Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json)
Hash identifier: kUMKtOCD+vDZAmXjYnsffzQLUYrwAyNW3lbSIeLdjDc=
Subject key identifier: 48:49:DC:5B:4F:D7:59:D6:FF:12:B0:BF:3E:ED:80:0F:C0:79:62:43
Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Certificate serial: 019D99CFE6730FA38258C291DA1D2B738160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
Manifest number: 0FDD
Signing time: Fri 17 Apr 2026 05:00:32 +0000
Manifest this update: Fri 17 Apr 2026 05:00:32 +0000
Manifest next update: Sat 18 Apr 2026 05:00:32 +0000
Files and hashes: 1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: Wun2nf214Cztx1TnPO2OWBZvkeWnbMtYjAgprKO4Q58=)
2: qr3Na9k4dEq-BltyNe_Y-J5z6Xg.roa (hash: WKJf5bBFt3vRZjUBsw0y9RXB09W0E9StehXTEF8mDn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:e6:73:0f:a3:82:58:c2:91:da:1d:2b:73:81:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Validity
Not Before: Apr 17 05:00:32 2026 GMT
Not After : Apr 18 05:00:32 2026 GMT
Subject: CN=4849dc5b4fd759d6ff12b0bf3eed800fc0796243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3a:dd:e7:98:74:d0:a4:f7:91:23:86:b4:12:
51:84:11:8f:5a:86:0f:4f:94:b3:56:dd:45:4d:6e:
c2:c1:6b:aa:dd:c6:8a:4f:b6:2a:3c:bb:ca:26:1b:
87:07:8b:54:8e:ab:e4:db:d9:8f:c6:36:b8:bf:68:
b0:2c:88:5a:eb:20:8a:67:60:bc:db:11:55:fa:51:
d7:cb:35:51:04:d1:97:9a:36:a0:c9:0e:85:cb:5d:
88:a0:89:95:ee:a8:39:12:8d:f3:35:f1:02:fd:ab:
47:ed:f6:86:f4:dd:3d:51:9d:81:c3:8e:58:9e:90:
e3:0c:e7:fa:9b:ce:dd:b8:e3:94:44:56:44:a8:62:
d4:59:b3:dd:98:96:69:e3:6d:dd:cd:93:6c:e2:28:
56:cd:10:d3:38:ab:1c:3e:93:1a:f8:0b:39:52:50:
e4:f4:e2:9b:da:d5:29:d8:2f:9d:a7:df:d2:1c:3a:
34:15:bc:3a:a6:96:7d:d4:43:34:00:79:37:7f:a4:
da:1b:d3:aa:38:b8:0e:84:56:b4:92:31:c8:26:ca:
b6:2e:2c:28:9e:ec:11:6b:09:73:95:b9:a4:ce:d8:
86:af:7e:05:5e:10:c7:3d:2b:45:17:6b:67:e0:92:
6e:5b:62:91:f6:9f:83:c1:db:d8:a8:7b:8d:70:2e:
46:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:49:DC:5B:4F:D7:59:D6:FF:12:B0:BF:3E:ED:80:0F:C0:79:62:43
X509v3 Authority Key Identifier:
keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:65:d2:ac:90:44:b3:9f:df:73:68:a6:2d:6a:92:20:83:3b:
2c:66:fd:9c:cb:f1:0e:50:ac:32:ef:c9:ad:ef:36:b6:0c:e6:
db:fe:79:78:ce:e0:b1:f6:2f:db:46:67:47:e9:44:7f:d8:7b:
c9:c7:50:87:96:c8:e6:f1:c5:43:e1:59:e5:cf:ad:6b:5a:45:
09:71:a7:5c:a0:21:16:81:3c:61:5e:01:70:0d:16:de:3c:89:
ea:dc:45:4a:dd:e3:ee:5f:cb:79:18:e0:15:3d:3a:47:45:48:
4e:48:76:9f:08:9a:2f:67:32:4f:e8:88:59:06:10:44:f4:b7:
88:f1:6e:7d:5f:28:0e:b3:78:71:f8:90:01:27:ea:ca:7f:f2:
dd:fb:f0:1f:76:cc:6d:aa:8f:cd:f1:1d:36:4d:e9:c1:35:c9:
2d:2e:d2:11:2d:43:40:30:6e:60:62:0e:a8:3c:ce:ae:18:e8:
66:dc:49:72:16:79:4d:31:51:7e:68:f0:76:82:00:8a:6c:06:
86:f7:b2:ef:16:c9:fe:c4:d9:b0:40:f0:cc:cc:57:51:10:66:
4e:ea:6b:6c:01:4a:ef:40:07:56:bf:40:08:58:95:72:49:0e:
db:f2:e9:a1:57:7e:ea:17:cd:35:34:4c:4c:45:df:81:14:f1:
21:77:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:49 2026 by rpki-client