Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
File: KV2FhrHf5iE-CywdK__BssjTUc8.mft (raw, json)
Hash identifier: Ksp5GjgGAOitzwFzgIwsQig7Dn6GyH1id7MR4w0wrWk=
Subject key identifier: 6C:2A:89:21:CB:4C:EF:B3:A4:45:E7:24:0D:6D:FB:C2:16:EF:81:13
Authority key identifier: 29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
Certificate issuer: /CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Certificate serial: 019D3865FB252AD09CFD5B92B9ECA2A47272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
Manifest number: 0124
Signing time: Sun 29 Mar 2026 07:01:40 +0000
Manifest this update: Sun 29 Mar 2026 07:01:40 +0000
Manifest next update: Mon 30 Mar 2026 07:01:40 +0000
Files and hashes: 1: KV2FhrHf5iE-CywdK__BssjTUc8.crl (hash: N48qY6zTw7PSL7EOU99IiIvq9u+SLcZ6WKTnA3KX3AM=)
2: RMsG8pQVuDko30N-hzzT26RjJ9Y.asa (hash: yi02C4KYzTGBREJtJL0ti8csY3NPFrvUw9hF+6s7XDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:fb:25:2a:d0:9c:fd:5b:92:b9:ec:a2:a4:72:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Validity
Not Before: Mar 29 07:01:40 2026 GMT
Not After : Mar 30 07:01:40 2026 GMT
Subject: CN=6c2a8921cb4cefb3a445e7240d6dfbc216ef8113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:29:d5:97:c2:41:b2:bf:9e:02:73:79:7e:10:
fb:d6:e1:f4:04:89:66:d6:44:a6:5e:73:03:e3:64:
83:a0:8c:c5:3f:c1:19:25:40:af:b5:52:5a:0a:c8:
54:4a:bd:14:38:39:30:98:83:a2:96:96:64:b6:88:
58:f5:ed:c8:bb:84:5b:07:ef:3c:8b:ee:39:36:97:
30:8d:59:1f:88:84:95:da:97:0a:78:76:74:49:35:
4d:e6:3f:6b:0a:a6:f8:e9:44:ed:2c:cf:b4:60:62:
1c:bf:da:00:ca:2a:3d:0e:64:2a:64:73:7d:cb:f8:
5f:7b:08:46:75:19:7f:b8:b0:ac:cc:ff:ce:41:88:
af:57:c0:07:e3:57:38:63:87:a7:d4:53:3a:f8:4d:
d5:63:6f:0d:e6:92:03:dd:9d:77:02:36:c5:90:62:
4a:8e:a6:5a:fb:25:eb:5e:ac:9b:e4:ac:c6:9d:36:
28:b8:25:29:b3:7c:95:31:86:f3:19:71:9f:73:05:
3a:ce:e2:03:be:ee:af:eb:45:97:91:dd:c4:61:dc:
9a:69:be:1f:b9:1a:30:c2:60:e1:bb:1b:3a:a9:33:
cb:a7:7c:43:9b:54:3c:f4:11:2d:0c:e3:ff:77:63:
c6:b9:2d:2e:fb:68:85:c9:08:01:e2:3e:60:04:72:
94:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2A:89:21:CB:4C:EF:B3:A4:45:E7:24:0D:6D:FB:C2:16:EF:81:13
X509v3 Authority Key Identifier:
keyid:29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:dc:0d:37:61:d2:b8:f6:5d:73:66:d7:76:8c:7c:31:40:ee:
38:fa:23:7d:ba:b0:14:65:33:8d:36:da:61:d9:a4:5f:38:77:
2b:d4:48:8d:71:2f:56:6c:65:fb:65:84:a6:f9:e5:4b:91:db:
bd:32:9c:77:64:7b:72:2f:bf:ac:b1:ae:7a:00:9d:45:a1:83:
61:f3:40:8a:db:3d:52:4f:72:fd:3f:38:24:8e:3c:de:69:af:
cc:e1:d2:7b:72:9a:3a:75:98:d1:ce:8c:2c:a5:82:e7:b0:19:
50:4a:48:6f:66:60:6c:cf:4b:78:4d:c1:cd:fd:96:9f:d5:f3:
b2:ef:fb:34:b5:65:e2:58:59:68:f6:2c:65:6c:dc:94:31:76:
f0:e8:3c:b3:f2:6b:cb:35:4f:b5:ac:b0:39:68:a2:cf:c2:f9:
8e:2d:9f:b5:2b:63:54:06:33:f7:3b:ba:78:17:1f:53:40:2c:
55:3c:e8:b1:cc:0d:a4:5a:e0:45:e8:43:06:c0:55:ee:82:7f:
7f:c7:41:3d:39:70:ba:de:5a:58:b5:15:21:d7:14:f5:a4:56:
b1:73:a9:bc:40:00:2d:c6:2c:ba:c8:21:ee:ab:94:6f:d4:7a:
33:c5:57:8a:4b:72:f8:fd:db:ca:5e:1e:9d:05:8a:81:56:f5:
d8:95:64:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:27 2026 by rpki-client