Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json)
Hash identifier: zvlWMEvWsUyXzkfEQWqFqF1KILjQlKUim/XU2oTW1bA=
Subject key identifier: 98:E6:31:40:26:02:F2:6F:7D:1A:BA:DF:20:EC:E6:54:ED:BA:83:EB
Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Certificate serial: 019CAA5859AA12F1CC08E79EC0A3C4ABF889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
Manifest number: 0F61
Signing time: Sun 01 Mar 2026 17:00:42 +0000
Manifest this update: Sun 01 Mar 2026 17:00:42 +0000
Manifest next update: Mon 02 Mar 2026 17:00:42 +0000
Files and hashes: 1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: ntDlzw5Mgwb7uX+5ZmGTt58h8Mra73FKMQrq9+7JoHs=)
2: qr3Na9k4dEq-BltyNe_Y-J5z6Xg.roa (hash: WKJf5bBFt3vRZjUBsw0y9RXB09W0E9StehXTEF8mDn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:59:aa:12:f1:cc:08:e7:9e:c0:a3:c4:ab:f8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Validity
Not Before: Mar 1 17:00:42 2026 GMT
Not After : Mar 2 17:00:42 2026 GMT
Subject: CN=98e631402602f26f7d1abadf20ece654edba83eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ed:2b:68:a7:5d:06:85:13:4b:d2:94:41:be:
51:16:ed:d1:b9:bb:62:bf:ee:21:8c:01:96:50:7f:
c5:b4:1c:db:28:a4:16:36:be:2f:f3:0d:77:1b:80:
68:c1:e7:10:1d:50:5a:d6:69:4d:12:68:00:f7:30:
84:41:2b:89:8b:5f:12:0a:76:15:ce:e0:f0:c9:74:
dc:65:7c:03:92:6a:69:51:90:6b:23:8b:77:ed:06:
a2:fb:81:2d:22:9c:9e:7c:eb:5e:c3:ed:aa:99:1f:
10:b6:6a:ee:bd:76:5c:f1:86:12:6d:60:62:44:2d:
c3:ef:b1:0e:99:b2:db:e3:6f:ba:a6:83:d5:98:cf:
7b:3e:b2:75:e6:ef:5d:61:0d:79:ba:48:9a:93:ab:
ad:4e:76:da:93:7f:28:94:4f:ec:d1:c1:43:08:65:
84:e1:bc:22:a3:41:68:4d:09:7b:63:2f:d7:a6:bb:
ad:03:d2:79:38:08:ec:6f:4e:b4:91:c3:96:7a:37:
8b:45:c7:6b:db:b8:02:14:53:4c:60:3a:58:02:a8:
ed:6c:85:a8:18:b4:35:a3:1d:d7:52:36:af:73:e7:
06:6b:a8:48:94:6d:b7:42:d5:37:fb:10:13:51:75:
2d:82:a3:7f:24:f5:b4:6d:7c:7a:3b:c8:a7:20:a6:
91:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E6:31:40:26:02:F2:6F:7D:1A:BA:DF:20:EC:E6:54:ED:BA:83:EB
X509v3 Authority Key Identifier:
keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c9:fe:9d:a3:97:f4:5b:61:58:87:44:8d:6b:9e:ae:78:6f:
63:e8:ed:43:ac:ec:9a:6f:be:d7:07:36:8c:f2:9b:52:f5:fc:
fc:60:bb:22:35:cd:bd:c5:b5:0c:3f:0d:6f:98:c0:4a:36:6d:
22:45:d5:83:a9:1c:ea:59:93:17:06:3c:66:54:34:8a:f9:cc:
e7:32:a6:dc:9f:e8:dc:79:7f:dc:7f:b6:51:cc:f5:4b:5f:c0:
63:86:2d:40:aa:44:4f:8a:09:12:16:73:1b:60:ae:42:1d:7b:
77:08:d9:2d:99:37:0c:ba:b3:8a:57:40:f0:a0:3e:3e:d5:04:
01:21:57:8c:77:54:58:0f:af:eb:88:e5:3c:77:19:68:26:79:
01:3e:2c:c4:be:d1:e6:49:d0:43:11:6d:96:63:4f:5e:66:99:
5c:f5:16:74:9a:d7:aa:fb:e5:cd:c5:b4:5d:38:29:f9:bb:14:
dc:95:96:29:21:46:a9:b5:50:16:6b:47:4f:13:ed:bd:02:37:
d3:d3:de:45:cc:2c:93:6b:e2:d2:d9:c5:a0:ba:7f:65:c0:96:
43:ef:a1:67:9f:41:6d:9f:c9:7a:d3:a5:42:54:d4:7b:39:84:
30:24:4e:ca:64:53:d2:d5:76:9f:e2:62:bf:40:8c:87:83:02:
21:5a:35:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:20 2026 by rpki-client