Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: 9XRsjhHaXTxCJH7w8qFwGJQFl+3+6EL+Fxl1HgfS+Ao=
Subject key identifier: 65:C1:1E:28:CD:A3:1C:B6:C1:D2:44:97:2B:BE:93:98:75:B2:4B:11
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 019D9E88AA5FA4159A52777BA6CBBAD728AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 18C6
Signing time: Sat 18 Apr 2026 03:00:49 +0000
Manifest this update: Sat 18 Apr 2026 03:00:49 +0000
Manifest next update: Sun 19 Apr 2026 03:00:49 +0000
Files and hashes: 1: 4C5txelxptdoicijUbZlUymO1KI.roa (hash: n5OUnYu6DQ52eh4gaqVWM1OYGrwmKHVhRB5oPVeomXo=)
2: 8ood-uHTXVuPr-Uhci0MBhQD_Ok.roa (hash: D9cQAbFXlUASgQDnCIvuvRErkHMl72I/fsdMBXIjpGU=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: ffNFQpn8NPBaEmPHqJbcrlXcmK7aqgRhRqSjMg3/N8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:88:aa:5f:a4:15:9a:52:77:7b:a6:cb:ba:d7:28:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Apr 18 03:00:49 2026 GMT
Not After : Apr 19 03:00:49 2026 GMT
Subject: CN=65c11e28cda31cb6c1d244972bbe939875b24b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:9e:22:57:a8:9e:59:6b:d6:6d:e5:6a:2a:
19:0a:0a:4f:c7:f6:42:e6:07:10:4a:4c:db:70:7a:
af:4b:db:86:47:78:2d:31:e1:02:f5:68:6f:e9:cc:
c6:a4:5b:f4:8a:83:58:d2:7a:a2:7a:0a:35:b1:cc:
fe:32:ae:04:e7:d4:36:0e:3f:9b:d0:96:7d:7f:45:
b2:67:cd:02:52:dd:a8:a4:70:6e:3e:71:a4:4b:fb:
46:2e:10:a2:a9:1e:1e:6b:3a:5e:66:3c:01:61:7f:
61:0f:41:99:02:8b:b5:1f:6e:82:6c:86:08:c7:24:
f0:56:fc:0a:d8:05:06:2a:df:89:b0:24:85:1b:e4:
15:17:8f:6f:3d:91:ee:48:1a:ee:49:e1:0a:84:b8:
d0:b3:81:7f:c8:f9:65:2b:46:17:06:4c:ed:20:14:
3b:c2:0d:a7:b4:f1:19:b9:f1:b2:dd:ae:d8:56:13:
25:9a:53:7f:42:8f:bd:d0:54:a5:70:9b:bd:88:ef:
0c:21:3b:fb:53:91:31:a9:f1:5f:6a:0e:00:90:92:
d8:8d:8f:f3:42:e9:40:98:56:b8:85:8f:a2:77:7b:
24:16:b9:9c:7b:ef:a8:34:17:33:7a:be:fd:6f:8f:
d4:4b:6a:8e:ed:9f:29:dc:2f:bf:ef:bf:c9:c0:06:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C1:1E:28:CD:A3:1C:B6:C1:D2:44:97:2B:BE:93:98:75:B2:4B:11
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d4:e6:3b:e9:d7:cf:1f:63:01:41:75:87:fa:c0:82:60:84:
db:9c:7e:65:cd:fa:fe:16:46:a1:cb:99:7e:3c:1d:78:06:58:
eb:5f:b1:b8:1a:8e:c2:18:cf:a1:d7:25:84:18:d2:38:65:98:
ea:c2:6d:e7:b8:e0:7b:d4:1d:27:be:bb:0e:79:62:8e:32:70:
fb:ef:41:04:d3:38:55:6b:bb:93:27:9a:3b:bf:1c:5c:bd:58:
bd:83:91:55:93:4b:e6:c0:52:6d:a7:ae:fe:82:b1:5a:5f:9a:
28:21:5b:5a:fc:63:41:b9:ac:6c:0f:cc:7d:8b:39:9d:b9:1b:
ab:8d:87:c7:0f:06:c9:85:ad:fd:a7:94:8d:78:95:58:e7:99:
f9:7f:11:04:65:bb:ee:54:c5:03:7b:d6:a7:0b:80:75:d2:fe:
f6:86:f0:04:de:6f:42:7b:90:3b:32:01:95:50:86:22:29:aa:
e2:fa:71:ec:ec:fb:6c:77:54:a0:40:dc:28:c1:f5:99:5e:3c:
e9:68:7c:cd:33:ef:df:ba:4f:5d:9b:6e:de:39:b8:33:25:73:
56:75:30:1d:39:3b:da:75:ed:32:78:46:52:fb:7e:fb:a9:e3:
81:46:91:f1:3e:e1:3b:8b:d6:82:01:8e:93:2e:57:ea:23:a5:
fb:0b:e1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:08:27 2026 by rpki-client