Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: FcZkOTMRqL0Yxnl4Bf0C7UR6kQcPVwlvUxrLWkw0Szo=
Subject key identifier: B5:C7:0D:C8:9A:9E:19:E0:92:D5:DF:B3:F8:AC:35:5A:9A:EB:B1:22
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 01A0DCBB937A227769757B211FF5FF5712D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 08:01:15 +0000
Manifest this update: Sat 26 Sep 2026 08:01:15 +0000
Manifest next update: Sun 27 Sep 2026 08:01:15 +0000
Files and hashes: 1: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: u4V4kbqBLYUG40svgPR1QPb+aHM58OJh9lMTPdhH1Bo=)
2: du4Uc1Tw1A4vtFUr5_RZZE4mr9c.roa (hash: VHvvL6d/GOaFCBnvC8MIBYdWi2shlhJJCY1UWI68tyA=)
3: u3hZ4Wo-VF-Q5oSlFkaUlkQvEKA.roa (hash: U2nT3r9q5huh0VOndjllE1MWO9Yu+mYw1a5lsTdkP+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:93:7a:22:77:69:75:7b:21:1f:f5:ff:57:12:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Sep 26 08:01:15 2026 GMT
Not After : Sep 27 08:01:15 2026 GMT
Subject: CN=b5c70dc89a9e19e092d5dfb3f8ac355a9aebb122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:b3:3b:ed:79:00:91:80:52:09:5a:44:f0:
1b:09:7a:f1:1a:6d:2f:b8:8f:03:78:d2:51:ae:58:
14:16:61:ed:78:21:ef:d5:78:9d:91:a1:00:96:42:
d5:cd:cd:53:8e:00:ea:22:b6:24:b9:c9:da:47:01:
53:8d:ce:14:9e:43:35:04:28:57:6c:36:29:81:87:
8d:46:f5:a2:9f:f8:d9:b4:3b:dd:26:63:b9:fa:b7:
23:c6:a5:89:45:63:a7:2a:5c:38:b7:10:5e:48:1f:
4e:23:6d:55:27:35:0d:b8:4f:d5:12:38:03:31:a6:
54:55:11:de:f5:8a:a5:2d:a7:47:14:f2:02:ec:6f:
21:c1:1a:90:31:74:13:52:5b:b6:d2:b1:37:3f:d2:
d4:c7:45:69:2e:f5:b7:b0:82:0d:f7:c5:bd:9a:af:
71:c2:4d:61:2d:5d:c3:9b:dc:28:ad:36:e3:13:8d:
10:d5:be:f8:ed:2a:68:7a:fb:49:9b:a2:e8:bd:cb:
91:02:83:50:7e:99:79:af:7c:c8:39:b6:1d:2b:62:
8f:78:b6:23:79:46:92:1c:d7:ad:f9:c7:f2:32:18:
c5:fd:c3:e3:55:56:b5:fb:fc:07:93:7a:e2:2b:1e:
b0:41:a0:37:2f:83:64:fd:15:6a:bd:c0:50:90:ba:
8a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C7:0D:C8:9A:9E:19:E0:92:D5:DF:B3:F8:AC:35:5A:9A:EB:B1:22
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:36:02:62:84:ba:f4:da:01:eb:42:d8:c4:2a:d1:37:78:d1:
ea:31:34:a8:25:79:45:16:6a:66:09:05:c9:47:80:dc:0e:2d:
92:7d:ae:9a:dc:6a:bd:df:8a:09:9b:f9:12:3a:b7:0e:f7:0f:
4f:78:c3:6d:85:f3:05:2d:e3:14:f1:a8:ad:e4:78:30:c7:d8:
78:1d:0c:0a:3c:ac:82:e0:7a:57:48:b8:95:92:28:61:5d:de:
e1:c2:ed:51:38:ba:e0:b6:83:78:14:54:e5:35:3a:46:e8:03:
4f:e5:25:3f:37:7b:d4:39:ce:48:22:68:b3:cc:a5:00:48:41:
5e:8a:b8:00:22:cc:d3:46:32:92:53:97:dd:31:83:34:9d:de:
57:ff:4f:22:54:6d:e0:48:15:0b:7b:5a:35:fc:8d:22:30:27:
b8:7f:cf:a2:de:1f:ea:14:5f:33:62:1e:e1:94:db:02:21:51:
35:a5:26:f6:a3:0e:4b:57:75:79:93:30:c4:98:ec:d5:e6:56:
c5:c0:cf:d8:cd:90:d4:1b:b0:9c:7a:5f:a4:97:b3:fe:13:a2:
44:b2:b1:14:2c:a9:a0:be:d0:fa:6f:a7:b6:8f:82:d9:39:a2:
16:ca:1a:eb:38:32:af:95:01:d2:80:8f:48:c3:ba:9f:3e:a8:
e1:be:3d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:38:19 2026 by rpki-client