Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
File: KV2FhrHf5iE-CywdK__BssjTUc8.mft (raw, json)
Hash identifier: DGqhztadkM1iDE8giWWGbGJMrD2PsrIYJVXoFshno40=
Subject key identifier: 17:8B:6B:D4:DF:64:D7:9D:D5:26:97:C4:6D:88:62:71:B3:CF:DA:4A
Authority key identifier: 29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
Certificate issuer: /CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Certificate serial: 019FA7BDD3492733BB3561B49F8924EDEAFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
Manifest number: 0267
Signing time: Tue 28 Jul 2026 08:01:03 +0000
Manifest this update: Tue 28 Jul 2026 08:01:03 +0000
Manifest next update: Wed 29 Jul 2026 08:01:03 +0000
Files and hashes: 1: AP-xXNHU0gsTip0y1Z9Q1Az_oHI.asa (hash: mEQ7UyBPxSpqS6xnOjHHOLsuKuVx3u/9H3fQI1OuMmY=)
2: KV2FhrHf5iE-CywdK__BssjTUc8.crl (hash: h5TZXDVrM8DsTNrn9Mv0o/5Pk6jZc8ttpi7TU+Lt2Dk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:d3:49:27:33:bb:35:61:b4:9f:89:24:ed:ea:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Validity
Not Before: Jul 28 08:01:03 2026 GMT
Not After : Jul 29 08:01:03 2026 GMT
Subject: CN=178b6bd4df64d79dd52697c46d886271b3cfda4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:31:58:ff:0e:bd:21:cc:7a:ef:c1:7b:fb:
65:00:bf:cb:eb:cf:13:b2:ae:26:c8:97:41:63:98:
b1:cf:8a:4b:89:1d:45:b5:50:84:63:83:74:d4:ae:
e2:1a:34:2b:bd:9f:d4:3f:59:f0:28:4e:8c:5f:49:
2b:9f:8e:67:11:65:25:ec:fd:92:32:7f:36:76:e9:
3d:89:3f:66:af:04:a3:85:03:8d:3b:4f:cd:01:32:
8a:e0:de:48:cb:ac:89:c3:22:f7:00:21:00:4b:df:
7a:2b:2a:d6:ec:2e:d4:e8:44:c1:fb:d4:29:5e:99:
94:85:37:16:62:0d:95:28:f3:af:30:b1:28:de:2b:
cd:bb:50:88:26:0f:b7:0e:fb:2d:f2:bd:0f:a4:78:
2b:c6:ea:a1:68:89:28:87:e7:e7:d3:8e:72:26:87:
00:6f:50:70:42:d6:45:71:de:83:57:79:83:9d:db:
f4:60:24:6e:3c:62:5b:e1:31:7a:a1:28:00:d9:d6:
f2:43:4a:0a:1c:f6:42:06:c1:3d:65:94:0f:50:84:
0b:16:8e:20:49:d3:58:4e:1e:da:13:a9:b5:86:37:
4e:ce:fd:6c:aa:86:c0:cc:83:71:6a:e6:93:89:48:
6d:f7:cb:f6:8e:a8:91:bb:94:32:c4:8a:aa:89:2c:
1d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8B:6B:D4:DF:64:D7:9D:D5:26:97:C4:6D:88:62:71:B3:CF:DA:4A
X509v3 Authority Key Identifier:
keyid:29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:ed:02:32:1c:c7:e9:4d:13:5a:9a:c4:05:59:c2:4a:63:46:
cd:11:94:9c:11:1a:07:5b:af:8e:db:e2:aa:62:91:c8:32:35:
