Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: rAypdWs22ER31I1zjghVaQsJjjc5HAGZ4jb1q7CFCKc=
Subject key identifier: 70:96:8E:B2:E2:61:4E:22:61:E1:31:CD:81:F2:A4:7A:D5:FB:C3:B4
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 019CE6DAA27BC89972952EACF71A32A30812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 11:00:13 +0000
Manifest this update: Fri 13 Mar 2026 11:00:13 +0000
Manifest next update: Sat 14 Mar 2026 11:00:13 +0000
Files and hashes: 1: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: nfRW0p3bi9Swg6JXBsqGvkNBMm5O5kD1mN7MuZHDPiY=)
2: du4Uc1Tw1A4vtFUr5_RZZE4mr9c.roa (hash: VHvvL6d/GOaFCBnvC8MIBYdWi2shlhJJCY1UWI68tyA=)
3: u3hZ4Wo-VF-Q5oSlFkaUlkQvEKA.roa (hash: U2nT3r9q5huh0VOndjllE1MWO9Yu+mYw1a5lsTdkP+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:da:a2:7b:c8:99:72:95:2e:ac:f7:1a:32:a3:08:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Mar 13 11:00:13 2026 GMT
Not After : Mar 14 11:00:13 2026 GMT
Subject: CN=70968eb2e2614e2261e131cd81f2a47ad5fbc3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e5:40:8f:9c:3f:ed:6d:99:95:c1:7b:1e:cf:
9c:01:12:84:52:55:d6:6c:59:b6:ee:5f:36:7d:1b:
13:49:a6:d0:a3:c4:f2:c7:01:f5:c6:9f:81:1b:48:
c9:0b:bd:10:e8:7d:8c:f2:ed:67:6b:49:6f:05:18:
07:73:cb:29:03:a2:cf:81:bc:0d:dd:b5:b2:b8:13:
cc:96:1b:14:e0:95:18:c9:da:d8:23:ff:4c:ba:cf:
95:ae:35:d7:f5:54:20:cf:24:b2:3b:bc:30:2f:81:
47:7d:b2:95:72:1a:4a:0e:6e:94:1d:e9:71:68:54:
cb:2a:4a:72:20:f1:54:79:c4:6a:b8:7e:67:0c:29:
f9:ca:bc:36:fa:82:06:eb:00:48:5d:d6:78:28:e6:
79:12:63:5f:43:73:cf:a2:43:44:c1:37:2a:78:d2:
ff:3b:96:12:90:99:b7:09:b6:78:c2:5c:7a:01:d2:
ea:6e:a5:2d:47:cd:26:aa:99:1d:bf:33:08:a2:9a:
37:11:b9:50:5b:a9:7a:74:8a:06:84:42:b2:7a:7b:
a8:f0:8b:44:7e:46:17:5f:f7:ab:ba:bd:3b:3b:6f:
92:64:61:80:24:0a:f2:ea:f6:7d:7a:43:82:6e:dc:
cc:ac:a6:b7:88:fd:12:3a:53:ec:31:78:61:d4:48:
6d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:96:8E:B2:E2:61:4E:22:61:E1:31:CD:81:F2:A4:7A:D5:FB:C3:B4
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d9:fb:f5:cc:77:2b:1a:20:e9:95:7f:b4:62:81:f1:15:f0:
70:50:1a:c3:cb:f9:19:5e:b6:a0:48:fb:71:f2:d1:59:8c:ec:
b2:95:3a:5a:21:78:a6:4b:97:f4:8e:e6:44:81:93:ea:1f:b3:
33:1a:32:28:f3:c5:21:89:0e:60:0e:0d:00:21:5b:d3:23:dc:
94:6f:77:e1:a3:38:bd:30:bb:a3:9e:7c:c0:05:69:d1:6f:a1:
99:32:aa:44:5a:c5:a3:02:1b:1a:e7:e2:5c:49:64:32:5f:ae:
46:cf:a6:65:54:96:fd:f0:e4:3e:c0:ef:cb:7d:9d:22:94:d8:
83:c8:ee:bc:d5:06:78:53:f0:8c:fe:9a:fe:27:55:34:71:de:
8c:17:97:2d:a2:c0:f6:81:2d:61:7b:32:b7:3e:10:b8:b7:ee:
7c:db:0a:b5:05:42:16:7a:58:95:c5:95:44:f2:ba:36:d2:59:
5a:70:83:78:e8:3a:df:5a:18:1c:74:1f:f4:bc:15:d1:47:e0:
df:da:e1:f3:3e:3f:95:1a:64:53:05:b2:ad:f4:74:38:a1:17:
b1:02:54:61:0e:dc:1b:8d:aa:1f:cf:94:f9:e2:b6:9d:90:ed:
c1:d3:23:07:f8:c6:e4:8d:5e:27:88:bc:60:a6:93:86:f7:60:
3c:4d:c5:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzm2qJ7yJlylS6s9xoyowgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NWE5MmI3NzhlZGRmYThkY2Q5MTdjYmI4N2NkZTMxYmEy
YzczMmYwHhcNMjYwMzEzMTEwMDEzWhcNMjYwMzE0MTEwMDEzWjAzMTEwLwYDVQQD
Eyg3MDk2OGViMmUyNjE0ZTIyNjFlMTMxY2Q4MWYyYTQ3YWQ1ZmJjM2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+VAj5w/7W2ZlcF7Hs+cARKEUlXW
bFm27l82fRsTSabQo8TyxwH1xp+BG0jJC70Q6H2M8u1na0lvBRgHc8spA6LPgbwN
3bWyuBPMlhsU4JUYydrYI/9Mus+VrjXX9VQgzySyO7wwL4FHfbKVchpKDm6UHelx
aFTLKkpyIPFUecRquH5nDCn5yrw2+oIG6wBIXdZ4KOZ5EmNfQ3PPokNEwTcqeNL/
O5YSkJm3CbZ4wlx6AdLqbqUtR80mqpkdvzMIopo3EblQW6l6dIoGhEKyenuo8ItE
fkYXX/erur07O2+SZGGAJAry6vZ9ekOCbtzMrKa3iP0SOlPsMXhh1EhtbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCWjrLiYU4iYeExzYHypHrV+8O0MB8GA1UdIwQY
MBaAFClakrd47d+o3NkXy7h83jG6LHMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUt
ZGNkYzVjZWUyNzZmLzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUtZGNkYzVjZWUyNzZm
LzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNn79cx3
Kxog6ZV/tGKB8RXwcFAaw8v5GV62oEj7cfLRWYzsspU6WiF4pkuX9I7mRIGT6h+z
MxoyKPPFIYkOYA4NACFb0yPclG934aM4vTC7o558wAVp0W+hmTKqRFrFowIbGufi
XElkMl+uRs+mZVSW/fDkPsDvy32dIpTYg8juvNUGeFPwjP6a/idVNHHejBeXLaLA
9oEtYXsytz4QuLfufNsKtQVCFnpYlcWVRPK6NtJZWnCDeOg631oYHHQf9LwV0Ufg
39rh8z4/lRpkUwWyrfR0OKEXsQJUYQ7cG42qH8+U+eK2nZDtwdMjB/jG5I1eJ4i8
YKaThvdgPE3FXg==
-----END CERTIFICATE-----
Generated at Fri Mar 13 16:00:26 2026 by rpki-client