:30:42:0c:bd:78:1e:
41:a2:80:b0:59:dc:96:c8:26:2d:a8:07:32:34:13:
30:e9:c9:8b:49:a2:d9:a3:03:46:70:a8:ea:28:5c:
da:9b:2f:15:4c:63:22:79:4e:26:83:d9:96:43:da:
98:e1:02:3b:96:ed:a4:3f:1b:de:eb:d2:52:bd:55:
27:5c:f1:81:2a:99:e3:d6:5a:21:c0:75:20:37:5c:
68:b0:f9:fe:4c:c7:77:cb:5a:6f:b1:08:a9:79:b0:
bc:d3:4c:7f:60:1a:56:03:ca:b3:e1:6c:ba:31:80:
4a:14:d3:ad:62:67:17:77:19:64:fc:27:71:c7:61:
19:4e:68:55:cf:c2:9c:9d:8b:23:6d:7d:75:6c:d2:
fe:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1C:97:07:73:B8:EE:7A:D1:CB:E4:E6:77:85:8B:FD:44:13:B7:A5
X509v3 Authority Key Identifier:
keyid:28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:12:e7:d1:d4:fb:5e:9a:52:dc:b7:56:1e:d5:b3:f3:3d:6b:
58:9d:11:59:31:d4:50:ea:90:d9:4f:2f:8d:5e:3f:32:bb:e4:
bf:eb:67:e5:a7:bc:95:6a:82:4c:3a:c2:75:64:41:0d:25:29:
13:9c:64:20:40:5b:d1:a0:3b:d9:0f:df:0e:2a:37:82:66:59:
ad:ed:b9:a8:fc:04:07:79:01:3a:f2:c8:47:c4:ac:7d:38:58:
bd:b1:06:00:7d:88:18:41:1a:48:c2:41:d4:c7:76:30:e8:03:
00:d5:23:b4:7d:f1:ce:41:9d:6d:1e:63:6a:8e:fb:ba:70:53:
00:eb:ee:51:7f:f2:e8:da:15:a8:74:b6:36:0a:16:b8:1e:bc:
5b:6b:95:af:a0:e8:5a:de:2f:3e:89:10:c9:35:13:b1:15:6b:
f3:44:8a:cf:ad:74:7b:2d:71:97:f3:fb:c8:0f:cf:f7:98:c4:
53:af:9d:03:29:cf:44:ba:e5:3c:fe:c5:26:d9:33:7e:a2:65:
97:bd:50:5f:0b:92:5b:da:08:e7:78:7b:3d:c9:1b:79:24:94:
c3:3f:a2:07:d0:62:3a:31:00:63:ac:b1:83:bd:d4:a9:2d:80:
80:6c:b9:ad:d4:6b:0d:26:9d:47:ef:2e:14:b7:3c:c5:57:db:
a6:7d:5d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:54 2026 by rpki-client