Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: WLEGXxYs3yYDc6vwH+oeUH3YXj8F8uZV68nm90HHHa0=
Subject key identifier: A2:F9:09:8A:2D:97:C1:30:8A:D5:80:8D:F5:C4:AC:52:37:19:8D:3E
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 01A14729D46AA3C41196F837413C88F48A3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 1AAB
Signing time: Sat 17 Oct 2026 00:01:25 +0000
Manifest this update: Sat 17 Oct 2026 00:01:25 +0000
Manifest next update: Sun 18 Oct 2026 00:01:25 +0000
Files and hashes: 1: 4C5txelxptdoicijUbZlUymO1KI.roa (hash: n5OUnYu6DQ52eh4gaqVWM1OYGrwmKHVhRB5oPVeomXo=)
2: 8ood-uHTXVuPr-Uhci0MBhQD_Ok.roa (hash: D9cQAbFXlUASgQDnCIvuvRErkHMl72I/fsdMBXIjpGU=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: xvTV2vKLpvJzTZtZHpnPbRM9kNHVdVyesrG/8IHhHLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:47:29:d4:6a:a3:c4:11:96:f8:37:41:3c:88:f4:8a:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Oct 17 00:01:25 2026 GMT
Not After : Oct 18 00:01:25 2026 GMT
Subject: CN=a2f9098a2d97c1308ad5808df5c4ac5237198d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:de:19:04:17:bf:6e:b3:9f:b4:84:d8:be:
f8:b5:9d:44:85:03:77:01:02:fa:c4:03:7f:89:25:
1b:ff:07:18:be:dc:34:02:56:b8:d5:d0:d3:5f:9d:
32:c8:42:8e:84:29:6f:9f:fa:d6:7e:a0:39:d3:d0:
43:33:a2:48:ad:d3:3a:1d:fe:7d:01:39:37:e8:f3:
3f:6c:91:5a:6a:13:a0:39:f6:34:f0:cd:01:e9:c1:
1d:f2:e4:46:c2:f7:66:ea:b7:d5:d0:bf:18:14:ad:
17:6d:71:cd:aa:ea:be:de:00:8d:91:bb:f1:25:ce:
a0:66:d6:94:32:8e:38:36:7f:5a:68:09:fb:0d:77:
cc:10:a8:d4:b9:d5:a9:1d:cd:69:77:9b:d8:50:f1:
1b:ff:31:68:8a:4f:a0:4e:e5:0b:79:7c:86:f5:b2:
8c:8f:2c:0f:49:e4:15:82:1a:f3:02:5a:92:27:a9:
50:94:51:5d:44:94:6a:5a:81:35:b6:9a:98:2f:63:
14:39:e7:e9:74:89:de:42:c3:24:90:d5:69:ca:84:
45:b5:f8:23:c7:22:44:6e:f1:9e:14:76:fb:16:b6:
6d:ef:07:79:de:ed:94:48:18:bb:e1:ab:38:34:64:
c7:fa:3f:7b:d6:9d:df:64:24:df:a2:7a:90:f3:d1:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F9:09:8A:2D:97:C1:30:8A:D5:80:8D:F5:C4:AC:52:37:19:8D:3E
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:6d:54:5e:44:a4:b4:ad:ef:8f:2c:6e:21:9f:d5:62:31:4d:
19:2f:0f:e3:3f:01:d3:e4:bf:17:35:cd:3a:9d:14:b2:68:48:
12:4d:0e:b7:e6:92:27:ec:0c:41:57:ba:f1:65:7f:58:7c:a8:
d6:61:e2:b7:de:69:62:54:b9:93:3a:96:53:cb:2b:c1:55:87:
be:dd:b4:2e:86:61:67:9e:27:5e:bb:c5:ce:6d:b6:ba:7f:39:
ec:07:35:1b:77:53:bf:45:f9:90:50:89:84:fe:5f:74:c7:e9:
88:21:25:6a:f1:f0:98:c4:a3:55:73:59:d2:ca:9a:d6:5c:a0:
ab:93:de:3e:e4:f2:c7:d2:1b:5d:b1:b6:12:a4:9e:38:39:03:
64:6d:c2:49:38:8d:dd:a7:72:7d:4d:6b:19:d0:be:d2:48:d6:
f7:54:d6:bf:3b:ee:44:c5:e9:04:7c:c7:c6:d0:b7:7a:e7:05:
d5:08:29:47:e5:6d:29:e4:3c:88:19:c8:64:6b:a8:ad:0c:e8:
53:9a:2d:45:ce:0d:9e:21:f2:ed:65:0a:e8:c3:c5:10:32:a9:
37:72:a3:74:0e:cb:1d:4f:bb:24:87:45:3e:1f:87:43:08:79:
74:4f:f6:ce:b3:cc:89:0c:63:89:bb:b8:8c:d0:56:b6:a2:c6:
a0:6f:34:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:51:28 2026 by rpki-client