Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: 44pTPKh4WfJIT2/0dQw3Xr8fcGVmcqB7LOY+wV/WhdY=
Subject key identifier: C3:DE:FD:19:02:7F:2F:7D:DB:F6:7A:B8:AA:8D:F9:EA:D8:BE:B0:0D
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 019F3038AED484F619ED6859FE40ED204D98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 1996
Signing time: Sun 05 Jul 2026 03:00:48 +0000
Manifest this update: Sun 05 Jul 2026 03:00:48 +0000
Manifest next update: Mon 06 Jul 2026 03:00:48 +0000
Files and hashes: 1: 4C5txelxptdoicijUbZlUymO1KI.roa (hash: n5OUnYu6DQ52eh4gaqVWM1OYGrwmKHVhRB5oPVeomXo=)
2: 8ood-uHTXVuPr-Uhci0MBhQD_Ok.roa (hash: D9cQAbFXlUASgQDnCIvuvRErkHMl72I/fsdMBXIjpGU=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: 8lWrAn4PprL1cwikwpa6/GPeaNKjai83c5EHvfc5D6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:30:38:ae:d4:84:f6:19:ed:68:59:fe:40:ed:20:4d:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Jul 5 03:00:48 2026 GMT
Not After : Jul 6 03:00:48 2026 GMT
Subject: CN=c3defd19027f2f7ddbf67ab8aa8df9ead8beb00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:21:96:26:5b:3e:24:a2:98:cb:81:3a:15:34:
74:12:78:b5:e7:6a:e8:58:21:b0:51:2e:8a:07:23:
f1:11:cc:0e:71:f3:fd:32:22:b1:fb:1d:0a:0d:68:
6c:65:59:41:31:d2:a2:dc:13:b7:a5:7a:45:c6:24:
58:a2:1e:e5:4f:38:60:2b:eb:93:d5:2e:cf:a3:e3:
ba:00:4a:62:95:7d:b7:0d:04:60:68:ee:36:13:cf:
69:f7:24:fe:8d:16:d4:8e:3e:aa:8c:a7:84:24:52:
13:b1:e2:93:38:4d:4d:e7:29:0f:e6:34:ad:1c:07:
6f:fc:c4:03:c2:fc:28:d5:14:b2:45:39:d1:98:5b:
5b:42:b3:30:93:b9:12:72:85:1e:59:89:2a:15:a8:
a7:54:07:b2:ad:f8:5f:52:31:ae:ec:ff:a2:a2:71:
a0:78:06:18:e3:1e:46:eb:0f:70:ff:62:94:7f:e7:
a5:f5:22:00:b9:af:0f:0e:6e:ae:ba:3d:b4:cf:ba:
f2:46:fa:1b:8f:e6:55:80:26:c0:8b:55:c5:1b:ef:
8d:0b:c8:ea:64:39:6a:7a:c9:5a:ed:0c:5b:1b:2f:
01:e1:91:46:6f:4e:ff:35:c8:ee:a5:46:23:38:70:
0d:fd:a9:b8:d6:84:c7:e0:a9:85:22:0b:c1:38:e0:
a4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DE:FD:19:02:7F:2F:7D:DB:F6:7A:B8:AA:8D:F9:EA:D8:BE:B0:0D
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1d:e2:84:b3:9f:c9:ed:01:1a:6e:d7:69:44:af:28:ee:55:
e3:aa:af:11:9f:7a:8e:11:3d:b0:d8:95:d9:cb:04:7d:72:75:
2c:8b:6e:e9:85:62:2e:48:18:68:15:3d:99:25:24:93:a9:1c:
1b:08:48:cc:39:bd:95:cd:ab:83:39:48:46:8f:da:d8:99:c2:
36:ce:ae:4d:43:43:a8:29:52:90:25:ce:65:38:f3:ad:84:94:
e6:1f:09:2a:04:09:3e:b3:0d:ba:6c:41:74:a4:89:71:6b:4f:
f3:e3:55:6c:f9:d2:ba:4d:02:b6:05:4d:a8:c5:3c:24:12:38:
11:4f:64:68:49:85:73:fa:22:a6:d1:99:41:1a:2b:ca:75:28:
b1:e5:e0:55:a9:47:44:14:83:94:d9:c8:26:ae:24:71:40:18:
9c:75:56:72:eb:92:3a:88:03:48:2f:62:69:05:b2:5a:61:64:
e4:e6:41:3d:f4:bf:41:9e:d3:2f:11:f1:3a:30:76:b9:7e:9c:
6a:a2:92:d7:4b:85:3f:3a:54:ea:e7:dd:6c:9d:a4:95:e3:c1:
1b:4e:db:b4:5c:df:93:19:c4:e1:69:43:b7:9d:a1:44:00:f0:
ed:34:5f:e6:bc:a4:e2:55:cb:a4:26:4b:d1:72:01:73:98:de:
80:12:50:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 12:36:13 2026 by rpki-client