Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: Gbb4smWo9xbXNSWBYK7eOIOs3j8c4pBnYi/Jen74gVE=
Subject key identifier: 94:C4:C8:30:89:1B:9D:AC:9E:B3:33:9A:14:64:04:86:FB:80:00:A9
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 019FD9F498EF9B7BC7A994C81992B9225532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 19EE
Signing time: Fri 07 Aug 2026 02:01:53 +0000
Manifest this update: Fri 07 Aug 2026 02:01:53 +0000
Manifest next update: Sat 08 Aug 2026 02:01:53 +0000
Files and hashes: 1: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: Fx6ad2ER1qVSWn69ZXJv4/8ILU+185fz3DUi5lZZ5u8=)
2: du4Uc1Tw1A4vtFUr5_RZZE4mr9c.roa (hash: VHvvL6d/GOaFCBnvC8MIBYdWi2shlhJJCY1UWI68tyA=)
3: u3hZ4Wo-VF-Q5oSlFkaUlkQvEKA.roa (hash: U2nT3r9q5huh0VOndjllE1MWO9Yu+mYw1a5lsTdkP+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Aug 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d9:f4:98:ef:9b:7b:c7:a9:94:c8:19:92:b9:22:55:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Aug 7 02:01:53 2026 GMT
Not After : Aug 8 02:01:53 2026 GMT
Subject: CN=94c4c830891b9dac9eb3339a14640486fb8000a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1a:63:c6:28:75:a5:85:67:8d:a9:bb:29:41:
5b:42:34:3f:3c:1c:f5:9a:75:e0:7e:33:2c:6b:07:
5b:87:6d:81:94:b2:ff:2f:88:29:c1:1f:cc:dd:c5:
34:43:ea:a5:ce:09:5a:ca:6c:d1:57:e8:8a:fb:79:
0a:98:94:97:31:64:19:f6:16:1b:fa:13:92:d6:4e:
d1:81:f5:06:61:34:53:f6:c2:b6:18:40:86:ff:ed:
cc:5c:af:e8:bd:c2:24:60:fa:29:d4:9e:de:5c:3e:
b8:36:9b:0d:39:9c:ab:ff:92:7e:3c:6f:73:bb:30:
28:da:76:da:56:17:68:30:9a:d7:82:59:aa:dd:fd:
b2:3f:d4:3d:17:e0:0c:d1:30:21:a5:a0:d7:2b:22:
9a:01:ea:00:5e:94:2e:d1:23:0e:2d:1d:c0:78:84:
ed:f7:83:a6:0e:4f:98:86:ea:3a:ea:55:92:d7:5f:
22:df:0a:b0:b2:fa:6d:7e:60:32:bd:de:3d:aa:5d:
e5:1e:0d:fe:fe:b3:99:ad:20:38:af:ee:2d:3e:bb:
60:39:9b:d3:11:4d:45:70:1c:8b:39:2c:8b:6d:76:
e8:ee:bb:73:17:36:a7:e8:27:74:7c:8e:6e:03:0a:
f4:9f:ef:53:59:1e:91:f2:79:42:19:3f:ef:18:4e:
ec:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C4:C8:30:89:1B:9D:AC:9E:B3:33:9A:14:64:04:86:FB:80:00:A9
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:fa:df:29:0e:db:94:22:01:18:14:08:cb:f6:b6:88:1c:02:
06:5d:15:a1:92:86:ea:59:e8:c4:66:b0:0f:8a:c6:45:bd:b0:
ba:4f:20:7f:47:84:c7:e1:5a:c4:86:33:8e:65:42:61:ae:11:
84:4c:26:77:be:13:8c:cb:5e:e9:f9:b3:1b:0d:38:14:33:c4:
d8:6e:11:7d:3d:49:b9:6e:c0:68:ed:69:69:35:c4:e9:9d:6c:
51:90:77:5b:15:52:8e:88:8e:86:95:e7:9b:42:35:8b:e9:ad:
c5:b2:ff:d9:6d:d2:04:15:44:48:81:04:b6:9f:c4:42:9e:7c:
45:f0:39:9b:bb:f4:e1:06:c1:b9:b6:ce:6e:66:f8:3e:f9:41:
39:e7:cf:cb:4d:2f:f1:d9:3b:47:36:dd:ee:10:45:ac:11:1c:
a2:74:32:09:8c:2e:93:0d:1c:e2:30:e7:8c:d7:94:4d:e6:60:
6b:dd:a8:68:a9:29:3e:c0:7b:bb:b3:76:71:44:a9:18:42:f9:
42:dd:2a:6b:4d:9f:f9:55:4f:86:ab:db:34:5d:b1:45:85:23:
c4:c1:46:93:c5:5d:0d:aa:d6:56:a7:ad:11:4c:bb:f6:85:5d:
5e:20:97:7a:a9:5b:3d:4f:ce:75:8d:da:99:82:50:ec:ac:89:
09:39:3c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 07:03:35 2026 by rpki-client