Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/900aec-82be-4250-b5ff-972f0d06fe15/1/KVLgXqYJM8R-1SPlZ-4abH3_n8I.mft
File: KVLgXqYJM8R-1SPlZ-4abH3_n8I.mft (raw, json)
Hash identifier: vlUBBNtnOGNrG/DSG0D0jl/RxRj2JEkXcVA1VT/q0u4=
Subject key identifier: 39:D2:0A:E5:E2:DD:9E:A8:01:E7:8A:F4:14:60:91:49:38:A8:AD:92
Authority key identifier: 29:52:E0:5E:A6:09:33:C4:7E:D5:23:E5:67:EE:1A:6C:7D:FF:9F:C2
Certificate issuer: /CN=2952e05ea60933c47ed523e567ee1a6c7dff9fc2
Certificate serial: 01A17438F717D84FAFB908E71F2AB822B5EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVLgXqYJM8R-1SPlZ-4abH3_n8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/900aec-82be-4250-b5ff-972f0d06fe15/1/KVLgXqYJM8R-1SPlZ-4abH3_n8I.mft
Manifest number: 83
Signing time: Sun 25 Oct 2026 18:00:52 +0000
Manifest this update: Sun 25 Oct 2026 18:00:52 +0000
Manifest next update: Mon 26 Oct 2026 18:00:52 +0000
Files and hashes: 1: KVLgXqYJM8R-1SPlZ-4abH3_n8I.crl (hash: HAnSF3rHTxNFNl6tZhC80AmI5bjz9ojCiSr/rq/iSsk=)
2: xnPtBprlW7ByFkk94boZ3ieoZYw.roa (hash: cG2BXmdDk03+etJMnp2WURUvWfVQuYGe2WLtJJwW8Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/900aec-82be-4250-b5ff-972f0d06fe15/1/KVLgXqYJM8R-1SPlZ-4abH3_n8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/900aec-82be-4250-b5ff-972f0d06fe15/1/KVLgXqYJM8R-1SPlZ-4abH3_n8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVLgXqYJM8R-1SPlZ-4abH3_n8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:38:f7:17:d8:4f:af:b9:08:e7:1f:2a:b8:22:b5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2952e05ea60933c47ed523e567ee1a6c7dff9fc2
Validity
Not Before: Oct 25 18:00:52 2026 GMT
Not After : Oct 26 18:00:52 2026 GMT
Subject: CN=39d20ae5e2dd9ea801e78af41460914938a8ad92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:99:50:58:ff:b0:d2:9b:41:3a:88:94:cc:77:
c6:80:66:f1:40:18:94:56:4f:0d:71:13:73:95:45:
55:5f:58:fb:1e:77:fa:19:2d:1c:88:a7:cf:8b:72:
76:ff:7e:b9:26:9b:a6:d8:0a:d2:26:d6:d8:55:07:
a7:a4:6c:98:c9:47:ee:1a:f7:a1:6d:12:1f:2e:a2:
db:13:4c:46:54:11:bb:56:71:e5:a7:42:68:39:22:
77:b2:3c:30:bb:46:86:e9:b1:ac:b0:ad:e5:24:dd:
fe:ce:cf:92:0a:d9:b6:41:32:1f:e6:2f:7f:9f:57:
b8:15:b8:0a:32:15:f0:03:5b:68:e2:ae:30:96:17:
99:16:da:fe:aa:8b:c3:e0:7c:47:8f:15:8a:9c:0b:
5a:a6:58:7b:b1:18:e2:14:71:f7:9f:76:d4:5c:4d:
54:26:b9:74:fd:93:12:7f:48:9e:03:54:5d:58:c9:
79:8c:3b:fb:61:dd:42:16:63:cc:3d:c8:a6:12:32:
f3:9b:eb:a7:ea:58:b5:fd:41:e3:38:5e:5d:70:55:
56:99:eb:f6:d3:4b:a0:d9:df:76:38:1b:e1:93:15:
2b:f9:7e:5e:66:af:06:8a:12:81:f9:69:d8:24:01:
46:19:f5:95:18:f7:ca:ea:7d:23:d3:ab:5d:d2:47:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D2:0A:E5:E2:DD:9E:A8:01:E7:8A:F4:14:60:91:49:38:A8:AD:92
X509v3 Authority Key Identifier:
keyid:29:52:E0:5E:A6:09:33:C4:7E:D5:23:E5:67:EE:1A:6C:7D:FF:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVLgXqYJM8R-1SPlZ-4abH3_n8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/900aec-82be-4250-b5ff-972f0d06fe15/1/KVLgXqYJM8R-1SPlZ-4abH3_n8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/900aec-82be-4250-b5ff-972f0d06fe15/1/KVLgXqYJM8R-1SPlZ-4abH3_n8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d5:ca:1f:e3:d1:a0:4d:a1:9b:ab:31:a3:67:ac:f2:58:c6:
5a:55:65:27:69:bd:5d:9c:3c:f8:78:ed:7f:95:6c:86:d7:83:
1a:0a:2c:34:43:bc:9f:bc:6d:d3:b8:df:04:f6:27:27:ea:2d:
c2:c6:7f:68:c0:fa:6d:7d:7f:78:ea:c6:38:15:76:58:a7:cb:
ac:03:92:75:10:50:b5:e4:e9:cf:60:0c:8f:8b:ba:f6:ec:1a:
b5:07:dd:03:ad:b2:58:2c:c6:da:a7:f2:36:01:d4:8b:5f:50:
26:f9:b0:22:ef:e2:ae:ba:40:74:40:ef:f4:be:15:62:1e:27:
3b:38:70:6a:7d:98:24:00:bd:1d:57:77:34:a8:a8:1f:21:7e:
95:a3:c8:ea:28:1c:23:4b:79:73:93:04:9d:cd:2a:17:1e:ee:
69:e3:3a:6e:b7:b2:a2:18:ca:e0:b2:5e:04:b4:a9:5f:aa:5d:
b7:de:93:86:62:af:1e:52:73:11:d0:be:c6:01:51:2a:1e:8c:
a8:77:e6:2b:93:cf:4d:89:9e:6a:fb:a7:d9:6f:2c:45:ea:0c:
3e:86:b6:8b:1b:53:3d:ab:21:93:f4:fe:1b:f9:50:9a:43:7f:
73:cd:f4:c1:5a:c6:06:b7:2b:82:f6:57:be:06:62:1b:8a:88:
3a:86:33:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:16:21 2026 by rpki-client