
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier: rQtQgUUgnxywn9/pxtF5V087qDQbuGctI8EJvg0ezDI=
Subject key identifier: 19:7A:5B:B7:58:FB:BE:92:CC:4D:23:F8:1F:46:8A:C3:4E:1C:56:7C
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial: 01A0E362D140460D8159911CE08FA55689D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number: 0AD0
Signing time: Sun 27 Sep 2026 15:01:39 +0000
Manifest this update: Sun 27 Sep 2026 15:01:39 +0000
Manifest next update: Mon 28 Sep 2026 15:01:39 +0000
Files and hashes: 1: HrGcgBvg4DY29ekAPoOs0k_ceU8.roa (hash: Zi9LIDXSmXdYftVe/mbJqu9FZB8L69cv5MK/RNZAW5k=)
2: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: uc5FhOCP+9PErE6BM1lwqE408q6gjqVJa+ETFQPdevw=)
3: RxNLLXxR-CzB0lCNzFXnXse6o58.asa (hash: +bxHDoutbQA8pq/ltILKkfOw9KUe0ujPJE9JrTsk4Fw=)
4: YVLbsPphUzr0gk62ZWqr-AU_xYs.roa (hash: 40/VqOwzeKbDNYjqt9gFE2PfKWEcwlXPJGHdZ1QMGtM=)
5: xhu-0mZ6I_dG18XDHBeHb4pHzuI.asa (hash: Ckg17sZrLC7ovu4WHIS5uCgsXOtfqzHSeiiwzrs9BRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:62:d1:40:46:0d:81:59:91:1c:e0:8f:a5:56:89:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Validity
Not Before: Sep 27 15:01:39 2026 GMT
Not After : Sep 28 15:01:39 2026 GMT
Subject: CN=197a5bb758fbbe92cc4d23f81f468ac34e1c567c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:68:78:58:d1:d7:4b:44:2a:3e:13:62:cc:
17:5a:ba:61:18:e3:2b:f3:37:43:7c:de:dd:28:2f:
20:8e:c6:04:ef:ed:f3:87:4c:b3:71:6d:40:b7:d1:
26:64:d2:d3:ee:d1:de:74:1f:ec:93:7f:3f:49:a7:
e9:3a:20:63:82:5b:0c:bd:9e:4e:bb:09:5e:92:88:
25:a2:56:59:04:f7:25:6e:88:9f:d4:d1:59:62:1b:
53:6c:8e:58:89:5f:b6:e6:5c:5c:a6:bc:e8:b0:d5:
f6:b3:07:9b:c9:64:8b:a4:11:cf:55:d0:82:52:6e:
e1:0b:8b:39:e8:65:e8:65:08:7f:e8:72:81:8a:f0:
cd:de:a2:d6:49:a4:99:1c:5b:66:fe:fb:43:5f:d7:
e2:88:a9:05:ee:ca:ba:f0:68:d1:28:91:05:6b:0f:
bb:bd:19:b8:4f:f5:de:3b:2c:24:8a:9e:eb:ab:dc:
d6:87:1e:98:01:0d:f3:f3:99:30:1f:ea:e3:a0:0e:
44:37:c5:d5:b7:4a:51:e5:4d:f4:28:16:1b:a9:1b:
08:27:8e:cb:d6:d3:82:73:1a:b9:a7:b3:06:43:3f:
1b:f5:ec:2a:54:f2:67:a0:1a:48:e1:62:c0:3b:14:
a9:93:51:ed:48:da:b8:e3:bd:fa:5e:6b:35:ed:fc:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:7A:5B:B7:58:FB:BE:92:CC:4D:23:F8:1F:46:8A:C3:4E:1C:56:7C
X509v3 Authority Key Identifier:
keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a8:46:23:74:a4:e7:36:e3:8a:39:fd:5f:2e:ee:a0:2a:c8:
56:b9:a7:09:21:34:b7:f0:9b:d7:71:c6:cd:b9:72:49:f7:ba:
d6:e7:68:c5:bd:ad:ae:f6:80:9a:b0:e1:c5:b6:0b:d4:8f:9a:
ae:8c:8b:22:d7:d3:7f:09:f4:a1:94:d6:92:44:77:2c:47:cb:
ea:2a:04:8c:db:77:50:b1:95:8c:18:35:06:c0:88:06:aa:af:
b5:68:c6:d4:9d:93:fc:c7:ac:11:e2:ec:03:96:37:e7:ac:a7:
34:ad:80:73:a4:e6:b8:df:c5:96:20:1a:15:85:38:55:a3:2f:
e1:88:07:82:18:cb:65:0d:8f:31:e0:ec:af:17:ac:b9:d4:6d:
f8:63:ce:60:9c:e8:29:46:bd:e2:be:b3:df:0c:99:b5:8b:2a:
a9:4f:fa:ae:93:f4:c5:17:5c:fe:a7:97:41:74:88:c6:90:f9:
15:05:98:76:fe:b6:e9:b7:7d:a0:c7:79:6f:14:04:3b:f6:8a:
df:f5:81:ab:f2:44:8a:38:0b:78:5b:83:0f:e0:11:23:2b:b1:
bd:71:9c:c3:df:5b:be:5e:ca:1f:3f:78:7b:c5:8c:6b:b6:60:
65:6a:37:8a:e3:88:5e:3d:5c:3f:e8:4a:fb:f9:01:da:aa:e4:
eb:29:6e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:21:28 2026 by rpki-client