Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
File: KV2FhrHf5iE-CywdK__BssjTUc8.mft (raw, json)
Hash identifier: gID78f7hz64g/S1B3xG7n1XG675uaDsPH6e70PWQkmo=
Subject key identifier: 20:06:04:71:B9:68:5A:FE:85:48:BC:6C:3F:B8:3F:3F:B9:1B:8C:B3
Authority key identifier: 29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
Certificate issuer: /CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Certificate serial: 019F118A4F32830940A0690881D74B48936E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
Manifest number: 0219
Signing time: Mon 29 Jun 2026 04:01:44 +0000
Manifest this update: Mon 29 Jun 2026 04:01:44 +0000
Manifest next update: Tue 30 Jun 2026 04:01:44 +0000
Files and hashes: 1: KV2FhrHf5iE-CywdK__BssjTUc8.crl (hash: 2XQGSRlQCXhMm+zP43ji4A5VpTWouDrZQDOCbkM0uXU=)
2: RMsG8pQVuDko30N-hzzT26RjJ9Y.asa (hash: yi02C4KYzTGBREJtJL0ti8csY3NPFrvUw9hF+6s7XDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:8a:4f:32:83:09:40:a0:69:08:81:d7:4b:48:93:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Validity
Not Before: Jun 29 04:01:44 2026 GMT
Not After : Jun 30 04:01:44 2026 GMT
Subject: CN=20060471b9685afe8548bc6c3fb83f3fb91b8cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:6b:86:d2:21:88:05:52:4c:0d:ed:20:0f:
a0:b1:b0:86:ce:f5:82:5a:29:2e:ed:b5:b0:5b:d1:
f7:b3:b1:95:a9:48:cb:37:79:42:1b:7e:db:5d:32:
67:0e:17:b5:bf:b0:dc:1e:5f:8e:b2:49:ca:b2:f1:
2b:81:29:55:4d:72:81:e7:67:25:87:ad:56:47:d1:
86:d6:78:13:c6:4d:d3:26:eb:e9:91:47:c9:9e:4b:
29:03:db:9c:f3:9f:87:8d:16:53:ea:77:bd:9e:ed:
aa:7e:f8:c6:58:b3:b4:91:6c:14:7a:c8:02:30:43:
f8:2f:f5:28:bb:b2:ea:af:41:2c:fb:e8:37:e8:b6:
ec:50:20:2f:e3:bd:51:0e:10:ba:6d:4e:17:c1:fb:
99:ef:a2:59:18:8c:3d:4a:b7:44:c6:6b:63:fa:45:
b0:3a:47:43:21:64:22:d3:c9:51:0f:6a:5c:2c:bc:
64:67:80:0d:76:b6:97:25:b1:19:58:c3:7f:1d:54:
fd:70:9e:f3:86:2c:15:90:74:00:4a:cb:ff:a3:1e:
36:d4:b1:61:eb:c5:44:4d:b8:76:ad:db:01:db:9a:
cb:b5:89:6f:02:bc:da:a3:95:17:1d:41:49:e2:77:
b3:d4:e0:85:42:f3:9a:65:d5:51:66:2c:92:39:87:
d9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:06:04:71:B9:68:5A:FE:85:48:BC:6C:3F:B8:3F:3F:B9:1B:8C:B3
X509v3 Authority Key Identifier:
keyid:29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:bd:c1:50:bc:97:ee:7e:13:b7:b2:b5:7f:ca:62:d8:68:a8:
68:ce:aa:c3:82:4c:39:ad:9d:b5:4c:34:c5:e6:77:77:8d:71:
