Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier: quGaMPrXkxgachMfosVdrzkH7ms/OqPorQZHronU04A=
Subject key identifier: 87:0D:A8:B1:9E:BF:03:7B:0D:BE:F6:8D:09:5F:D0:E3:7B:8B:C1:B5
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial: 019FA89A21828BE436F0E8DECD8895A1F29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number: 0A2D
Signing time: Tue 28 Jul 2026 12:01:41 +0000
Manifest this update: Tue 28 Jul 2026 12:01:41 +0000
Manifest next update: Wed 29 Jul 2026 12:01:41 +0000
Files and hashes: 1: HrGcgBvg4DY29ekAPoOs0k_ceU8.roa (hash: Zi9LIDXSmXdYftVe/mbJqu9FZB8L69cv5MK/RNZAW5k=)
2: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: 0SjD5Qa15ViCxIVafDhw4vMXOO+iYAWC1cBbw6moyGg=)
3: RxNLLXxR-CzB0lCNzFXnXse6o58.asa (hash: +bxHDoutbQA8pq/ltILKkfOw9KUe0ujPJE9JrTsk4Fw=)
4: YVLbsPphUzr0gk62ZWqr-AU_xYs.roa (hash: 40/VqOwzeKbDNYjqt9gFE2PfKWEcwlXPJGHdZ1QMGtM=)
5: xhu-0mZ6I_dG18XDHBeHb4pHzuI.asa (hash: Ckg17sZrLC7ovu4WHIS5uCgsXOtfqzHSeiiwzrs9BRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:21:82:8b:e4:36:f0:e8:de:cd:88:95:a1:f2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Validity
Not Before: Jul 28 12:01:41 2026 GMT
Not After : Jul 29 12:01:41 2026 GMT
Subject: CN=870da8b19ebf037b0dbef68d095fd0e37b8bc1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bb:8b:d4:7b:45:f6:73:67:b3:2d:63:70:fc:
be:22:2e:cb:07:8d:62:35:47:68:08:ae:83:ee:81:
27:02:c3:ab:95:cb:67:65:2c:3e:0e:88:56:3b:92:
3d:46:41:e2:5a:de:66:a7:8d:10:60:7c:a9:d9:34:
bd:e9:77:d3:0a:c3:c7:0c:39:95:cd:3e:2d:48:6e:
f7:52:ae:42:38:56:17:a2:a2:be:7c:db:6e:f1:86:
0d:6e:ee:74:8d:5e:67:79:e7:4d:8d:b2:bf:c6:42:
fc:fe:5b:08:7f:7e:34:4f:5d:a4:ed:42:e5:d2:e5:
d0:39:4d:c4:ae:5d:ce:91:e3:38:3a:70:dc:e0:fa:
2a:34:8d:94:e8:c7:cd:27:e7:b1:34:58:f7:9b:71:
0c:6c:95:27:62:2d:28:c3:7b:3d:95:88:4f:33:aa:
5f:97:ef:8f:32:83:4a:bf:66:3e:21:91:c1:69:86:
4a:45:a5:83:53:0b:da:67:4f:5c:6c:fa:c7:25:be:
8e:ba:71:66:d0:8c:72:ff:dc:18:1e:6c:4f:ac:ea:
d3:e1:31:f4:ba:e8:2d:5d:35:ed:9a:de:c0:72:5d:
8e:f2:f4:09:27:9b:31:1f:80:da:ed:51:74:6f:48:
b6:46:7d:49:2a:6c:d2:6f:27:77:cd:2d:53:18:49:
63:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0D:A8:B1:9E:BF:03:7B:0D:BE:F6:8D:09:5F:D0:E3:7B:8B:C1:B5
X509v3 Authority Key Identifier:
keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f4:4c:3a:22:29:1d:9f:ce:9d:df:09:13:d0:f3:6a:76:f8:
c8:14:27:b9:05:fd:f2:84:cd:90:77:85:c0:65:8a:d4:ff:39:
25:05:43:36:87:a2:99:8d:ad:a2:fd:f2:ad:b3:e0:30:42:8b:
96:4f:68:0d:4d:ec:ee:27:db:cc:88:fe:97:dc:45:c3:ee:cf:
1f:54:59:b1:7e:fb:dc:3c:f0:a0:71:cb:80:b6:d7:fe:a1:da:
f7:81:06:20:57:68:19:ac:70:b8:5a:29:5b:f4:99:04:92:67:
3c:b4:36:88:e9:0d:fd:b7:3a:e9:67:36:87:5f:32:1a:8a:f2:
90:72:78:fc:7e:08:7b:13:4c:78:eb:3f:43:99:d7:6c:a3:aa:
f4:62:74:33:d9:34:a7:76:c0:0a:cb:2b:eb:67:82:32:96:50:
c3:41:c2:c5:90:a7:f0:62:57:7c:59:fb:b3:d9:57:ef:bd:1b:
f2:d7:58:e6:ff:f7:4d:9d:b1:1d:18:9b:e8:c3:a5:7f:11:77:
58:b0:03:4d:bc:eb:63:7e:24:8e:c0:1a:70:12:25:89:c6:9a:
2a:a4:5f:9b:2d:16:d5:da:9e:54:87:9c:5f:21:57:32:36:5b:
68:36:68:87:e3:a9:4a:69:67:ed:6f:58:2a:05:eb:ae:78:bf:
45:53:7e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:23 2026 by rpki-client