Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/85f5e2-8457-4ce7-a6d5-8fd014018fdf/1/kvdzgtgVToyZSpS6Rsie_zQ4Kl8.mft
File: kvdzgtgVToyZSpS6Rsie_zQ4Kl8.mft (raw, json)
Hash identifier: 3MmwBS5aVEsqQcApwLNBgxoe63kvRs2lkBhUUwoaNRw=
Subject key identifier: BB:EC:36:59:4E:BD:1C:A8:80:78:EE:C1:3B:FA:1A:25:A6:A4:AD:19
Authority key identifier: 92:F7:73:82:D8:15:4E:8C:99:4A:94:BA:46:C8:9E:FF:34:38:2A:5F
Certificate issuer: /CN=92f77382d8154e8c994a94ba46c89eff34382a5f
Certificate serial: 01A182D069EFF7AFDC2CBEA225AD5162210A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvdzgtgVToyZSpS6Rsie_zQ4Kl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/85f5e2-8457-4ce7-a6d5-8fd014018fdf/1/kvdzgtgVToyZSpS6Rsie_zQ4Kl8.mft
Manifest number: F2
Signing time: Wed 28 Oct 2026 14:00:58 +0000
Manifest this update: Wed 28 Oct 2026 14:00:58 +0000
Manifest next update: Thu 29 Oct 2026 14:00:58 +0000
Files and hashes: 1: kvdzgtgVToyZSpS6Rsie_zQ4Kl8.crl (hash: z5hD86lb3SwYTslRKSsWyj+faOgUxscU81PQyqX8YKs=)
2: sBZLHXKBmdbc_L4gzOAoly8cQPM.roa (hash: I+AR7y/II5oW2YCQFrlgfnsSemBFgNZUNVA0P5zmKuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/85f5e2-8457-4ce7-a6d5-8fd014018fdf/1/kvdzgtgVToyZSpS6Rsie_zQ4Kl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/85f5e2-8457-4ce7-a6d5-8fd014018fdf/1/kvdzgtgVToyZSpS6Rsie_zQ4Kl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvdzgtgVToyZSpS6Rsie_zQ4Kl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:d0:69:ef:f7:af:dc:2c:be:a2:25:ad:51:62:21:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f77382d8154e8c994a94ba46c89eff34382a5f
Validity
Not Before: Oct 28 14:00:58 2026 GMT
Not After : Oct 29 14:00:58 2026 GMT
Subject: CN=bbec36594ebd1ca88078eec13bfa1a25a6a4ad19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:c6:2e:e1:44:00:10:4c:bd:60:60:32:c4:
e6:95:43:5b:6b:3a:0c:11:bf:78:ba:35:e2:cc:de:
d3:e2:54:8c:a7:3a:9e:57:dd:49:96:33:5d:50:34:
9c:35:a3:99:d1:e5:c8:0e:b6:91:0d:aa:f3:df:db:
e6:22:c8:f2:74:23:1a:40:a9:4c:34:94:90:b9:44:
18:9f:04:cd:27:ab:9e:6c:1a:70:0b:8e:7a:37:e7:
35:ac:52:13:f2:71:2d:1a:9b:76:96:f8:0d:d2:02:
34:2b:d0:bb:7b:a4:da:38:b1:75:d6:b7:8b:f8:61:
c6:46:88:30:27:a4:18:d3:60:01:7a:9d:fe:a0:2b:
17:d1:8a:8c:63:75:09:fa:4d:c4:4f:2d:f1:25:11:
cf:3a:21:31:19:53:6e:35:af:5b:42:8c:a3:17:ec:
7c:f6:c2:db:6d:3c:4f:2b:b4:62:8f:a6:df:8e:7b:
3f:97:be:8d:2d:e3:80:3d:e8:88:38:9f:03:c0:c5:
95:b6:24:4f:3b:45:d2:5a:6c:4a:9b:b2:29:ba:d2:
0b:41:37:6d:bf:af:7a:91:4d:89:ae:99:ca:65:72:
cb:c5:53:4d:61:00:5c:2b:c4:62:de:49:13:b2:e8:
04:d3:cf:e7:bf:e4:f4:c4:17:2d:b3:81:82:cb:6a:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EC:36:59:4E:BD:1C:A8:80:78:EE:C1:3B:FA:1A:25:A6:A4:AD:19
X509v3 Authority Key Identifier:
keyid:92:F7:73:82:D8:15:4E:8C:99:4A:94:BA:46:C8:9E:FF:34:38:2A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvdzgtgVToyZSpS6Rsie_zQ4Kl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85f5e2-8457-4ce7-a6d5-8fd014018fdf/1/kvdzgtgVToyZSpS6Rsie_zQ4Kl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/85f5e2-8457-4ce7-a6d5-8fd014018fdf/1/kvdzgtgVToyZSpS6Rsie_zQ4Kl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:35:54:84:21:ca:9e:e2:5e:ae:cb:33:37:06:bc:49:c7:81:
d2:33:4e:58:bc:74:88:ec:2a:b5:97:5b:f5:ba:9d:84:0c:0a:
2e:11:98:91:ba:79:ec:80:de:5d:e2:89:a0:3f:02:e4:29:6e:
09:27:c6:73:12:ce:c3:7a:5e:2b:e7:fc:44:92:dc:a7:40:2c:
9c:93:9a:75:ba:5c:dc:dc:c4:67:8e:bb:0e:e2:d2:ae:91:e1:
72:29:93:50:e1:a0:79:c4:85:98:9c:e2:00:89:65:51:4c:46:
a6:31:bd:15:62:95:cb:29:74:d4:de:01:c8:70:3f:5e:d7:98:
c1:b5:66:5e:a2:8b:24:0f:0e:76:8d:b5:43:c2:6e:13:d5:96:
fd:57:4f:65:74:bb:04:3a:d0:21:43:c2:50:4c:35:1a:da:ce:
0f:29:29:64:36:a2:d7:bf:bf:10:3f:2b:ee:fa:a6:7d:20:b9:
07:8b:cb:66:01:ac:ea:65:d6:36:39:60:e7:06:57:ee:cb:5c:
5f:37:79:9d:fa:cf:3c:28:e0:f6:fc:32:69:00:51:18:6c:45:
69:2b:40:d1:ad:e8:12:97:0a:0d:03:f0:f8:38:61:84:85:4d:
b3:10:ca:ff:16:58:9e:ee:9a:ae:f2:a4:c9:06:d4:1b:56:d1:
af:76:f5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 21:01:48 2026 by rpki-client