Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: +IPANj8EpbBE7/B0FPH9LDFiO3c2f83ZtwFmiQ4bp+c=
Subject key identifier: E3:2B:2F:06:6E:CE:43:9A:3C:9C:F3:56:9B:30:CD:60:DF:53:EA:FC
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 019FF97F399903EB3DDEE44C04D07B24EC0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 19FA
Signing time: Thu 13 Aug 2026 05:01:32 +0000
Manifest this update: Thu 13 Aug 2026 05:01:32 +0000
Manifest next update: Fri 14 Aug 2026 05:01:32 +0000
Files and hashes: 1: H1aTR_3-hcIaSL6m2Xtkw0pDsL0.roa (hash: qNxstYo00+D1moz7OPyfI/Jls2a6koAXTIX0TooiMUg=)
2: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: BdDIA/5gdEE3M2mYdX78IZ0hNw/nZmYjcDXDvVIV/wQ=)
3: rV4fWnkrcGIszMs_FpYbegApVHE.asa (hash: 56jzfQdPh/s5EfuIXCaFZwWPR/T6Xgb5ZA7aJzX2/HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:7f:39:99:03:eb:3d:de:e4:4c:04:d0:7b:24:ec:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Aug 13 05:01:32 2026 GMT
Not After : Aug 14 05:01:32 2026 GMT
Subject: CN=e32b2f066ece439a3c9cf3569b30cd60df53eafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:c1:cc:d1:83:45:27:59:4f:52:19:8a:09:
8d:91:9d:51:72:ef:61:a6:62:d9:16:f4:54:8d:07:
14:e6:a8:f2:6e:4b:8c:40:d7:62:17:5c:db:f3:87:
cb:6c:5f:df:cc:d4:52:20:78:33:ef:23:9e:8b:86:
53:39:00:68:58:e2:3a:90:89:17:45:68:1f:e2:fd:
cf:4f:4c:87:dd:76:a5:fb:82:cc:e7:76:20:12:77:
8a:95:c1:2b:01:d9:13:b0:03:ca:cc:65:61:93:05:
a7:b8:71:92:81:02:0c:c9:13:f8:f4:bb:9e:49:b5:
4f:2b:cb:01:01:03:83:3c:d0:e9:82:8e:63:f0:57:
b8:b4:ba:62:8c:77:46:91:8b:5d:91:fe:93:1c:9a:
f3:7e:e6:43:d6:9f:4a:cb:e4:22:37:02:cd:a4:72:
3d:02:0e:37:ca:a5:03:6e:72:34:2a:b4:de:19:fa:
f8:bf:b8:ad:35:d5:76:fa:c6:f3:42:19:53:25:63:
c7:95:69:62:b2:57:72:78:3c:60:a0:51:4f:8e:43:
d9:4e:01:6b:db:7e:be:96:84:76:ea:32:d3:0a:71:
2f:97:28:d0:9f:83:43:a6:54:0a:d2:4b:c6:6c:25:
23:05:31:ca:88:13:62:7c:f8:6b:7d:f5:a9:90:53:
e0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2B:2F:06:6E:CE:43:9A:3C:9C:F3:56:9B:30:CD:60:DF:53:EA:FC
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ea:5a:61:2f:57:67:94:e0:77:58:98:4f:c6:24:08:89:63:
28:8c:41:98:e0:ab:0c:fd:f4:c8:70:8e:20:14:1a:4e:a8:0e:
ce:b0:59:e6:c8:41:03:20:20:21:f6:09:da:e2:17:76:56:73:
0b:22:58:b2:08:83:f7:ef:c4:62:94:08:f6:49:5e:d7:93:a2:
aa:bd:61:d7:e9:5d:0e:f5:95:1f:2d:42:b5:dc:70:7d:62:34:
67:f0:25:49:e3:57:15:30:8c:2a:e8:00:83:33:72:e8:cf:d9:
ef:c9:81:c7:44:2e:7b:1a:b1:02:c7:27:4f:e6:82:a5:df:1f:
7c:65:50:a8:f9:89:16:26:8c:4f:89:92:16:32:6f:c6:38:fb:
0f:e0:4b:2e:6c:d1:6d:53:0f:65:ee:c3:45:e5:a7:f9:3f:4f:
28:39:fa:2a:60:f0:63:6b:72:4c:50:58:8d:f8:a0:31:1a:ef:
8a:65:bf:86:1f:09:7b:4b:b4:5a:2c:2c:0c:b4:62:4d:94:51:
ac:d2:de:a3:4b:81:3b:26:f5:6a:7d:df:72:48:44:4a:d6:a0:
50:39:38:60:dc:a3:48:f5:7d:49:f4:ac:a3:51:d3:ce:6a:6d:
2e:57:46:c4:4e:a3:24:03:84:68:04:17:ec:c5:99:66:d7:bb:
83:67:b2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:59:36 2026 by rpki-client