Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: oEYcNTz0GUAlqisT9Hqc9Ku+MP0tEOeGnZ7NrhPz6RY=
Subject key identifier: CD:00:8B:93:E8:3F:9B:5E:76:46:2B:01:C4:0D:7E:78:AA:50:2E:C9
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 019DD6534A740E25545896671D99E7501916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 18E3
Signing time: Tue 28 Apr 2026 23:01:15 +0000
Manifest this update: Tue 28 Apr 2026 23:01:15 +0000
Manifest next update: Wed 29 Apr 2026 23:01:15 +0000
Files and hashes: 1: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: 7xBSN3D1EbHsLAPYKKrKcVVY2Ji7+82H3+6lHVk2RXo=)
2: du4Uc1Tw1A4vtFUr5_RZZE4mr9c.roa (hash: VHvvL6d/GOaFCBnvC8MIBYdWi2shlhJJCY1UWI68tyA=)
3: u3hZ4Wo-VF-Q5oSlFkaUlkQvEKA.roa (hash: U2nT3r9q5huh0VOndjllE1MWO9Yu+mYw1a5lsTdkP+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d6:53:4a:74:0e:25:54:58:96:67:1d:99:e7:50:19:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Apr 28 23:01:15 2026 GMT
Not After : Apr 29 23:01:15 2026 GMT
Subject: CN=cd008b93e83f9b5e76462b01c40d7e78aa502ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:af:23:67:a4:22:07:46:f0:41:ad:e0:17:97:
77:2b:ea:4e:a9:15:b9:49:85:02:b9:5a:b8:26:c7:
08:ae:71:f5:f3:92:dd:f2:55:ea:44:37:5a:25:32:
91:17:72:83:77:0f:e1:6d:35:f1:2c:35:44:15:0a:
c8:ca:c0:5d:34:b4:76:86:85:d0:41:ac:6f:41:50:
52:0b:45:cc:a6:b4:4b:e9:4a:8d:cc:35:00:b2:22:
09:43:d3:9d:19:ff:95:ef:8c:95:9c:02:62:d4:4b:
26:e6:55:5a:ef:12:da:11:6c:c0:0d:3f:f4:83:43:
65:93:53:58:e5:0c:c1:3b:5b:3b:bb:df:4b:d5:2b:
57:8a:83:e6:a9:e8:c8:1f:02:f1:f1:40:da:26:8e:
52:2d:49:5c:e4:85:15:bc:7c:de:b4:09:f4:0a:a8:
5e:9c:cc:d2:03:62:66:5b:a9:42:6e:08:e7:9c:d7:
c7:47:2e:e8:3c:bd:9d:f1:57:64:3d:4c:b8:d5:10:
c4:7e:30:61:79:d5:bd:35:c8:e7:23:e9:f7:64:f3:
13:27:48:84:57:94:cd:19:39:0a:cc:f0:00:ba:b4:
70:8a:2d:5f:93:5c:5d:89:7c:7a:a6:9d:dd:f2:41:
a0:17:ad:1a:ec:80:2c:cb:98:4e:cb:3f:03:01:c8:
fa:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:00:8B:93:E8:3F:9B:5E:76:46:2B:01:C4:0D:7E:78:AA:50:2E:C9
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:43:e5:1f:3f:94:ed:7b:1b:62:3c:16:94:49:1d:a5:da:0b:
e0:6a:dc:c2:0d:4d:a5:2a:d5:46:09:a1:2f:cf:55:76:39:b8:
18:b9:7d:61:b0:29:1f:5c:99:7a:b3:35:15:36:ba:50:36:f0:
97:39:e8:57:dd:f5:7e:40:b3:37:90:42:e9:28:ef:d4:fb:59:
5b:62:34:2b:2f:07:ab:0f:59:1c:02:b3:d6:16:12:10:ea:e9:
89:8e:12:cd:da:75:42:7e:81:d1:ea:7c:80:49:4e:61:e8:f4:
f0:34:aa:af:e2:5b:fd:5a:c3:99:8a:7f:8d:d8:05:17:f5:a6:
c9:72:a9:f0:21:e3:d5:51:b1:15:ef:6b:3b:c5:d0:c1:71:38:
e1:d8:22:1d:b1:e0:e0:58:28:39:ea:a9:15:2e:fe:62:08:59:
42:d8:ab:6c:b5:ff:44:d0:b6:c1:d7:99:7e:f3:1c:85:a6:11:
20:a8:a3:42:b9:ce:a8:bd:8a:aa:b0:47:96:71:f6:c1:bb:28:
fc:95:3c:b6:a2:79:39:40:38:16:e4:72:52:ec:72:c7:f7:b3:
c3:fe:16:81:63:03:ad:cf:6b:15:0e:a2:41:ae:21:89:a9:4e:
0d:28:8f:b4:be:56:24:ab:b1:c9:f4:46:84:93:c1:01:0d:23:
16:ac:51:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 06:38:53 2026 by rpki-client