Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: 3JV2d9XH3aECRpSh2JBrb4rMmKH65eMLmWxvNWWJ16Y=
Subject key identifier: A4:B2:76:63:49:7A:49:BD:E0:0B:57:F6:29:C3:69:2D:6C:B3:08:54
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 019EFC839040484F15377C25B5DBF5A17FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 1977
Signing time: Thu 25 Jun 2026 02:02:20 +0000
Manifest this update: Thu 25 Jun 2026 02:02:20 +0000
Manifest next update: Fri 26 Jun 2026 02:02:20 +0000
Files and hashes: 1: H1aTR_3-hcIaSL6m2Xtkw0pDsL0.roa (hash: qNxstYo00+D1moz7OPyfI/Jls2a6koAXTIX0TooiMUg=)
2: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: s/J2Pc0NaDHixuQRZ1lf+9srxIT37Ydjnu7vKJfePb4=)
3: rV4fWnkrcGIszMs_FpYbegApVHE.asa (hash: 56jzfQdPh/s5EfuIXCaFZwWPR/T6Xgb5ZA7aJzX2/HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:83:90:40:48:4f:15:37:7c:25:b5:db:f5:a1:7f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Jun 25 02:02:20 2026 GMT
Not After : Jun 26 02:02:20 2026 GMT
Subject: CN=a4b27663497a49bde00b57f629c3692d6cb30854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:3f:33:f3:59:8e:01:40:59:06:3a:a0:ed:
fa:ae:9f:98:2e:ae:58:2c:34:df:55:de:4b:1b:e7:
ef:d8:37:69:74:b4:2d:44:a1:15:57:af:c6:2f:34:
0d:35:a9:5a:78:d2:2c:fe:a2:c3:b3:e8:10:7f:c2:
ce:d0:d2:99:e2:3b:58:52:50:54:ed:36:15:0d:f1:
3a:94:b9:b6:2b:77:c9:6b:a1:b6:15:93:32:7c:16:
82:f6:78:a1:d6:70:d0:87:7d:7e:99:9e:1c:4a:fe:
97:6f:fb:78:1a:1a:01:ab:45:04:2d:db:2c:af:a2:
53:f2:d9:25:d9:e4:d4:38:2c:95:d4:99:bb:85:59:
2d:2c:9b:15:62:72:06:36:ac:b3:4d:aa:22:64:ad:
4a:f8:6b:8c:7d:24:79:3e:88:14:9c:5e:db:45:c4:
4c:12:28:17:c8:29:ba:15:75:cb:2a:94:2a:e6:f8:
ba:ff:03:39:47:c3:17:92:9f:80:76:83:91:7d:e1:
75:59:0c:42:f7:80:da:d3:13:fd:4f:78:f3:ae:a3:
47:c9:fe:8b:8e:04:bd:12:2c:8f:2e:2a:10:5d:7a:
04:14:8e:d6:4e:68:b1:52:2a:62:22:f1:49:10:c2:
82:0b:6c:09:18:3e:36:ba:35:1e:76:41:5a:46:4d:
9a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B2:76:63:49:7A:49:BD:E0:0B:57:F6:29:C3:69:2D:6C:B3:08:54
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7b:ff:34:72:78:36:65:8f:03:8f:24:c6:57:de:06:dd:98:
c5:2c:f5:c5:13:44:ab:9d:2e:ab:e2:62:6b:71:52:42:b3:f5:
d2:98:57:39:3a:24:33:5a:64:15:e2:7d:67:d4:b4:fc:cb:88:
92:34:56:bd:cb:da:3c:e9:02:db:d9:4f:9f:08:31:52:8e:98:
47:9d:e8:a6:3f:17:1c:88:20:7b:b2:2e:30:98:ae:b3:3b:0b:
86:b1:b4:63:9a:f8:04:11:70:e3:ac:36:f4:8f:16:cd:b2:0e:
81:3a:db:eb:ad:13:76:61:5d:2f:ad:44:c9:fe:f5:44:f7:50:
1f:8b:3e:9e:b6:ef:d7:71:91:2a:f4:31:f5:84:22:f5:ae:a6:
c8:2a:9b:46:3a:fb:a0:bd:e1:61:0c:21:24:b3:e2:8b:60:90:
f0:57:40:5c:e4:93:c6:09:94:8e:7a:7a:32:bc:68:9c:35:c0:
4c:70:d2:2d:a4:20:cd:10:e9:46:a0:83:d5:51:56:98:e9:dc:
fb:48:19:ee:fa:ad:04:9c:1a:0a:75:a1:49:77:2c:98:25:99:
e8:e3:57:b8:f9:9d:0e:92:8e:b9:a1:19:0f:f8:1f:76:da:ce:
92:36:d3:48:20:02:64:af:e0:2a:ab:8b:7c:b0:02:78:c7:49:
0f:8f:96:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:30:03 2026 by rpki-client