Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
File: KvXkhmugmCASSm5REQT8QfpUGZU.mft (raw, json)
Hash identifier: rpjkqP+b2vDpNiLomJnkbDgFdzkArwABaa5BF0Qi1Cg=
Subject key identifier: B7:C5:58:3A:D9:00:39:21:94:65:3B:82:FE:9D:9F:FA:B5:57:2E:6D
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial: 01A0CE23FD02B8C9D90BC0E59F3C667DDACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
Manifest number: 17AA
Signing time: Wed 23 Sep 2026 12:01:00 +0000
Manifest this update: Wed 23 Sep 2026 12:01:00 +0000
Manifest next update: Thu 24 Sep 2026 12:01:00 +0000
Files and hashes: 1: 1-z20vDfkn7oH-6wUhtZ7pUOpXYs.roa (hash: 4MFRLpbPJz7onF3ec6CHT+GVAOztKot1i4cNl9/RUGQ=)
2: KvXkhmugmCASSm5REQT8QfpUGZU.crl (hash: jVfUftIIQp5QOYxw2JpS7BIxFpDbDGKFbfGdM8eRnY8=)
3: O21Shcq_z6RKIQVhghQ8x3iEUgo.roa (hash: PftCITy+sH9MILDPnvPA0rgTafRE24Enke6NGZ2wU40=)
4: kip9OEz8XKCqejVGiyHb4UeVJqw.roa (hash: 2JQk1BgdQDCMPFy2Bnpli4/vgD3QHxPKM4wyX0aSciw=)
5: qFN4BBxdmHy_3BcnNOupfLTZLMo.roa (hash: BnnmcXeCam4+KhT/CdouCX5HwDOQfbwphY/d8ikHz1E=)
6: uak-SP6C0SdGYf4Tcy5QLvzCEvQ.roa (hash: 5hi2l5GuzQIHHEKLjg//xukNKdrAlFGmuJKbjmJZ2aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:fd:02:b8:c9:d9:0b:c0:e5:9f:3c:66:7d:da:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
Validity
Not Before: Sep 23 12:01:00 2026 GMT
Not After : Sep 24 12:01:00 2026 GMT
Subject: CN=b7c5583ad900392194653b82fe9d9ffab5572e6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7b:38:f5:32:3a:33:5d:2c:08:1a:db:69:14:
11:1f:89:21:8a:7e:69:7d:48:7d:8b:08:68:a8:a0:
53:3d:5e:e7:b1:4e:af:d6:4e:43:d9:5b:eb:3b:4a:
bc:90:55:61:94:59:80:74:be:7b:cf:56:0f:2b:3c:
57:5c:1f:f1:7c:ed:b9:39:0c:03:06:3b:ab:9c:91:
f6:19:36:e0:aa:11:36:78:f2:ad:fb:12:66:97:c6:
17:3a:27:25:32:1a:25:1c:e4:08:34:04:0d:4a:4b:
da:c6:0a:fb:de:73:fc:1f:0d:87:5d:1a:13:37:3d:
31:36:97:ad:f8:dc:15:de:c2:bc:45:8e:b3:61:20:
d3:bc:e9:da:89:b3:8e:aa:08:bc:e6:6c:70:b4:00:
22:fa:a1:5e:60:6a:0f:bf:9f:49:ad:50:30:0c:69:
4f:bf:5c:2a:a9:a2:f4:29:ce:b5:0f:23:85:0d:74:
18:92:d4:cf:b9:b8:b4:42:f0:31:ae:6a:df:e8:41:
82:d1:ee:98:08:28:51:5a:67:34:6d:a0:3a:74:29:
42:60:3f:da:d9:29:0f:d0:fe:8f:e1:b6:b2:cd:0d:
94:90:61:97:4a:28:5e:8b:ab:5d:2b:15:d8:21:3a:
fa:f4:41:1d:ff:1b:2d:c3:e9:78:63:e6:df:e1:7f:
fd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C5:58:3A:D9:00:39:21:94:65:3B:82:FE:9D:9F:FA:B5:57:2E:6D
X509v3 Authority Key Identifier:
keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:b2:09:90:8d:1e:44:9c:76:b6:5c:42:e5:93:cf:27:1a:21:
3c:c5:67:11:4e:23:2d:d7:23:09:d2:d0:6b:9c:9a:7f:b6:68:
af:33:45:be:e9:1c:04:de:f5:d0:ef:ee:b1:0d:22:13:00:26:
7a:23:98:4d:ff:5b:8a:69:01:60:2e:4b:e8:9a:23:73:a6:c3:
4a:8f:4b:68:07:ac:6e:02:57:d2:15:d3:9b:76:36:93:47:f4:
8f:3a:fa:bb:fc:2d:91:90:58:a4:8a:d9:c2:0f:49:93:ab:94:
ea:3d:4a:85:82:34:46:4f:bd:74:66:c9:af:3e:ea:38:19:a2:
ee:be:cc:d8:35:a1:52:1e:a1:27:ef:e7:e1:55:12:94:9c:44:
e5:c9:a3:9f:ca:8b:6c:f7:66:31:0b:95:7a:7d:81:c2:84:cd:
2b:c4:46:66:6b:e1:ce:f0:82:e1:cf:d2:c0:e9:e9:0a:15:43:
8f:12:bc:13:1e:ec:f8:2d:a4:86:5c:6c:c3:1f:cf:5b:f5:7a:
5c:a2:7f:a4:85:e6:0d:10:dc:85:6f:fb:bc:8d:a2:e5:df:00:
ad:07:eb:68:b7:91:48:0f:3d:ac:d7:f2:ab:9b:91:a6:55:50:
72:ab:12:c2:bd:91:8d:d9:4a:90:ac:5e:6e:1c:0f:1c:57:36:
1d:b3:5f:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDOI/0CuMnZC8DlnzxmfdrKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZjVlNDg2NmJhMDk4MjAxMjRhNmU1MTExMDRmYzQxZmE1
NDE5OTUwHhcNMjYwOTIzMTIwMTAwWhcNMjYwOTI0MTIwMTAwWjAzMTEwLwYDVQQD
EyhiN2M1NTgzYWQ5MDAzOTIxOTQ2NTNiODJmZTlkOWZmYWI1NTcyZTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXs49TI6M10sCBrbaRQRH4khin5p
fUh9iwhoqKBTPV7nsU6v1k5D2VvrO0q8kFVhlFmAdL57z1YPKzxXXB/xfO25OQwD
BjurnJH2GTbgqhE2ePKt+xJml8YXOiclMholHOQINAQNSkvaxgr73nP8Hw2HXRoT
Nz0xNpet+NwV3sK8RY6zYSDTvOnaibOOqgi85mxwtAAi+qFeYGoPv59JrVAwDGlP
v1wqqaL0Kc61DyOFDXQYktTPubi0QvAxrmrf6EGC0e6YCChRWmc0baA6dClCYD/a
2SkP0P6P4bayzQ2UkGGXSihei6tdKxXYITr69EEd/xstw+l4Y+bf4X/9bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfFWDrZADkhlGU7gv6dn/q1Vy5tMB8GA1UdIwQY
MBaAFCr15IZroJggEkpuUREE/EH6VBmVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNTI3NjEtMDE5YS00ZGU1LTk1N2Qt
YzMyMGU1MGEzYzc5LzEvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yNTI3NjEtMDE5YS00ZGU1LTk1N2QtYzMyMGU1MGEzYzc5
LzEvS3ZYa2htdWdtQ0FTU201UkVRVDhRZnBVR1pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAprIJkI0e
RJx2tlxC5ZPPJxohPMVnEU4jLdcjCdLQa5yaf7ZorzNFvukcBN710O/usQ0iEwAm
eiOYTf9bimkBYC5L6Jojc6bDSo9LaAesbgJX0hXTm3Y2k0f0jzr6u/wtkZBYpIrZ
wg9Jk6uU6j1KhYI0Rk+9dGbJrz7qOBmi7r7M2DWhUh6hJ+/n4VUSlJxE5cmjn8qL
bPdmMQuVen2BwoTNK8RGZmvhzvCC4c/SwOnpChVDjxK8Ex7s+C2khlxswx/PW/V6
XKJ/pIXmDRDchW/7vI2i5d8ArQfraLeRSA89rNfyq5uRplVQcqsSwr2RjdlKkKxe
bhwPHFc2HbNfow==
-----END CERTIFICATE-----
Generated at Wed Sep 23 20:24:44 2026 by rpki-client