Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: 0QP8VamrWnD5j1rX7IWoCxLiwx2nvUEDVVFOsq++Nok=
Subject key identifier: E3:F4:86:30:AD:CD:B2:20:21:06:8A:5B:57:73:F5:21:7D:5A:DA:69
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 019CABD91273432E855B3A719BC7BC7A77D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 1844
Signing time: Mon 02 Mar 2026 00:00:55 +0000
Manifest this update: Mon 02 Mar 2026 00:00:55 +0000
Manifest next update: Tue 03 Mar 2026 00:00:55 +0000
Files and hashes: 1: H1aTR_3-hcIaSL6m2Xtkw0pDsL0.roa (hash: qNxstYo00+D1moz7OPyfI/Jls2a6koAXTIX0TooiMUg=)
2: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: jxnlsYiuHUxiz+yowxX98X3kL9ZJXV1TsmDryaP0cHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:12:73:43:2e:85:5b:3a:71:9b:c7:bc:7a:77:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Mar 2 00:00:55 2026 GMT
Not After : Mar 3 00:00:55 2026 GMT
Subject: CN=e3f48630adcdb22021068a5b5773f5217d5ada69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:17:e2:a7:40:bb:ab:78:f3:56:ca:55:d2:06:
bb:a8:86:2c:ba:ec:37:ea:09:43:84:9e:30:eb:e8:
93:52:13:54:b1:28:ba:94:bf:6d:cb:d0:1e:e1:a1:
aa:7a:4b:f6:b5:68:0e:35:58:19:72:a6:d7:b2:75:
45:47:73:cf:cb:23:5f:97:25:70:9b:86:31:55:3a:
46:71:62:7e:cd:4c:b4:1c:d2:4f:6d:08:fc:bf:42:
84:87:ae:a3:33:0a:cb:3c:02:d8:45:f9:73:4c:65:
13:d4:b6:2f:7b:dc:82:5f:9c:9c:15:ec:2c:39:56:
01:26:49:26:d1:cf:22:ba:6f:c7:34:d1:40:fa:e2:
42:31:24:1f:8c:c4:33:b5:72:03:05:03:7f:34:1c:
6b:0f:f1:be:ee:fc:70:45:44:44:01:09:cf:26:7f:
aa:ca:f3:55:8a:e8:f0:d4:d0:c0:5b:b6:dc:45:0a:
c9:82:65:ab:70:0d:2b:a3:73:68:9e:ca:41:ee:99:
43:c1:b1:21:2a:8f:ac:e6:4b:7e:c2:e0:4a:0f:e6:
20:34:50:98:1c:26:a8:10:14:5f:68:78:f9:b4:28:
3e:bc:38:9e:8e:3b:c9:98:bf:f6:e3:cd:f4:19:43:
96:4c:26:ac:d8:73:a3:60:b4:1b:20:29:c6:5e:06:
7b:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F4:86:30:AD:CD:B2:20:21:06:8A:5B:57:73:F5:21:7D:5A:DA:69
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:39:68:c4:2e:d9:6e:80:1c:e2:46:03:66:c2:48:1c:f6:9f:
e1:49:99:70:20:7a:ff:bd:2f:b3:3d:2f:ca:b8:34:a1:ab:a7:
22:17:a5:2b:1b:23:83:68:32:1b:36:5c:85:46:18:95:66:cf:
8e:99:55:f4:ec:aa:cc:26:2a:e5:e3:25:d9:49:ec:06:98:5a:
11:bc:56:f4:52:13:f1:fe:47:04:73:39:be:a0:fe:17:4d:74:
1e:f1:0f:35:89:d3:5c:81:7c:c4:98:f1:30:83:4f:52:d3:31:
d3:7e:60:14:0f:e8:a7:c1:f4:62:47:38:4a:3b:46:5c:de:51:
49:07:8d:03:fb:68:c0:ff:44:b8:1d:99:ab:96:40:ce:1c:4a:
25:0e:75:9a:da:64:67:9e:fe:c0:9b:2f:46:ad:e1:8c:d6:c0:
88:e6:c3:49:2d:25:33:e7:19:92:76:c7:db:f6:8c:a3:9e:cb:
23:08:80:6d:85:86:d2:e0:5a:f2:f3:e0:1f:cd:3d:ed:2d:06:
8e:07:19:33:08:ef:3e:e7:47:42:83:c4:d7:2f:59:81:ec:0f:
21:87:2e:32:52:9e:b7:95:36:68:17:ad:53:93:68:3a:e4:c1:
10:98:a4:d9:34:48:f9:44:b8:91:36:32:6e:b8:d7:34:c1:71:
d9:4c:0d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:30:23 2026 by rpki-client