Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: TsXqDL6cBq+CDJdnZxo8d6KDLYqQkLN+inAIZ4AZ8/8=
Subject key identifier: B7:77:32:D6:2C:5A:51:23:0A:DF:87:24:D4:A5:2F:D4:E9:32:E0:F7
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 019FA8627BEAD5FED17218819031AAEC95B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 19D0
Signing time: Tue 28 Jul 2026 11:00:54 +0000
Manifest this update: Tue 28 Jul 2026 11:00:54 +0000
Manifest next update: Wed 29 Jul 2026 11:00:54 +0000
Files and hashes: 1: H1aTR_3-hcIaSL6m2Xtkw0pDsL0.roa (hash: qNxstYo00+D1moz7OPyfI/Jls2a6koAXTIX0TooiMUg=)
2: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: xA+xFdZYouMhcYuoFQN2jtN1d+Ezm09Ukx5RWE9aNA0=)
3: rV4fWnkrcGIszMs_FpYbegApVHE.asa (hash: 56jzfQdPh/s5EfuIXCaFZwWPR/T6Xgb5ZA7aJzX2/HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:7b:ea:d5:fe:d1:72:18:81:90:31:aa:ec:95:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Jul 28 11:00:54 2026 GMT
Not After : Jul 29 11:00:54 2026 GMT
Subject: CN=b77732d62c5a51230adf8724d4a52fd4e932e0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:6c:21:3d:f8:2d:a4:a8:ee:00:e7:b3:7b:
5e:9e:a9:a4:65:c1:2d:33:70:6d:95:9d:4d:1c:0a:
75:b7:79:70:09:9e:c9:1c:08:91:db:94:d7:9c:e8:
9d:64:4d:dd:71:58:41:89:39:41:22:82:e5:67:e7:
50:8b:85:af:80:d2:62:45:26:d4:bc:aa:ff:13:a0:
d8:49:8f:f6:b3:30:fb:e2:2b:38:21:e7:8e:7c:87:
05:c1:0a:40:7c:68:6e:c1:cc:e8:30:b4:8f:1c:90:
f3:23:6d:a8:14:9c:4b:8f:4b:57:52:b9:08:e2:85:
38:f7:ec:7c:3f:c7:51:52:4b:70:3e:79:07:61:4b:
3c:3e:37:a6:ef:c0:6b:f3:9e:d7:6b:2f:a3:9f:81:
d9:f4:80:4a:11:a6:96:b0:e0:90:d3:fc:57:c4:20:
c2:7f:2a:45:23:c3:36:3e:a0:d6:74:76:12:68:ca:
c1:be:ec:90:43:88:8a:4e:8c:36:16:3d:be:d1:fe:
a4:53:30:a8:d5:16:f4:f2:b6:af:00:f4:97:27:3d:
db:ec:52:f9:0a:ed:6a:39:1c:b8:6e:67:ff:c3:b0:
40:3d:68:a1:a8:e7:48:e5:48:a4:6e:4f:38:6b:51:
5d:c3:6e:7b:57:0c:1b:61:f8:72:7d:d0:f1:ab:cd:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:77:32:D6:2C:5A:51:23:0A:DF:87:24:D4:A5:2F:D4:E9:32:E0:F7
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:74:ff:5a:f1:10:92:50:a4:52:f5:04:3f:a9:62:4d:f6:39:
9f:0e:88:87:e4:76:4d:0f:f4:99:3b:72:9c:2c:c2:9a:b3:d2:
d5:b4:e5:29:ce:6c:c1:67:86:00:10:33:61:7e:a4:fe:e5:b2:
ae:d6:84:a1:a7:52:6f:87:4e:95:0d:69:90:8a:75:fc:5c:77:
7b:ec:3a:03:e3:4c:fb:6e:e6:6d:5a:62:6e:01:7e:f6:eb:eb:
e9:dd:01:2d:fe:c2:3d:78:1a:7a:72:a4:a5:a7:ba:25:56:88:
3d:8a:6a:e7:ea:0a:43:ea:c0:40:f8:5c:ef:ff:4a:7e:7a:f3:
2c:f1:b3:06:68:d2:87:ff:13:c0:a3:26:6b:fc:53:61:50:cf:
08:41:b3:90:70:cc:02:71:eb:94:64:16:a6:10:92:3e:03:c9:
10:1a:65:52:ac:f5:36:a4:0c:07:27:24:97:15:5d:bb:33:a6:
68:97:7d:26:e3:b4:14:fa:ba:5b:9f:ca:c5:08:35:72:92:e8:
d2:af:a5:b2:ee:63:76:23:24:a2:24:77:da:fd:00:f3:af:46:
df:06:ee:63:9d:81:c3:08:05:5c:61:b5:b6:a0:45:6c:00:75:
a4:21:1a:85:44:b2:6c:60:00:44:80:c0:7b:40:af:39:88:31:
98:7e:41:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:31 2026 by rpki-client