Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
File: KvXkhmugmCASSm5REQT8QfpUGZU.mft (raw, json)
Hash identifier: uAsVLnNKHEW8KO0m5u/wk+r6a7X1ugaC5hZCaEjEn1g=
Subject key identifier: 1A:7A:9F:A5:61:15:87:21:5F:24:4A:C2:D9:C4:1B:F8:5B:F8:DA:A0
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial: 019FA2CDDF459551B8FBF9EB9A9E032DE933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
Manifest number: 170F
Signing time: Mon 27 Jul 2026 09:00:28 +0000
Manifest this update: Mon 27 Jul 2026 09:00:28 +0000
Manifest next update: Tue 28 Jul 2026 09:00:28 +0000
Files and hashes: 1: 1-z20vDfkn7oH-6wUhtZ7pUOpXYs.roa (hash: 4MFRLpbPJz7onF3ec6CHT+GVAOztKot1i4cNl9/RUGQ=)
2: KvXkhmugmCASSm5REQT8QfpUGZU.crl (hash: AGeMwSqpRhzsEJLnIolfu2LDA6AykJgMl8FYXWWnnPE=)
3: O21Shcq_z6RKIQVhghQ8x3iEUgo.roa (hash: PftCITy+sH9MILDPnvPA0rgTafRE24Enke6NGZ2wU40=)
4: kip9OEz8XKCqejVGiyHb4UeVJqw.roa (hash: 2JQk1BgdQDCMPFy2Bnpli4/vgD3QHxPKM4wyX0aSciw=)
5: qFN4BBxdmHy_3BcnNOupfLTZLMo.roa (hash: BnnmcXeCam4+KhT/CdouCX5HwDOQfbwphY/d8ikHz1E=)
6: uak-SP6C0SdGYf4Tcy5QLvzCEvQ.roa (hash: 5hi2l5GuzQIHHEKLjg//xukNKdrAlFGmuJKbjmJZ2aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:df:45:95:51:b8:fb:f9:eb:9a:9e:03:2d:e9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
Validity
Not Before: Jul 27 09:00:28 2026 GMT
Not After : Jul 28 09:00:28 2026 GMT
Subject: CN=1a7a9fa5611587215f244ac2d9c41bf85bf8daa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:83:62:4e:39:6d:06:20:e0:b3:ea:87:fb:
0a:55:4f:3b:5a:e4:87:3d:59:c7:3a:7e:85:67:6d:
40:cd:81:7d:3c:17:ab:33:ef:e4:29:63:54:a7:59:
f4:cd:5d:6f:13:ae:06:9c:4f:77:2d:59:fa:04:86:
b3:c1:0e:fb:4f:1f:3b:da:ec:0a:21:ba:00:b4:71:
e1:5f:ed:c5:24:15:5f:34:3d:fd:da:52:33:67:1c:
f6:15:6d:63:70:bf:c2:52:bb:8c:45:b7:c1:a5:e7:
91:76:b3:66:3d:14:a0:63:91:7c:88:44:9d:bd:20:
fe:eb:b5:68:72:45:f2:6e:e9:1f:a4:02:54:14:63:
7f:95:fd:c9:e5:8f:16:92:07:de:b1:22:d9:fe:4e:
3d:f1:77:40:27:90:74:47:59:cf:7a:f3:43:d0:0e:
d9:e3:54:64:f4:07:08:57:d6:1c:a2:70:f3:20:f1:
49:30:c0:b8:68:b5:bd:4b:84:45:17:55:94:2c:75:
1d:7d:ff:88:fa:8b:9f:b0:0b:2a:43:a9:9d:21:86:
91:4c:0b:4d:10:86:04:4f:42:cd:26:04:2b:ef:3a:
a6:48:14:3f:bc:75:a2:12:ff:db:8e:44:cc:c0:b6:
c6:d6:8e:51:87:cd:d8:cc:de:95:2c:35:4f:a8:8b:
b2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7A:9F:A5:61:15:87:21:5F:24:4A:C2:D9:C4:1B:F8:5B:F8:DA:A0
X509v3 Authority Key Identifier:
keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:4a:96:c3:fa:89:e6:d3:6a:e8:d6:b8:a7:6b:e8:e0:2d:68:
ab:70:69:1f:df:56:71:96:5b:35:db:76:15:4f:5c:9b:bd:cb:
75:f9:cd:d6:1b:4e:4a:eb:7c:80:fa:78:0d:08:13:57:f6:de:
10:26:7a:cb:03:3d:eb:1e:f1:5c:05:f0:c9:ff:d1:1f:a5:44:
13:51:fb:a9:86:c5:0a:4d:93:f7:76:d5:3c:0f:38:bc:e2:44:
f4:3e:b8:31:27:c4:82:1f:48:db:8f:54:85:01:37:52:00:d2:
da:eb:4b:25:7b:31:80:fc:d0:04:f6:f7:8a:41:94:5f:8d:47:
bd:8c:6d:c4:a9:8e:af:b0:61:ac:68:d4:4a:7b:97:21:ce:0c:
28:f9:65:47:33:ca:8d:8c:17:38:32:4e:44:c0:43:8d:72:d4:
a9:41:59:11:cd:ef:55:9f:8d:72:09:15:d8:08:a3:55:df:90:
41:2d:4b:76:d2:fa:1c:b3:ef:79:25:59:ae:78:da:82:e6:22:
83:db:19:43:3e:b2:d1:2e:27:74:9c:f5:19:dc:8c:a6:79:c1:
94:c2:27:79:3e:99:bb:ae:69:86:6f:0e:8b:9d:79:d0:14:d4:
3a:b9:9a:88:8e:2d:64:52:c3:5a:20:6a:90:88:cf:fa:e8:22:
db:5f:3b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:46:51 2026 by rpki-client