Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
File: KV2FhrHf5iE-CywdK__BssjTUc8.mft (raw, json)
Hash identifier: RMhpW91RKTtQHPd2DUwgDbSB4OabXdD6hHpyc9sPJ+I=
Subject key identifier: 80:90:FD:6B:CD:B4:24:96:8D:E0:5A:91:4D:1B:05:B3:2B:50:75:20
Authority key identifier: 29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
Certificate issuer: /CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Certificate serial: 01A1754BF8E10B028A0A02CAB991D3082EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
Manifest number: 0356
Signing time: Sun 25 Oct 2026 23:01:15 +0000
Manifest this update: Sun 25 Oct 2026 23:01:15 +0000
Manifest next update: Mon 26 Oct 2026 23:01:15 +0000
Files and hashes: 1: AP-xXNHU0gsTip0y1Z9Q1Az_oHI.asa (hash: mEQ7UyBPxSpqS6xnOjHHOLsuKuVx3u/9H3fQI1OuMmY=)
2: KV2FhrHf5iE-CywdK__BssjTUc8.crl (hash: i34L2xtDsZnJPR1k9QPI519GaGsRKrHXFT6znqQL1GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:4b:f8:e1:0b:02:8a:0a:02:ca:b9:91:d3:08:2e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Validity
Not Before: Oct 25 23:01:15 2026 GMT
Not After : Oct 26 23:01:15 2026 GMT
Subject: CN=8090fd6bcdb424968de05a914d1b05b32b507520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ec:bd:5a:65:15:53:0c:3b:9d:cb:22:5b:40:
25:3d:f4:1f:8a:d5:34:d7:5e:ee:e6:7c:c0:26:b3:
65:c4:d7:5c:55:42:ba:fe:56:82:58:6a:98:e9:92:
c2:50:d1:0c:04:72:d5:71:2b:e8:38:38:10:31:70:
c6:e5:a0:60:9c:2e:0a:91:6d:3a:25:69:10:ec:65:
b0:82:9b:1b:17:8e:5f:34:05:ea:f8:fc:5b:28:80:
af:21:a8:d5:b0:de:d1:de:0a:66:0f:88:7a:7b:22:
b2:77:61:57:8b:e3:02:58:36:e9:91:b2:5e:9c:31:
14:a9:4b:77:a7:ee:e9:66:81:35:a1:59:c3:60:e8:
b7:4b:a4:fe:8c:b1:47:3d:79:4e:ff:6a:e1:3a:eb:
8f:e0:94:69:7a:61:e5:ee:0e:96:a1:e0:61:4a:89:
8e:f4:e2:73:db:76:06:c1:8e:40:8a:e7:cc:a9:33:
ea:8e:63:c2:84:a3:51:cc:e5:3a:cc:79:69:45:7f:
22:95:4d:ab:a2:48:b6:25:36:11:31:37:ba:ed:b4:
8a:d8:b8:5c:5d:45:21:69:1a:f3:1f:9a:84:98:7c:
1f:3a:ed:7c:8b:b0:34:ae:75:d4:3f:2d:62:3a:12:
64:15:9a:e8:9c:84:8f:3f:83:f4:78:5d:23:ea:96:
1b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:90:FD:6B:CD:B4:24:96:8D:E0:5A:91:4D:1B:05:B3:2B:50:75:20
X509v3 Authority Key Identifier:
keyid:29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:72:82:9b:c0:06:ab:b0:37:de:31:bd:5a:9e:86:cd:02:a7:
a5:56:74:76:a9:e1:90:3f:39:0d:50:3c:75:d2:40:f6:d2:99:
7a:d6:5d:6d:5e:12:e7:d2:75:eb:df:ec:8e:fc:ea:b5:39:c1:
3a:91:c0:c0:71:60:41:76:7f:7d:85:26:b6:23:0d:d3:c8:ea:
4a:68:29:38:4d:5d:d6:1d:7c:5b:4e:de:65:9e:99:be:c1:ec:
b8:10:c4:6e:dd:8d:db:6a:92:bb:d5:9d:29:00:fa:13:d4:c5:
b1:6e:79:ea:52:a2:5a:e4:3b:a7:78:b8:7d:52:e9:15:5f:f7:
94:05:51:53:4e:89:b8:6b:f4:17:cf:15:af:80:80:3e:78:91:
13:8c:58:b5:90:ed:80:14:86:87:4f:6a:c3:84:91:c8:9d:8e:
24:f8:b1:45:b9:5c:d8:4d:08:37:f3:eb:f2:8e:70:cb:3a:4a:
48:20:36:ca:4a:72:37:8f:fe:0e:2f:ae:6d:1c:1b:6b:7e:67:
6e:4c:fb:f3:c4:64:cb:87:66:71:98:9c:47:c1:03:1e:bc:3b:
41:2d:0b:7d:84:a0:41:8b:ec:18:91:08:0f:1d:90:b2:de:47:
a1:1e:35:2a:2e:33:7c:f4:38:e2:54:57:26:78:db:41:67:ab:
7b:c9:6c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:34:56 2026 by rpki-client