Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: 0YqkTZms/ncGw8f+IZcfhhm0nXfKbDyU2Ru7BCEMiis=
Subject key identifier: 3C:2B:0E:A4:D4:A4:F9:31:A5:74:E3:99:7B:9C:46:7D:4A:F6:6A:73
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 01A0EAE4EF5AD67BE99F6CB5514F887779BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 1A77
Signing time: Tue 29 Sep 2026 02:01:07 +0000
Manifest this update: Tue 29 Sep 2026 02:01:07 +0000
Manifest next update: Wed 30 Sep 2026 02:01:07 +0000
Files and hashes: 1: H1aTR_3-hcIaSL6m2Xtkw0pDsL0.roa (hash: qNxstYo00+D1moz7OPyfI/Jls2a6koAXTIX0TooiMUg=)
2: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: F/ZQcJj8Mu9vqH+hSneXLCqJp2dXvnuIj4LowUIBfR8=)
3: rV4fWnkrcGIszMs_FpYbegApVHE.asa (hash: 56jzfQdPh/s5EfuIXCaFZwWPR/T6Xgb5ZA7aJzX2/HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e4:ef:5a:d6:7b:e9:9f:6c:b5:51:4f:88:77:79:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Sep 29 02:01:07 2026 GMT
Not After : Sep 30 02:01:07 2026 GMT
Subject: CN=3c2b0ea4d4a4f931a574e3997b9c467d4af66a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:96:6c:9c:97:89:f3:30:84:cf:9f:5d:d7:b4:
9f:ab:97:b9:38:a6:cf:06:c3:50:3a:55:86:38:50:
c8:0f:17:63:09:3b:df:b8:98:e0:24:ec:17:32:01:
13:85:dc:17:34:86:b6:10:85:25:64:d4:1b:6c:06:
f4:1a:5a:d5:8d:ed:d7:d0:52:7a:d4:ce:73:61:59:
56:cf:b4:7f:9a:ae:7e:5c:d3:8b:13:52:4f:8f:32:
e0:20:db:7a:73:1c:61:43:43:63:df:9f:31:8b:e1:
86:e5:b1:9c:11:2c:6d:9a:39:fb:d4:12:d5:ed:d9:
93:54:02:b4:cd:4b:75:fc:eb:46:94:4c:7b:69:71:
00:86:53:d1:c4:56:0f:ed:86:eb:fa:f0:f3:c0:d7:
4a:60:93:32:e1:26:57:07:fb:f8:83:b8:c8:0a:33:
c3:7f:4a:9a:33:37:44:e6:b2:09:87:f4:dc:7e:6b:
ed:e8:04:f9:14:75:0b:ee:29:cc:f6:22:24:ff:26:
62:90:b6:4f:c4:d6:29:cc:78:a0:ec:23:6b:87:23:
50:6a:a4:2a:f4:42:42:29:df:5f:46:f7:98:9e:94:
5c:f1:5c:fd:4b:ef:ed:0a:44:9c:53:55:84:9a:8b:
cc:14:b7:06:01:fc:b5:0f:e8:66:65:87:49:5f:78:
dd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:2B:0E:A4:D4:A4:F9:31:A5:74:E3:99:7B:9C:46:7D:4A:F6:6A:73
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ae:96:3d:25:4d:be:54:a8:cb:d0:ba:84:72:b7:42:8f:8a:
48:55:8c:23:b1:7e:d3:f3:f8:db:f1:8b:a3:9e:09:c3:3a:00:
ec:22:d8:ff:9b:16:8e:26:99:22:f5:ff:4d:e9:3e:ae:18:08:
a9:d7:7e:43:8e:e5:62:09:75:08:74:90:2e:df:36:84:eb:51:
52:78:87:f7:14:2b:19:79:06:c3:97:05:17:ae:aa:f8:94:9e:
20:d6:37:bf:49:c5:f8:f7:3e:d0:0e:59:19:36:71:5a:ff:94:
bd:a6:b2:b2:34:de:31:f6:43:d0:8f:4f:bd:20:b5:dd:d2:0f:
d5:db:46:c2:20:b1:67:54:bb:57:94:92:b4:8f:fb:87:7b:37:
8f:4d:9d:64:00:aa:55:46:b7:10:3b:8a:d0:c9:88:e0:e7:b2:
ee:44:1c:ab:87:ab:4a:52:b7:63:ce:f5:c5:1a:0e:74:1d:a5:
f1:c8:1c:de:99:99:e0:3a:35:7d:d4:60:88:99:f3:65:14:a7:
2f:5d:21:67:b3:ac:cd:7c:81:85:52:7c:9e:16:ea:81:ee:32:
46:83:13:6a:c2:0d:f1:30:bd:2e:77:8f:97:40:d5:2b:47:50:
8e:b4:15:5b:13:0f:b4:02:16:9c:b3:da:48:12:3f:4b:10:64:
ee:4c:af:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:11:57 2026 by rpki-client