Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
File: KV2FhrHf5iE-CywdK__BssjTUc8.mft (raw, json)
Hash identifier: m6+zdXwXs4fK9qQjc7o7xYHkaJr8nhRE1dhciz3V9xM=
Subject key identifier: 33:B0:5C:85:68:FF:34:1C:67:C3:83:9C:E1:05:24:FF:1E:00:1B:4F
Authority key identifier: 29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
Certificate issuer: /CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Certificate serial: 019D9CD0FBFCAE18318822740866EB998964
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
Manifest number: 0158
Signing time: Fri 17 Apr 2026 19:00:34 +0000
Manifest this update: Fri 17 Apr 2026 19:00:34 +0000
Manifest next update: Sat 18 Apr 2026 19:00:34 +0000
Files and hashes: 1: KV2FhrHf5iE-CywdK__BssjTUc8.crl (hash: 0LhJ3B3braZP31vZ5vNJDvW676K20Ah7JTnTWnszY4A=)
2: RMsG8pQVuDko30N-hzzT26RjJ9Y.asa (hash: yi02C4KYzTGBREJtJL0ti8csY3NPFrvUw9hF+6s7XDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d0:fb:fc:ae:18:31:88:22:74:08:66:eb:99:89:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Validity
Not Before: Apr 17 19:00:34 2026 GMT
Not After : Apr 18 19:00:34 2026 GMT
Subject: CN=33b05c8568ff341c67c3839ce10524ff1e001b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dd:0e:d5:aa:53:42:7c:bb:ff:96:44:78:d8:
e7:cb:ab:bf:23:9c:a3:42:b1:c4:ac:6a:f8:c0:5f:
6b:b4:93:67:28:95:70:10:bf:28:ed:d2:ae:fd:6c:
33:53:be:61:17:a2:b3:a0:fc:63:69:b4:5e:91:e2:
f4:ef:35:ae:e9:9a:d1:f0:6e:ef:fe:b6:2c:5c:ce:
44:e1:16:97:06:83:ba:16:78:44:ec:bd:ac:a7:1a:
ac:04:1e:2a:2d:97:4d:6c:0e:42:38:09:ca:e6:b6:
af:48:2d:47:c7:f0:fb:83:fd:27:26:8c:1c:3c:23:
d7:16:89:17:c3:32:9c:2f:ae:6d:a9:7e:6c:6c:71:
d3:37:72:18:8d:0a:3a:d1:3c:cf:cb:19:b6:b1:fb:
96:25:7f:a0:c2:80:e7:34:f4:2c:72:69:fd:21:86:
75:a1:c5:5a:d4:c1:8c:49:09:66:54:fe:73:15:7a:
d1:52:1d:4e:a8:b6:6f:19:39:9a:85:8b:ee:75:ec:
b2:2b:2f:03:18:30:47:46:ba:69:9e:20:0c:43:75:
66:3c:b9:6e:b1:64:5e:77:12:a8:ac:61:83:fa:eb:
9d:a1:53:be:26:4b:7e:10:19:28:95:d6:8b:b0:e7:
22:bf:9e:10:ce:37:f5:70:24:9b:20:9b:03:a6:b9:
00:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B0:5C:85:68:FF:34:1C:67:C3:83:9C:E1:05:24:FF:1E:00:1B:4F
X509v3 Authority Key Identifier:
keyid:29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:72:73:69:b3:47:e8:81:88:e7:ce:81:7f:52:63:30:b6:a6:
6a:42:6c:8a:e1:87:5c:2a:5b:61:4e:01:82:82:dd:25:4b:35:
