Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json)
Hash identifier: OjrYFC5LRIhNeYjfg53UVyWEDoijtL+1SUlcCdaLP+Y=
Subject key identifier: B3:1F:2E:66:B3:CB:B4:FB:C8:B2:2D:AF:9B:4F:43:52:41:82:61:19
Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Certificate serial: 019D375247D1ABCC9B4F00B2D4269C9DFA40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
Manifest number: 0FAA
Signing time: Sun 29 Mar 2026 02:00:32 +0000
Manifest this update: Sun 29 Mar 2026 02:00:32 +0000
Manifest next update: Mon 30 Mar 2026 02:00:32 +0000
Files and hashes: 1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: snfB00hMuuSBKynbc8Rq2zDozoPPL5PDeGSYSX9+ifo=)
2: qr3Na9k4dEq-BltyNe_Y-J5z6Xg.roa (hash: WKJf5bBFt3vRZjUBsw0y9RXB09W0E9StehXTEF8mDn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:47:d1:ab:cc:9b:4f:00:b2:d4:26:9c:9d:fa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Validity
Not Before: Mar 29 02:00:32 2026 GMT
Not After : Mar 30 02:00:32 2026 GMT
Subject: CN=b31f2e66b3cbb4fbc8b22daf9b4f435241826119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c3:cf:d3:b5:53:63:43:f5:42:53:cf:cf:b6:
8b:fe:d5:de:44:a2:18:0c:df:e5:cd:b6:68:3f:82:
d5:36:3a:6c:7d:1c:4b:a5:ec:19:06:0c:1b:5f:ea:
b2:5d:17:4e:9a:4c:81:6b:68:09:0d:20:88:f3:ee:
93:81:94:ff:f9:8e:12:78:ef:1d:1d:b0:fd:43:f6:
35:3d:fc:04:a0:ba:43:bb:da:fa:98:47:3c:97:36:
54:bf:6b:c1:83:19:ef:ce:09:4c:d7:11:ca:89:8f:
78:c5:9e:b4:05:ee:1e:32:9f:2a:fd:1c:a8:eb:36:
09:8d:64:82:71:88:66:26:79:f4:a7:40:84:86:04:
e2:4a:80:23:4d:ae:46:5e:1b:89:69:c1:22:d9:7a:
2b:c2:1b:95:92:3b:7f:c2:ae:18:22:91:29:19:46:
4d:dd:7d:4e:55:28:01:52:6c:b2:fd:54:62:23:6e:
90:b9:26:d4:54:ab:83:a2:eb:c8:1b:55:87:ca:88:
8a:1b:7c:4a:cb:18:23:15:18:99:86:11:97:1b:a9:
48:3c:03:c0:d3:c7:25:7c:8e:81:d6:56:0d:7b:59:
16:16:10:bb:33:e1:e1:b6:62:ac:72:d9:76:82:98:
60:e5:30:e4:3a:f5:70:c1:63:52:02:23:6b:e5:d1:
43:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1F:2E:66:B3:CB:B4:FB:C8:B2:2D:AF:9B:4F:43:52:41:82:61:19
X509v3 Authority Key Identifier:
keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e6:6d:52:18:57:10:1c:d4:85:a3:b6:bc:ae:6a:61:46:62:
ea:bc:b0:a2:38:93:b3:ef:4e:fc:aa:f9:0f:ae:c9:cf:f9:9c:
5f:5c:da:07:0a:db:82:b8:3e:68:24:f6:9a:5b:83:a2:a8:50:
18:49:08:82:e1:33:9e:7b:03:e6:80:8f:3e:c0:a4:1a:75:96:
d4:e6:14:de:93:1e:b8:ee:b3:f2:2c:c1:5c:1e:02:76:c2:12:
3e:6d:d0:43:c4:d3:1f:4a:47:b8:b9:a5:98:61:ca:a2:92:60:
ef:20:54:10:1c:fb:f3:79:f8:cd:da:68:a8:1a:84:23:4c:12:
44:f6:a6:36:71:bc:3b:88:79:c4:be:91:a0:d3:ca:ee:3c:06:
28:40:eb:14:25:63:53:06:5a:a7:d7:95:31:ee:20:3e:5d:b8:
d3:49:4c:c0:e6:f0:8e:3e:96:fc:c9:33:b9:b6:16:82:4c:68:
8e:e8:8c:c3:63:bc:e1:7a:6c:5d:98:73:01:62:f3:58:41:cf:
be:c4:e8:56:44:e9:b9:38:9d:44:69:ef:72:dd:46:8d:a9:d9:
1f:99:32:74:96:87:65:c8:ed:08:20:6c:dd:18:e8:46:54:44:
90:f8:6e:33:0d:77:b7:41:f5:2b:4e:bc:c1:53:ce:52:c4:71:
fb:63:7f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:22 2026 by rpki-client