Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
File: kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft (raw, json)
Hash identifier: eIEdvGCx21VOPyiCwCaIG92DDOiaKGI7L/Mj92jCM1Y=
Subject key identifier: FB:5B:66:0D:F0:4F:0D:FC:9E:10:11:B4:71:F4:25:25:C0:27:55:67
Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
Certificate issuer: /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Certificate serial: 019D9C2D0C1B3BC43A7B1E0DCEA2A9965C7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
Manifest number: 14D3
Signing time: Fri 17 Apr 2026 16:01:31 +0000
Manifest this update: Fri 17 Apr 2026 16:01:31 +0000
Manifest next update: Sat 18 Apr 2026 16:01:31 +0000
Files and hashes: 1: ZLG2d-EvI3tDHtNjQT_sDlpWBXM.roa (hash: bTLO/he/cwtOoUf2Miq0EAEbluFDqTVodZfbg6upreQ=)
2: kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl (hash: IjdJGlTYFYPOew1SnRB0Bb6ZIWF0NJ4R006BXcDjuKc=)
3: n4P4Aw5EqVPbp0dHUGmlk-Fj3KQ.roa (hash: OBqZU1zM//7Ku6VXCPW57HKZVO1wfa+8Zttcrr4ee/o=)
4: t7Gq84nW0Oj9leZaX2X9wjhswgA.roa (hash: yr3zYXhfmgwWPLlesJ4m39gkLVl7WXaVbHMKkBty0Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:0c:1b:3b:c4:3a:7b:1e:0d:ce:a2:a9:96:5c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Validity
Not Before: Apr 17 16:01:31 2026 GMT
Not After : Apr 18 16:01:31 2026 GMT
Subject: CN=fb5b660df04f0dfc9e1011b471f42525c0275567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:22:f0:8f:9e:db:47:d4:af:f0:2e:52:4a:
65:4c:27:8d:af:10:45:ed:47:1c:3b:e5:40:ef:5e:
14:35:d1:f6:b5:62:85:8c:fe:cb:a2:30:b7:52:78:
40:a1:7a:97:68:50:a0:29:6e:f2:c5:01:ad:dd:11:
bf:b7:08:c1:ea:b4:df:52:6f:cd:9e:1a:a2:60:e1:
c6:da:19:56:1f:a1:1c:47:22:21:35:21:b4:54:2b:
f3:3e:b7:81:38:ee:e0:4c:8a:e8:8b:bf:3a:d8:7c:
9d:a3:ac:6b:b6:7d:4c:f9:b8:83:d5:b3:d4:e7:08:
95:d8:e5:fe:fe:ee:f5:7d:b6:4b:64:61:75:1c:57:
9f:7b:0a:26:cc:a5:99:75:29:bf:1f:fb:5d:ee:37:
e4:ac:cc:58:3b:01:d8:e6:bd:05:eb:f3:2b:fc:4f:
21:18:e8:35:f0:fd:bb:59:0f:7a:e1:13:c0:01:7b:
48:56:61:92:8d:89:dd:04:a2:00:5d:37:40:93:82:
ce:51:80:fb:6a:d7:e0:c6:11:e3:d0:cc:f0:17:06:
56:f7:dc:8b:65:86:f2:ee:e0:37:5f:69:df:04:60:
50:e2:7f:3b:81:e6:05:82:0a:be:49:d1:23:c4:44:
1d:ff:c8:79:99:c8:c7:39:8c:26:8e:4f:19:5e:73:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5B:66:0D:F0:4F:0D:FC:9E:10:11:B4:71:F4:25:25:C0:27:55:67
X509v3 Authority Key Identifier:
keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ec:21:72:89:d9:32:bc:76:2d:cd:86:f9:e7:72:42:5c:ee:
1d:ea:1c:54:cd:a7:1f:b8:1a:c7:4f:83:25:5c:05:fa:97:fb:
1b:95:b6:26:ae:c3:ea:25:fe:24:29:d4:61:be:d8:d1:28:b7:
4b:55:25:6a:9f:3e:aa:df:b4:2c:87:87:8d:0f:bd:36:a6:57:
a5:ed:60:8c:e6:7b:97:4f:41:c8:d1:e4:89:d3:84:44:08:6a:
74:1e:cd:ef:56:c3:f5:37:2f:0a:b0:50:7c:2d:9d:0d:f1:4d:
1e:0a:e2:a6:ed:d7:b9:92:a5:38:2c:98:bd:e6:18:99:fe:55:
05:98:76:f5:b5:31:c3:fb:fb:28:04:c9:98:09:e1:97:14:70:
a1:52:00:1f:06:d9:9a:c6:ac:7a:71:9f:53:bb:82:86:c2:02:
2a:50:25:b8:cb:b1:57:e4:96:20:ff:bd:c7:1a:df:a6:8b:21:
c8:37:40:f0:d4:10:32:aa:de:26:77:76:51:c7:c2:d3:a1:29:
c0:b4:c7:c1:d7:50:64:54:aa:c9:1e:0d:3d:65:4b:78:0a:19:
3d:69:87:84:ab:7a:0a:45:6d:82:6d:c1:dc:00:b5:17:c0:67:
43:61:b9:0d:8f:63:15:64:66:eb:a9:54:21:c2:0a:dc:50:8b:
52:99:fc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:17 2026 by rpki-client