Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json)
Hash identifier: XS09Zga3PlWvOxrTG/d72s8IgRHCzXvUHY/kixoK8Uc=
Subject key identifier: 1B:F0:14:C4:30:75:08:73:29:BC:BB:FC:9A:8B:B3:2F:7A:62:67:D2
Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Certificate serial: 019F1A1EE5D9182EDFB6396E4718D55FC7AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
Manifest number: 10A4
Signing time: Tue 30 Jun 2026 20:01:00 +0000
Manifest this update: Tue 30 Jun 2026 20:01:00 +0000
Manifest next update: Wed 01 Jul 2026 20:01:00 +0000
Files and hashes: 1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: xV7qrOI2cdxp/O9EywOSepF4dFPYUXefNi35it6BAkY=)
2: qr3Na9k4dEq-BltyNe_Y-J5z6Xg.roa (hash: WKJf5bBFt3vRZjUBsw0y9RXB09W0E9StehXTEF8mDn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1e:e5:d9:18:2e:df:b6:39:6e:47:18:d5:5f:c7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Validity
Not Before: Jun 30 20:01:00 2026 GMT
Not After : Jul 1 20:01:00 2026 GMT
Subject: CN=1bf014c43075087329bcbbfc9a8bb32f7a6267d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:09:b9:64:ed:91:01:fc:d8:a0:a5:17:12:3e:
b0:0d:21:50:69:b0:2a:10:88:1a:00:3a:de:4b:8e:
ab:ff:66:e7:d9:39:27:f7:e5:2f:8d:7e:3d:07:98:
a6:64:e5:b2:7d:b3:a6:96:a9:d7:c5:74:1f:49:57:
f2:5c:8f:55:64:a3:6c:18:29:0a:a4:d3:4d:44:4f:
e9:fb:b9:b2:d2:6f:9d:19:b3:60:10:5f:54:96:cc:
a7:2a:7a:d7:ab:95:ac:68:0a:d8:bd:8c:f4:fe:ed:
f5:74:fe:bd:79:d8:3c:36:ac:15:b2:4b:12:c0:de:
8f:5d:a4:88:4f:cb:0a:5f:2e:1b:a5:21:aa:5b:70:
08:9e:62:f1:dc:85:d9:67:fa:0e:e0:b7:bc:f4:3e:
f3:c0:ce:21:5a:cb:b6:4c:ee:e7:8d:bf:87:7f:7c:
0b:ae:43:f0:18:40:6b:15:7f:eb:fb:70:7b:b3:25:
79:a6:4d:0a:01:0e:0d:56:5c:5f:2a:74:2a:a0:17:
90:b3:29:1d:f7:3c:ee:8c:6b:3c:71:63:e1:27:c5:
f6:85:6c:9a:5d:2e:6a:e4:fb:2c:e0:e9:92:ec:5c:
e0:c7:d8:ce:89:41:b3:41:29:3e:aa:4b:dd:46:85:
29:2c:a7:3f:4f:1f:3e:26:cd:d7:ca:e5:99:46:1c:
7d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F0:14:C4:30:75:08:73:29:BC:BB:FC:9A:8B:B3:2F:7A:62:67:D2
X509v3 Authority Key Identifier:
keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:de:cd:ba:5a:e1:1d:66:19:81:5f:d4:33:8b:95:3e:61:53:
62:aa:b7:48:b3:e1:3e:64:dc:ee:7f:9f:a1:d8:c3:e0:dc:52:
69:d0:65:11:3e:9c:e8:95:77:68:46:55:4f:d6:c6:0b:c8:9d:
6f:db:36:07:7d:5e:b7:32:88:99:21:91:2f:e5:2a:dd:9b:34:
9a:0f:52:25:46:c8:18:f7:14:78:3a:16:59:b6:a6:ab:e3:ad:
6b:4d:01:d4:a8:05:34:84:f7:08:73:bc:7b:c5:38:56:5c:5a:
d8:4d:62:25:24:92:60:e6:2d:b7:d1:c5:b1:1d:75:08:4c:37:
ed:44:6a:88:5c:9f:85:6d:64:ce:3b:f2:6a:88:2a:67:76:fd:
23:81:f8:42:9d:c7:ac:ce:c9:b5:66:95:f1:73:9c:08:b4:90:
cb:f9:b2:e2:47:85:f1:65:44:3b:31:fa:01:39:9f:f9:b5:4c:
70:91:02:19:e7:57:53:1e:24:02:57:94:53:6e:02:d0:2f:58:
e5:cc:43:4b:b8:6e:17:d5:63:c3:a6:8f:27:fc:92:2d:1a:38:
f9:c0:22:40:88:42:a1:5d:23:b8:1d:dc:e4:12:a2:8f:9e:e1:
5a:8d:7e:1a:08:dc:89:76:39:19:04:35:c3:73:fc:12:49:11:
5b:9f:93:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:36:46 2026 by rpki-client