Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
File: kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft (raw, json)
Hash identifier: JHKb8wJDdPsDqY+ocJBbHOlVByjlstJaKzqsAlbtvy0=
Subject key identifier: 64:AE:FB:E8:4E:51:0F:29:92:96:F5:C8:87:D3:E3:61:A4:10:DF:D8
Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
Certificate issuer: /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Certificate serial: 019F12D378582420FAA61E090AAA71B05CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
Manifest number: 1595
Signing time: Mon 29 Jun 2026 10:01:16 +0000
Manifest this update: Mon 29 Jun 2026 10:01:16 +0000
Manifest next update: Tue 30 Jun 2026 10:01:16 +0000
Files and hashes: 1: ZLG2d-EvI3tDHtNjQT_sDlpWBXM.roa (hash: bTLO/he/cwtOoUf2Miq0EAEbluFDqTVodZfbg6upreQ=)
2: kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl (hash: A9BYeXZNANLJfUJ5EF4u8dpLh0/pVnUbrqpdQO1Pxs0=)
3: n4P4Aw5EqVPbp0dHUGmlk-Fj3KQ.roa (hash: OBqZU1zM//7Ku6VXCPW57HKZVO1wfa+8Zttcrr4ee/o=)
4: t7Gq84nW0Oj9leZaX2X9wjhswgA.roa (hash: yr3zYXhfmgwWPLlesJ4m39gkLVl7WXaVbHMKkBty0Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:78:58:24:20:fa:a6:1e:09:0a:aa:71:b0:5c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Validity
Not Before: Jun 29 10:01:16 2026 GMT
Not After : Jun 30 10:01:16 2026 GMT
Subject: CN=64aefbe84e510f299296f5c887d3e361a410dfd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:2e:da:25:1b:d5:f5:eb:1c:35:39:3e:c9:
73:a0:83:87:ff:08:6a:26:91:63:46:d7:0d:78:56:
d7:eb:4b:6c:15:16:4c:8e:67:c6:da:e4:cd:7d:82:
d8:5a:c7:dc:d5:64:8e:cf:38:df:f2:16:5e:f6:1e:
8c:90:c4:ce:a2:72:0f:ba:f8:58:04:3f:35:75:86:
63:ce:4e:53:40:22:3a:5e:26:2f:26:2c:2f:8c:ed:
0c:43:f6:0f:2d:49:96:8d:11:7f:9c:36:35:bf:bf:
40:08:57:8d:4b:67:d7:d6:ad:5c:67:ab:75:47:82:
81:0d:d1:79:a0:0b:73:cf:d7:8e:68:21:15:cc:ab:
7e:e9:42:02:15:6a:92:1d:ae:54:e5:ee:d8:aa:07:
8f:d6:f3:46:9c:44:25:0e:41:61:61:da:8b:bb:9d:
52:f9:ef:b4:4f:15:85:00:53:a9:e5:4b:c0:37:88:
ca:5c:57:1f:ed:ba:63:82:27:93:91:6a:1b:04:51:
fa:29:6b:63:21:42:dd:c8:5e:8f:36:66:ca:fa:5e:
d2:28:8f:b8:8d:52:82:92:25:6b:a2:d0:29:90:74:
36:39:c6:28:d2:cb:2a:01:39:f1:57:90:f3:91:57:
f9:57:c7:a3:ef:c4:1c:34:95:c8:72:2c:34:30:29:
1b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AE:FB:E8:4E:51:0F:29:92:96:F5:C8:87:D3:E3:61:A4:10:DF:D8
X509v3 Authority Key Identifier:
keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f0:c5:07:7a:77:23:77:72:24:9c:3f:83:56:0b:64:26:5c:
f0:eb:8a:80:fd:8e:92:4f:23:a6:d0:09:b6:5c:76:f1:b7:65:
46:f7:df:4d:01:c1:b7:34:54:b8:2a:c2:d0:c9:07:88:1d:47:
ea:5b:d4:65:f8:15:ae:33:97:90:8a:4a:4f:48:ec:1b:f4:f0:
da:59:6e:25:96:7b:08:45:0d:5f:d8:63:bb:bd:75:97:2a:fc:
d1:ee:3e:aa:40:2f:3a:b5:eb:d6:e7:0f:3f:9b:59:36:22:0d:
c4:94:88:70:b5:aa:a5:e4:e8:d5:5b:f7:3a:e2:a1:89:73:52:
ea:55:e9:0a:fd:c6:d2:87:51:b1:a3:b3:a0:c5:4c:ff:2d:cb:
87:34:d0:69:8a:6c:0c:22:82:aa:9c:86:fc:d8:c7:ad:8f:cf:
ce:5d:46:08:d0:7f:36:7b:db:c8:4a:f0:40:06:8e:21:63:22:
9c:54:ee:1b:64:81:91:96:a6:20:bd:16:b1:31:28:fb:42:89:
37:49:ab:af:f1:c1:a2:47:e0:59:08:06:f1:8b:5f:e4:73:a8:
97:26:94:4b:ff:63:5d:d3:d9:3d:25:48:55:3b:81:30:be:04:
6b:3d:e8:30:ce:cc:0e:25:ca:bf:b6:b3:96:8d:f3:0e:f0:e2:
5e:e9:24:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:51:44 2026 by rpki-client