23:50:b3:85:67:71:d5:7c:c9:c3:8e:33:aa:bd:a4:68:f6:2d:
40:17:04:37:89:e4:01:0c:10:3c:9c:08:00:48:ce:f7:6e:47:
f7:94:2e:22:71:99:d8:de:50:37:5f:84:f5:b9:f4:b4:74:c2:
1d:cc:46:ff:9b:1f:84:32:5f:a2:56:75:02:35:68:2b:66:96:
0e:5d:d0:e5:72:da:4a:7c:73:cc:8c:cb:36:88:69:36:2c:df:
b9:bd:17:68:35:a0:49:9b:64:d9:06:ed:24:5f:ec:2e:9e:7c:
1f:d1:1b:99:9f:3f:23:0a:46:22:aa:ac:f7:2a:89:2b:0a:71:
27:1b:f4:40:38:d9:7c:c8:bd:fb:b4:84:67:b7:25:c5:55:e4:
42:af:d5:3a:b6:5d:ef:0a:3c:2f:14:81:cb:01:f3:c6:47:94:
90:2f:4a:e6:f4:76:11:04:af:cf:74:aa:6c:d7:2d:2e:ad:f5:
24:13:ed:8b:9b:51:f7:22:2b:08:8a:e3:73:c5:61:14:05:6b:
47:fd:3d:8d:f5:76:98:38:ac:f2:25:a4:a6:ce:35:57:33:b4:
70:28:17:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Rik8ygwlAoGkIgddLSJNuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NWQ4NTg2YjFkZmU2MjEzZTBiMmMxZDJiZmZjMWIyYzhk
MzUxY2YwHhcNMjYwNjI5MDQwMTQ0WhcNMjYwNjMwMDQwMTQ0WjAzMTEwLwYDVQQD
EygyMDA2MDQ3MWI5Njg1YWZlODU0OGJjNmMzZmI4M2YzZmI5MWI4Y2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZNrhtIhiAVSTA3tIA+gsbCGzvWC
Wiku7bWwW9H3s7GVqUjLN3lCG37bXTJnDhe1v7DcHl+OsknKsvErgSlVTXKB52cl
h61WR9GG1ngTxk3TJuvpkUfJnkspA9uc85+HjRZT6ne9nu2qfvjGWLO0kWwUesgC
MEP4L/Uou7Lqr0Es++g36LbsUCAv471RDhC6bU4XwfuZ76JZGIw9SrdExmtj+kWw
OkdDIWQi08lRD2pcLLxkZ4ANdraXJbEZWMN/HVT9cJ7zhiwVkHQASsv/ox421LFh
68VETbh2rdsB25rLtYlvArzao5UXHUFJ4nez1OCFQvOaZdVRZiySOYfZowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCAGBHG5aFr+hUi8bD+4Pz+5G4yzMB8GA1UdIwQY
MBaAFCldhYax3+YhPgssHSv/wbLI01HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1YyRmhySGY1aUUtQ3l3ZEtfX0Jzc2pUVWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83YzM2NTQtNTcwZi00NTQ0LWFkZWIt
NjZiYjMwYzI3YmMxLzEvS1YyRmhySGY1aUUtQ3l3ZEtfX0Jzc2pUVWM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC83YzM2NTQtNTcwZi00NTQ0LWFkZWItNjZiYjMwYzI3YmMx
LzEvS1YyRmhySGY1aUUtQ3l3ZEtfX0Jzc2pUVWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYL3BULyX
7n4Tt7K1f8pi2GioaM6qw4JMOa2dtUw0xeZ3d41xI1CzhWdx1XzJw44zqr2kaPYt
QBcEN4nkAQwQPJwIAEjO925H95QuInGZ2N5QN1+E9bn0tHTCHcxG/5sfhDJfolZ1
AjVoK2aWDl3Q5XLaSnxzzIzLNohpNizfub0XaDWgSZtk2QbtJF/sLp58H9EbmZ8/
IwpGIqqs9yqJKwpxJxv0QDjZfMi9+7SEZ7clxVXkQq/VOrZd7wo8LxSBywHzxkeU
kC9K5vR2EQSvz3SqbNctLq31JBPti5tR9yIrCIrjc8VhFAVrR/09jfV2mDis8iWk
ps41VzO0cCgXlw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:39:01 2026 by rpki-client