0e:db:ae:80:7e:83:da:44:23:15:23:6e:aa:35:f2:3d:a0:75:
46:c3:b8:64:17:ef:c4:0c:a9:33:e5:10:35:3a:17:14:b4:e5:
f8:f6:75:3f:a4:6b:94:33:bc:64:5f:d8:47:08:20:b3:4d:85:
b2:3e:9f:7b:3e:62:a5:35:6f:40:9b:62:fc:7c:35:c6:24:22:
f2:fe:32:e4:be:0a:69:d9:16:60:96:02:bd:d4:aa:67:ec:87:
cc:81:5e:15:58:c4:9c:9e:12:36:49:73:31:0b:1b:ae:a9:b7:
f5:7a:8d:e3:74:b1:1f:39:27:aa:a3:db:eb:7a:a1:15:c9:d2:
79:d0:f6:19:7c:1b:4c:33:a3:23:4c:19:a9:44:96:2e:98:66:
60:a7:13:51:ab:40:b4:76:b9:21:d2:37:00:8e:6a:af:6b:bb:
67:2b:e1:7a:69:f2:93:28:9a:36:89:d6:18:37:8a:97:c2:1a:
78:71:64:44:48:a4:c2:a9:56:7c:c4:c5:ff:52:18:68:aa:1a:
9c:7c:f4:34:af:91:66:5b:68:d0:97:a7:d1:a2:8a:03:d6:b9:
97:97:27:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2c0Pv8rhgxiCJ0CGbrmYlkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NWQ4NTg2YjFkZmU2MjEzZTBiMmMxZDJiZmZjMWIyYzhk
MzUxY2YwHhcNMjYwNDE3MTkwMDM0WhcNMjYwNDE4MTkwMDM0WjAzMTEwLwYDVQQD
EygzM2IwNWM4NTY4ZmYzNDFjNjdjMzgzOWNlMTA1MjRmZjFlMDAxYjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt0O1apTQny7/5ZEeNjny6u/I5yj
QrHErGr4wF9rtJNnKJVwEL8o7dKu/WwzU75hF6KzoPxjabRekeL07zWu6ZrR8G7v
/rYsXM5E4RaXBoO6FnhE7L2spxqsBB4qLZdNbA5COAnK5ravSC1Hx/D7g/0nJowc
PCPXFokXwzKcL65tqX5sbHHTN3IYjQo60TzPyxm2sfuWJX+gwoDnNPQscmn9IYZ1
ocVa1MGMSQlmVP5zFXrRUh1OqLZvGTmahYvudeyyKy8DGDBHRrppniAMQ3VmPLlu
sWRedxKorGGD+uudoVO+Jkt+EBkoldaLsOciv54Qzjf1cCSbIJsDprkAJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOwXIVo/zQcZ8ODnOEFJP8eABtPMB8GA1UdIwQY
MBaAFCldhYax3+YhPgssHSv/wbLI01HPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1YyRmhySGY1aUUtQ3l3ZEtfX0Jzc2pUVWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC83YzM2NTQtNTcwZi00NTQ0LWFkZWIt
NjZiYjMwYzI3YmMxLzEvS1YyRmhySGY1aUUtQ3l3ZEtfX0Jzc2pUVWM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC83YzM2NTQtNTcwZi00NTQ0LWFkZWItNjZiYjMwYzI3YmMx
LzEvS1YyRmhySGY1aUUtQ3l3ZEtfX0Jzc2pUVWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3JzabNH
6IGI586Bf1JjMLamakJsiuGHXCpbYU4BgoLdJUs1DtuugH6D2kQjFSNuqjXyPaB1
RsO4ZBfvxAypM+UQNToXFLTl+PZ1P6RrlDO8ZF/YRwggs02Fsj6fez5ipTVvQJti
/Hw1xiQi8v4y5L4KadkWYJYCvdSqZ+yHzIFeFVjEnJ4SNklzMQsbrqm39XqN43Sx
HzknqqPb63qhFcnSedD2GXwbTDOjI0wZqUSWLphmYKcTUatAtHa5IdI3AI5qr2u7
ZyvhemnykyiaNonWGDeKl8IaeHFkREikwqlWfMTF/1IYaKoanHz0NK+RZlto0Jen
0aKKA9a5l5cnFw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:26 2026 by rpki-client