Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: vl1Ul+da2FrgLmvjWl37qUOgmT5hD0VsM06+3kxbnrU=
Subject key identifier: 2B:DC:6D:D5:CF:60:48:78:46:3B:2B:FC:40:13:CB:6F:AC:F1:FA:78
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 01A0F0B0754B46B070E1A7056CA2F7F2C2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 1A7A
Signing time: Wed 30 Sep 2026 05:01:31 +0000
Manifest this update: Wed 30 Sep 2026 05:01:31 +0000
Manifest next update: Thu 01 Oct 2026 05:01:31 +0000
Files and hashes: 1: H1aTR_3-hcIaSL6m2Xtkw0pDsL0.roa (hash: qNxstYo00+D1moz7OPyfI/Jls2a6koAXTIX0TooiMUg=)
2: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: We3c5QdYMhSeL6p2/TVQPHhYuiPv2tDgF7A+UBOArYg=)
3: rV4fWnkrcGIszMs_FpYbegApVHE.asa (hash: 56jzfQdPh/s5EfuIXCaFZwWPR/T6Xgb5ZA7aJzX2/HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:b0:75:4b:46:b0:70:e1:a7:05:6c:a2:f7:f2:c2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Sep 30 05:01:31 2026 GMT
Not After : Oct 1 05:01:31 2026 GMT
Subject: CN=2bdc6dd5cf604878463b2bfc4013cb6facf1fa78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:30:6c:a8:69:4f:c0:5f:ba:e2:bd:d6:86:
65:71:50:20:b2:65:8a:a8:23:2f:8f:78:a4:6a:dc:
18:24:dd:cb:f2:f3:fa:11:22:06:5b:ed:80:f7:3a:
bf:b1:d5:b4:63:53:95:ce:3a:87:dc:8a:06:c2:4e:
a8:5e:33:bd:e1:0e:1d:90:34:0a:c7:0c:36:a4:1c:
4c:53:3f:48:fc:4f:99:59:e9:e5:b1:10:f4:8b:b1:
ea:42:16:f6:f8:33:d4:9a:9c:ee:b6:94:ac:3d:25:
21:31:0a:a6:e7:f6:53:46:5d:e0:8e:fa:32:d3:be:
92:e8:e5:bb:3f:9e:cf:1e:72:9f:c5:9b:07:a5:11:
3d:d4:62:d4:ad:2c:50:b4:c4:b5:1a:d5:21:86:ef:
9b:2f:3b:f5:f6:c0:b7:46:25:8c:2c:d6:b6:26:d6:
bf:14:1a:d3:4a:ca:82:97:85:be:bd:55:54:e0:c8:
4c:98:7b:f2:2f:75:48:b0:43:ab:3e:f2:82:10:89:
50:17:4c:ca:32:25:78:4c:a3:6d:cc:bf:41:98:21:
f0:02:0b:91:25:64:fc:fc:9e:d9:a3:46:3e:12:dc:
44:20:49:15:eb:80:31:c5:8d:2d:b0:78:1d:d7:64:
03:73:21:a5:e8:91:70:0c:4e:97:a8:2e:97:a0:0e:
cb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DC:6D:D5:CF:60:48:78:46:3B:2B:FC:40:13:CB:6F:AC:F1:FA:78
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:25:8c:47:ec:28:39:4b:7e:99:4f:ff:ee:52:10:3f:9e:8d:
22:76:70:29:82:31:d0:c7:22:23:9f:85:86:64:0e:8d:0b:13:
30:58:61:6a:10:8f:f3:b7:ca:7a:b7:c8:77:c8:02:73:1b:26:
78:52:e3:cd:ec:f1:03:f5:71:2b:a8:97:fc:55:e3:be:c7:a6:
ea:4e:4b:6a:89:5f:03:7a:71:c2:1e:2f:b4:22:2a:b9:f4:d6:
63:73:b9:74:08:7e:70:f3:9a:0d:5f:26:3e:2b:39:8e:2d:1c:
c0:a1:48:c9:49:a9:e8:69:27:b7:19:71:59:f0:25:02:37:02:
5d:27:de:81:04:21:98:35:aa:8f:2c:a0:f5:00:f1:84:2f:8c:
86:7b:bb:3a:66:fb:9d:5b:55:ce:62:41:fc:3d:36:6f:30:eb:
68:5f:c5:41:74:b3:8e:35:0b:d5:2e:84:f1:45:85:7a:ad:3f:
02:51:d6:51:0a:47:51:8c:3b:60:0c:f8:f0:55:c4:e2:58:09:
ec:18:4a:24:b7:b8:f1:38:d3:6c:6b:12:c0:6e:49:4f:72:c4:
19:27:96:66:43:f1:85:0c:1e:b8:88:3f:11:b0:e0:3c:3f:3d:
89:70:62:13:9f:0b:d0:66:85:3c:26:1f:7c:43:66:31:71:66:
ee:9a:57:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDwsHVLRrBw4acFbKL38sLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NTkwNzc0ZTc3YTg5OTRhNDI4MzEyOGMzNTkyMWQwMzdi
MDZmMjEwHhcNMjYwOTMwMDUwMTMxWhcNMjYxMDAxMDUwMTMxWjAzMTEwLwYDVQQD
EygyYmRjNmRkNWNmNjA0ODc4NDYzYjJiZmM0MDEzY2I2ZmFjZjFmYTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9QwbKhpT8BfuuK91oZlcVAgsmWK
qCMvj3ikatwYJN3L8vP6ESIGW+2A9zq/sdW0Y1OVzjqH3IoGwk6oXjO94Q4dkDQK
xww2pBxMUz9I/E+ZWenlsRD0i7HqQhb2+DPUmpzutpSsPSUhMQqm5/ZTRl3gjvoy
076S6OW7P57PHnKfxZsHpRE91GLUrSxQtMS1GtUhhu+bLzv19sC3RiWMLNa2Jta/
FBrTSsqCl4W+vVVU4MhMmHvyL3VIsEOrPvKCEIlQF0zKMiV4TKNtzL9BmCHwAguR
JWT8/J7Zo0Y+EtxEIEkV64AxxY0tsHgd12QDcyGl6JFwDE6XqC6XoA7LCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvcbdXPYEh4Rjsr/EATy2+s8fp4MB8GA1UdIwQY
MBaAFClZB3TneomUpCgxKMNZIdA3sG8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NzQ1ZmUtZTQ3NS00YzU4LWEzMWUt
ZjJjMGRhNjFhYzEzLzEvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82NzQ1ZmUtZTQ3NS00YzU4LWEzMWUtZjJjMGRhNjFhYzEz
LzEvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSWMR+wo
OUt+mU//7lIQP56NInZwKYIx0MciI5+FhmQOjQsTMFhhahCP87fKerfId8gCcxsm
eFLjzezxA/VxK6iX/FXjvsem6k5LaolfA3pxwh4vtCIqufTWY3O5dAh+cPOaDV8m
Pis5ji0cwKFIyUmp6GkntxlxWfAlAjcCXSfegQQhmDWqjyyg9QDxhC+Mhnu7Omb7
nVtVzmJB/D02bzDraF/FQXSzjjUL1S6E8UWFeq0/AlHWUQpHUYw7YAz48FXE4lgJ
7BhKJLe48TjTbGsSwG5JT3LEGSeWZkPxhQweuIg/EbDgPD89iXBiE58L0GaFPCYf
fENmMXFm7ppXmg==
-----END CERTIFICATE-----
Generated at Wed Sep 30 15:12:55 2026 by rpki-client