Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
File: KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft (raw, json)
Hash identifier: hdoMthCHXcvBUuQyENKtYAC4fOkfTQovwVZwNd3NtYU=
Subject key identifier: 3B:65:C5:21:8C:8B:FE:B1:E7:B6:D3:9E:DE:01:7E:71:16:BF:F2:CE
Authority key identifier: 28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
Certificate issuer: /CN=2811818f95be6690e8aabc5befa217346abcd574
Certificate serial: 019E1F113842E27342E829F174D4F37FBF8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
Manifest number: 02EC
Signing time: Wed 13 May 2026 02:01:22 +0000
Manifest this update: Wed 13 May 2026 02:01:22 +0000
Manifest next update: Thu 14 May 2026 02:01:22 +0000
Files and hashes: 1: KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl (hash: mgupMoiU3qrKKIqN1mPlJWC6rtK5zAtF+SuqmkqL6xc=)
2: cjM0znzLJC2QR0PgnNVfAe1h_mI.roa (hash: niPdw0pZGGHLaXhD+OqWZAWoags/W4iskvjHWI94b6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:38:42:e2:73:42:e8:29:f1:74:d4:f3:7f:bf:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2811818f95be6690e8aabc5befa217346abcd574
Validity
Not Before: May 13 02:01:22 2026 GMT
Not After : May 14 02:01:22 2026 GMT
Subject: CN=3b65c5218c8bfeb1e7b6d39ede017e7116bff2ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0a:b1:0f:cd:42:02:4e:b2:53:1e:ed:44:4c:
28:b8:1f:b8:27:78:15:ba:21:0e:64:5d:54:71:3f:
a7:96:d0:dd:bd:43:49:ef:3c:ed:3b:44:a8:ab:63:
89:01:3d:fc:29:be:4e:f7:f7:bf:26:e5:ff:22:af:
97:ec:c6:e9:1e:ae:2d:7f:98:1d:83:17:60:32:d3:
1f:de:30:61:4d:fc:3b:b6:4e:fa:3d:30:33:5f:c6:
b7:17:b8:38:3e:ab:ab:93:d5:68:e3:6f:a1:2d:42:
99:fa:0b:83:d5:26:2b:91:c8:4f:44:81:85:cb:a2:
a9:95:aa:12:42:f7:22:20:15:e3:3d:45:90:1d:d3:
c6:3d:9e:d4:78:39:94:84:c3:f7:82:1c:1d:b2:8f:
22:7c:2f:a5:4d:8c:da:e1:a8:9f:d1:97:62:55:a0:
b4:b2:98:dc:c7:1e:12:f4:fd:56:58:eb:03:b4:d5:
0b:62:81:08:61:cb:3e:d7:3e:6d:d2:6a:8a:be:02:
12:41:03:22:d3:f9:11:17:df:85:0b:86:f4:24:25:
de:d9:50:7d:de:b1:a4:a3:31:09:e0:d9:67:c7:38:
09:2e:01:91:5a:31:e8:81:7d:82:88:2f:b7:8c:dd:
f4:b7:c2:f3:7d:0c:55:f9:c2:3e:fc:26:d0:77:bc:
f6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:65:C5:21:8C:8B:FE:B1:E7:B6:D3:9E:DE:01:7E:71:16:BF:F2:CE
X509v3 Authority Key Identifier:
keyid:28:11:81:8F:95:BE:66:90:E8:AA:BC:5B:EF:A2:17:34:6A:BC:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBGBj5W-ZpDoqrxb76IXNGq81XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/89e655-bd79-4984-b649-42e57ef6000a/1/KBGBj5W-ZpDoqrxb76IXNGq81XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:88:49:eb:6c:64:1d:0d:e2:97:a0:68:94:95:b4:87:ac:93:
b1:b7:d9:b6:5b:6c:ac:29:83:ea:cd:89:cc:e0:b7:2c:3f:9d:
da:8d:09:53:18:15:59:35:b4:6b:a7:6e:d8:99:7d:42:e6:33:
d2:d3:9d:00:1a:f0:49:07:99:21:cd:72:8f:05:8c:55:22:e4:
34:57:94:b9:a2:34:e7:fe:4b:4b:3d:36:5c:21:d6:bc:e0:d0:
bf:2e:f3:09:e5:35:a4:73:db:a1:3f:23:7a:23:a7:c3:0f:82:
c9:a6:78:39:89:7a:dd:25:49:4f:9a:1a:9c:cc:05:1a:8c:40:
cf:05:57:cd:c1:0b:fe:b1:9f:12:ff:a8:49:6a:18:35:cd:31:
de:69:d1:2f:75:41:1e:25:51:0f:23:c7:d1:3e:83:36:49:53:
66:4c:1d:81:ef:5c:6b:03:21:22:07:fc:99:e0:01:36:85:b5:
60:f5:65:c7:ac:a9:ee:ee:07:97:19:cb:63:33:fc:2c:3a:36:
61:c8:11:83:13:1c:9e:43:78:cf:a3:ee:3a:2f:5d:2a:6e:16:
1a:3a:14:db:64:9a:d5:fd:a0:e3:f3:80:a5:86:09:bd:39:81:
18:1f:d8:a3:d9:9b:a2:df:1d:21:26:a0:25:42:de:21:ee:01:
71:19:41:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:25 2026 by rpki-client