Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/KVOjAEuiCvndrUp77X-is3odwY8.mft
File: KVOjAEuiCvndrUp77X-is3odwY8.mft (raw, json)
Hash identifier: hiu3cCixywRWT8tQ5kYnxwOWCpHRPUsA9rhCAspA7E0=
Subject key identifier: D1:66:F2:F9:BE:5D:9B:9F:BC:E1:70:56:5F:03:48:CA:FD:13:5F:55
Authority key identifier: 29:53:A3:00:4B:A2:0A:F9:DD:AD:4A:7B:ED:7F:A2:B3:7A:1D:C1:8F
Certificate issuer: /CN=2953a3004ba20af9ddad4a7bed7fa2b37a1dc18f
Certificate serial: 01A16B35B4CA666D7E77CEB1598DD2FC15DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVOjAEuiCvndrUp77X-is3odwY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/KVOjAEuiCvndrUp77X-is3odwY8.mft
Manifest number: 0237
Signing time: Sat 24 Oct 2026 00:00:44 +0000
Manifest this update: Sat 24 Oct 2026 00:00:44 +0000
Manifest next update: Sun 25 Oct 2026 00:00:44 +0000
Files and hashes: 1: Ci44PPeGoDr5RPkrR3bqNrfS0l4.roa (hash: +XucxKwhDxCm+JFWu78cScbm5vRFUONH/yt6IuhwiuI=)
2: KVOjAEuiCvndrUp77X-is3odwY8.crl (hash: nQEtznoHAHi104Hlds0bcmPSLxAAwcDb84mqtABoAPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/KVOjAEuiCvndrUp77X-is3odwY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/KVOjAEuiCvndrUp77X-is3odwY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVOjAEuiCvndrUp77X-is3odwY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6b:35:b4:ca:66:6d:7e:77:ce:b1:59:8d:d2:fc:15:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2953a3004ba20af9ddad4a7bed7fa2b37a1dc18f
Validity
Not Before: Oct 24 00:00:44 2026 GMT
Not After : Oct 25 00:00:44 2026 GMT
Subject: CN=d166f2f9be5d9b9fbce170565f0348cafd135f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:9b:0f:9d:01:60:b1:3d:06:be:55:3e:ec:
43:cc:3e:6c:62:48:aa:85:c6:44:db:97:5b:59:7b:
57:54:58:6a:a6:92:46:2c:77:29:d8:2a:ef:42:83:
2e:d0:ae:2f:a6:05:26:a3:7e:18:16:2b:70:5a:97:
46:86:f9:d8:71:e1:7d:e9:25:e5:d7:a0:fd:b3:ce:
b8:21:91:4e:4d:27:2c:49:8b:bb:47:6f:9f:97:67:
ea:07:27:d4:02:99:db:ef:9f:cb:8e:01:2e:8e:71:
01:1b:2f:98:16:48:ae:33:28:1e:33:e5:98:fa:0e:
7d:bb:31:47:c9:4f:38:d5:03:49:84:9d:38:7c:9d:
67:d4:bd:fb:0f:e5:59:64:1a:8e:58:4d:01:4f:eb:
bb:1a:a0:14:79:3c:5d:37:43:d2:6f:17:c2:ef:c8:
22:94:91:03:9b:2c:f7:dc:fa:87:ea:9a:32:23:c0:
6f:a7:93:9e:41:32:53:75:bf:62:44:16:47:29:7c:
18:6c:1d:89:71:79:7a:50:fe:92:2a:6b:12:d6:cc:
2d:7f:eb:a0:2b:cd:f5:37:0c:b4:e4:5c:b8:08:ef:
86:93:d9:37:fc:ab:7b:60:a7:a9:16:e7:d2:f5:bc:
aa:4f:70:45:9f:91:5a:24:ab:7e:6d:4c:0c:80:c2:
d4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:66:F2:F9:BE:5D:9B:9F:BC:E1:70:56:5F:03:48:CA:FD:13:5F:55
X509v3 Authority Key Identifier:
keyid:29:53:A3:00:4B:A2:0A:F9:DD:AD:4A:7B:ED:7F:A2:B3:7A:1D:C1:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVOjAEuiCvndrUp77X-is3odwY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/KVOjAEuiCvndrUp77X-is3odwY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/33aba3-9ab7-4991-89c6-b7dbb6e98ed9/1/KVOjAEuiCvndrUp77X-is3odwY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:2f:88:b7:86:6f:90:56:86:66:6d:ee:f0:4a:a4:3a:cd:59:
64:6e:90:62:eb:04:c3:8c:da:9e:cb:85:0f:cf:96:ae:43:02:
d2:27:e8:74:23:98:d7:28:7d:21:94:47:07:21:65:36:c8:8c:
2a:26:70:d1:5b:fb:ea:a6:c3:42:b0:d7:0e:69:0d:c6:f1:8e:
22:c2:ac:8f:50:0b:a7:21:e9:af:77:1e:6b:ac:4a:6b:11:7d:
bf:21:50:be:cf:22:2f:d7:64:66:e6:cf:4c:09:12:57:7a:df:
96:4d:ae:3f:41:01:b8:c7:50:7e:dd:2a:b0:b2:ed:5b:87:58:
ba:ab:2a:cc:2f:c1:8f:96:0a:d9:dc:53:c3:c3:86:19:27:5e:
80:24:6b:9b:2c:d4:ce:12:ab:a9:00:c8:e4:06:2d:fe:87:57:
dd:1c:66:19:51:b6:dc:fd:8f:94:13:9e:29:1e:b2:4c:0d:e0:
b1:25:ac:2e:23:0f:13:64:7b:f4:0c:36:e5:82:fd:9b:61:f2:
6f:db:2a:b0:3f:de:d9:b1:41:31:47:32:17:ec:bf:7a:92:54:
b4:e6:5e:0d:09:bc:bf:62:a3:51:d1:e9:16:d6:bd:5a:5b:42:
9f:41:04:f0:d6:8a:f1:83:38:38:15:eb:d0:42:20:0c:4f:bb:
18:55:81:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFrNbTKZm1+d86xWY3S/BXaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NTNhMzAwNGJhMjBhZjlkZGFkNGE3YmVkN2ZhMmIzN2Ex
ZGMxOGYwHhcNMjYxMDI0MDAwMDQ0WhcNMjYxMDI1MDAwMDQ0WjAzMTEwLwYDVQQD
EyhkMTY2ZjJmOWJlNWQ5YjlmYmNlMTcwNTY1ZjAzNDhjYWZkMTM1ZjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRabD50BYLE9Br5VPuxDzD5sYkiq
hcZE25dbWXtXVFhqppJGLHcp2CrvQoMu0K4vpgUmo34YFitwWpdGhvnYceF96SXl
16D9s864IZFOTScsSYu7R2+fl2fqByfUApnb75/LjgEujnEBGy+YFkiuMygeM+WY
+g59uzFHyU841QNJhJ04fJ1n1L37D+VZZBqOWE0BT+u7GqAUeTxdN0PSbxfC78gi
lJEDmyz33PqH6poyI8Bvp5OeQTJTdb9iRBZHKXwYbB2JcXl6UP6SKmsS1swtf+ug
K831Nwy05Fy4CO+Gk9k3/Kt7YKepFufS9byqT3BFn5FaJKt+bUwMgMLUQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFm8vm+XZufvOFwVl8DSMr9E19VMB8GA1UdIwQY
MBaAFClTowBLogr53a1Ke+1/orN6HcGPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZPakFFdWlDdm5kclVwNzdYLWlzM29kd1k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zM2FiYTMtOWFiNy00OTkxLTg5YzYt
YjdkYmI2ZTk4ZWQ5LzEvS1ZPakFFdWlDdm5kclVwNzdYLWlzM29kd1k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8zM2FiYTMtOWFiNy00OTkxLTg5YzYtYjdkYmI2ZTk4ZWQ5
LzEvS1ZPakFFdWlDdm5kclVwNzdYLWlzM29kd1k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKi+It4Zv
kFaGZm3u8EqkOs1ZZG6QYusEw4zansuFD8+WrkMC0ifodCOY1yh9IZRHByFlNsiM
KiZw0Vv76qbDQrDXDmkNxvGOIsKsj1ALpyHpr3cea6xKaxF9vyFQvs8iL9dkZubP
TAkSV3rflk2uP0EBuMdQft0qsLLtW4dYuqsqzC/Bj5YK2dxTw8OGGSdegCRrmyzU
zhKrqQDI5AYt/odX3RxmGVG23P2PlBOeKR6yTA3gsSWsLiMPE2R79Aw25YL9m2Hy
b9sqsD/e2bFBMUcyF+y/epJUtOZeDQm8v2KjUdHpFta9WltCn0EE8NaK8YM4OBXr
0EIgDE+7GFWBeA==
-----END CERTIFICATE-----
Generated at Sat Oct 24 11:04:01 2026 by rpki-client