Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: ulbRbId1WPWndOhIHwZe4wuyYyRxi+N5JRZ1Ny74ylI=
Subject key identifier: C6:ED:8A:FF:97:09:9B:03:A4:B6:D1:D8:65:45:CB:E1:CE:02:B4:FB
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 019CB2EDE8F8825846FACC074D3178BC5D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 184C
Signing time: Tue 03 Mar 2026 09:01:01 +0000
Manifest this update: Tue 03 Mar 2026 09:01:01 +0000
Manifest next update: Wed 04 Mar 2026 09:01:01 +0000
Files and hashes: 1: 4C5txelxptdoicijUbZlUymO1KI.roa (hash: n5OUnYu6DQ52eh4gaqVWM1OYGrwmKHVhRB5oPVeomXo=)
2: 8ood-uHTXVuPr-Uhci0MBhQD_Ok.roa (hash: D9cQAbFXlUASgQDnCIvuvRErkHMl72I/fsdMBXIjpGU=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: 8F8TvnwUdi1LSu1kC8TO4/9b9jhJyhJ2juValePv2Ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b2:ed:e8:f8:82:58:46:fa:cc:07:4d:31:78:bc:5d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Mar 3 09:01:01 2026 GMT
Not After : Mar 4 09:01:01 2026 GMT
Subject: CN=c6ed8aff97099b03a4b6d1d86545cbe1ce02b4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bc:29:5b:b7:3f:02:b2:2f:76:24:bc:ed:44:
31:43:03:69:18:91:a7:ab:0c:34:f2:91:10:be:d4:
b3:2a:a7:95:98:bc:7c:31:8f:9f:24:4b:6a:f0:5b:
0c:42:8f:71:89:27:d7:f3:e6:65:ce:a7:0f:4a:18:
44:2c:c7:3f:e8:5b:54:fb:1b:0d:ef:ee:75:c7:07:
8f:f5:64:87:45:51:bb:9b:e3:cc:84:2f:82:2d:d2:
6a:dc:c8:34:60:c8:92:fd:85:48:7d:2b:af:93:e5:
58:7d:ff:56:05:b0:3f:d0:19:4c:b0:46:03:1d:8d:
d2:bd:e3:05:fc:81:7a:72:07:92:4d:7d:23:21:97:
6b:2b:ee:64:e3:d9:00:4c:ca:ff:46:25:dc:59:c5:
07:9a:c8:19:3b:40:0f:65:8a:c8:29:61:49:35:61:
ec:83:ad:9f:cf:60:fa:f7:30:e7:c4:9e:b7:c3:8d:
13:c2:3e:05:83:31:ec:57:3d:e0:92:19:3e:75:15:
4b:71:ca:15:c4:26:6b:07:e5:bc:c1:6d:05:41:39:
6f:af:fe:d3:aa:8f:ff:76:0a:9d:b5:81:0c:65:32:
65:62:27:a7:c1:32:98:ac:0c:21:8d:51:fd:89:e1:
1d:c4:49:a8:a4:0b:41:06:e1:0f:e6:9a:b3:03:4e:
6b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:ED:8A:FF:97:09:9B:03:A4:B6:D1:D8:65:45:CB:E1:CE:02:B4:FB
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:34:4d:8d:98:c9:8c:8e:e4:b9:58:4d:99:57:1d:69:7b:17:
b2:46:76:f5:f8:1c:d0:5b:28:df:a4:92:d9:8e:a9:d5:f3:8b:
be:45:31:3a:55:25:ee:b0:c7:49:14:ee:e9:b2:05:a1:ea:18:
e1:ed:e1:cb:11:ee:d7:40:12:4c:0a:ff:15:f7:eb:ab:43:bd:
b0:6d:36:ab:68:3a:83:a3:8d:72:e9:de:91:d0:f2:db:ba:31:
c9:ad:93:67:70:5e:f5:e4:4d:f5:c7:f9:7e:e8:6d:f6:62:4e:
61:c9:2e:c7:a8:d9:e7:67:7a:40:e8:45:85:0c:7d:17:a9:ee:
80:18:db:67:27:da:d6:21:6d:73:f6:4f:9a:68:4e:89:44:38:
61:97:a6:f0:e8:11:81:6c:14:5d:16:cf:cc:48:76:24:b7:ea:
77:be:f5:71:5f:24:5a:2e:d8:de:f1:74:e8:28:55:d6:58:47:
f6:d7:12:d0:cc:cf:3c:8b:ac:47:39:cc:8e:02:da:eb:61:d9:
6a:15:dc:5f:31:de:6e:33:a9:ad:28:0a:62:49:b5:66:d4:fb:
ca:05:e5:f3:e5:1d:0e:8c:95:c9:02:0c:af:ab:98:0b:b4:ff:
28:c3:c0:96:06:93:49:fa:4d:1e:88:5d:45:19:71:1a:7b:c3:
8f:03:11:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 16:56:52 2026 by rpki-client