65:b4:5c:d9:4d:de:57:bf:32:d5:67:f0:6e:77:2d:c3:ce:ff:
8d:fb:b0:db:a1:82:17:93:b9:ce:dd:83:86:25:ab:2e:5e:32:
ab:c7:1b:13:c9:7e:19:f9:fa:3e:6f:53:1b:77:1b:03:6a:56:
ac:53:a9:05:04:91:79:36:8a:c1:ea:d9:ab:e8:ea:2a:3d:9c:
7c:83:1d:e7:8b:0a:8a:a3:50:0a:55:30:d6:73:95:af:d4:06:
b5:6c:db:a4:c3:b6:94:3a:c2:db:55:09:f7:17:d0:66:eb:60:
b1:ce:1b:a1:cb:7e:82:ea:88:d4:ba:57:73:ce:bd:4a:9f:3d:
95:94:90:01:29:37:e5:a0:32:49:15:16:e5:26:ad:07:a7:ed:
53:01:e1:ad:8b:76:e3:50:f3:c8:bf:8c:e4:bf:a8:4b:25:1a:
24:e6:94:b2:29:80:b2:e7:77:05:21:53:32:71:b9:c9:01:85:
00:d5:b7:12:61:e5:71:ec:9a:dc:ce:be:3a:65:a5:f7:af:de:
38:b3:ac:a0:7d:2c:20:9f:4a:d5:a5:2c:89:25:07:e8:c4:ef:
e1:b7:fd:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nvdNJJzO7NWG0n4kk7er+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NWQ4NTg2YjFkZmU2MjEzZTBiMmMxZDJiZmZjMWIyYzhk
MzUxY2YwHhcNMjYwNzI4MDgwMTAzWhcNMjYwNzI5MDgwMTAzWjAzMTEwLwYDVQQD
EygxNzhiNmJkNGRmNjRkNzlkZDUyNjk3YzQ2ZDg4NjI3MWIzY2ZkYTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjcxWP8OvSHMeu/Be/tlAL/L688T
sq4myJdBY5ixz4pLiR1FtVCEY4N01K7iGjQrvZ/UP1nwKE6MX0krn45nEWUl7P2S
Mn82duk9iT9mrwSjhQONO0/NATKK4N5Iy6yJwyL3ACEAS996KyrW7C7U6ETB+9Qp
XpmUhTcWYg2VKPOvMLEo3ivNu1CIJg+3Dvst8r0PpHgrxuqhaIkoh+fn045yJocA
b1BwQtZFcd6DV3mDndv0YCRuPGJb4TF6oSgA2dbyQ0oKHPZCBsE9ZZQPUIQLFo4g
SdNYTh7aE6m1hjdOzv1sqobAzINxauaTiUht98v2jqiRu5QyxIqqiSwdnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBeLa9TfZNed1SaXxG2IYnGzz9pKMB8GA1UdIwQY
MBaAFCldhYax3+YhPgssHSv/wbLI01HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1YyRmhySGY1aUUtQ3l3ZEtfX0Jzc2pUVWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83YzM2NTQtNTcwZi00NTQ0LWFkZWIt
NjZiYjMwYzI3YmMxLzEvS1YyRmhySGY1aUUtQ3l3ZEtfX0Jzc2pUVWM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC83YzM2NTQtNTcwZi00NTQ0LWFkZWItNjZiYjMwYzI3YmMx
LzEvS1YyRmhySGY1aUUtQ3l3ZEtfX0Jzc2pUVWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+0CMhzH
6U0TWprEBVnCSmNGzRGUnBEaB1uvjtviqmKRyDI1ZbRc2U3eV78y1Wfwbnctw87/
jfuw26GCF5O5zt2DhiWrLl4yq8cbE8l+Gfn6Pm9TG3cbA2pWrFOpBQSReTaKwerZ
q+jqKj2cfIMd54sKiqNQClUw1nOVr9QGtWzbpMO2lDrC21UJ9xfQZutgsc4boct+
guqI1LpXc869Sp89lZSQASk35aAySRUW5SatB6ftUwHhrYt241DzyL+M5L+oSyUa
JOaUsimAsud3BSFTMnG5yQGFANW3EmHlceya3M6+OmWl96/eOLOsoH0sIJ9K1aUs
iSUH6MTv4bf9dg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:47:25 2026 by rpki-client