Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
File: KvXkhmugmCASSm5REQT8QfpUGZU.mft (raw, json)
Hash identifier: QTWOf733FiUXNEhMHa4/ChBKCi7TbOAgFXsa9LiFCHw=
Subject key identifier: A6:AE:DD:FD:6E:51:27:69:0B:F7:70:D0:16:6B:CF:6F:0C:C5:9A:F4
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial: 01A08A8C151CB9899349246D07B32BB3F62C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
Manifest number: 1787
Signing time: Thu 10 Sep 2026 09:00:31 +0000
Manifest this update: Thu 10 Sep 2026 09:00:31 +0000
Manifest next update: Fri 11 Sep 2026 09:00:31 +0000
Files and hashes: 1: 1-z20vDfkn7oH-6wUhtZ7pUOpXYs.roa (hash: 4MFRLpbPJz7onF3ec6CHT+GVAOztKot1i4cNl9/RUGQ=)
2: KvXkhmugmCASSm5REQT8QfpUGZU.crl (hash: lCsdXeZzqO0fknj1IBZ9nGgHenIVv56HSUpiuJ+z14s=)
3: O21Shcq_z6RKIQVhghQ8x3iEUgo.roa (hash: PftCITy+sH9MILDPnvPA0rgTafRE24Enke6NGZ2wU40=)
4: kip9OEz8XKCqejVGiyHb4UeVJqw.roa (hash: 2JQk1BgdQDCMPFy2Bnpli4/vgD3QHxPKM4wyX0aSciw=)
5: qFN4BBxdmHy_3BcnNOupfLTZLMo.roa (hash: BnnmcXeCam4+KhT/CdouCX5HwDOQfbwphY/d8ikHz1E=)
6: uak-SP6C0SdGYf4Tcy5QLvzCEvQ.roa (hash: 5hi2l5GuzQIHHEKLjg//xukNKdrAlFGmuJKbjmJZ2aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:15:1c:b9:89:93:49:24:6d:07:b3:2b:b3:f6:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
Validity
Not Before: Sep 10 09:00:31 2026 GMT
Not After : Sep 11 09:00:31 2026 GMT
Subject: CN=a6aeddfd6e5127690bf770d0166bcf6f0cc59af4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ed:8f:27:db:79:d6:25:1f:65:86:12:da:40:
c9:f3:5b:50:55:63:73:f2:94:fc:9f:11:3c:52:d7:
b4:9d:7c:61:8c:97:57:63:7d:27:d2:03:f6:7f:72:
6e:0a:d2:72:d1:5f:e1:9b:28:fe:20:c3:1e:4c:07:
6f:8d:56:10:85:e0:66:bb:dc:35:f2:82:83:d0:53:
14:c1:97:4b:2d:47:a5:ef:5c:bf:1e:9a:63:c9:05:
1f:9e:68:61:a1:1d:9f:8a:4e:d9:8e:0b:a5:20:7e:
68:90:b4:d0:23:38:1d:7a:e8:16:be:58:ea:db:cf:
f4:7c:c8:af:c4:4c:63:55:b0:63:d3:64:a7:c1:c4:
2e:f1:bd:3d:c2:b9:34:31:97:3e:87:61:4f:ed:cf:
45:70:6a:ed:92:67:6f:43:1e:b3:5a:dc:2b:35:8b:
27:59:b6:96:7d:91:ed:04:27:b4:60:f1:3c:9f:d9:
8e:d0:fd:c3:69:05:19:69:eb:4f:f2:07:9f:2c:53:
37:de:ed:b4:a2:00:33:9d:30:bc:0e:89:e2:fe:01:
fd:65:8a:43:a5:df:fe:de:ea:29:2d:29:7b:f1:de:
a9:90:7d:ea:46:26:2f:3d:9e:a5:7b:70:bb:8a:4e:
30:16:eb:1f:38:0e:5f:1d:5d:7b:2c:6f:5f:df:f4:
3c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AE:DD:FD:6E:51:27:69:0B:F7:70:D0:16:6B:CF:6F:0C:C5:9A:F4
X509v3 Authority Key Identifier:
keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ff:7d:13:df:ac:b5:7f:7b:4a:73:3a:d4:7f:85:d0:09:04:
0f:b8:2e:97:02:8c:a7:2a:15:3a:3e:da:82:c3:1c:9b:e5:c5:
eb:e9:c7:d3:43:bd:d5:14:9f:bc:67:c8:f2:4a:43:d0:d4:8d:
a5:e1:dc:a1:a5:a1:09:f8:7a:b6:67:de:e9:5c:2e:df:e7:6a:
34:66:3e:1d:89:9a:ba:cd:dd:cf:ab:04:5e:09:03:87:bf:39:
d2:bf:20:0c:13:5f:25:19:73:a7:4f:7a:23:86:2e:72:39:2e:
21:a7:da:f8:16:46:fa:65:3c:25:2c:91:09:b3:d7:6f:48:9a:
56:8c:a1:8a:ed:8a:2d:fc:70:d5:ad:ac:95:67:9e:c6:d0:61:
ad:83:23:ef:9b:e7:8f:53:8f:1d:28:d7:76:bb:73:b0:16:3e:
93:03:ab:f0:8b:22:20:44:29:0c:25:93:29:0a:68:b1:91:be:
31:38:f2:61:73:1d:f7:de:7b:26:65:f7:2f:09:fd:a1:58:30:
6c:d3:fa:6a:cb:f2:21:de:40:ac:35:cd:c5:8d:e6:1e:33:6e:
20:35:8c:75:e1:c2:65:7c:7c:d5:65:81:9d:53:65:f7:66:cd:
d1:af:a8:e3:98:ba:9d:93:f0:f0:36:b8:d2:70:8c:b2:25:02:
9b:82:9b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:52:02 2026 by rpki-client