Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
File: KV2FhrHf5iE-CywdK__BssjTUc8.mft (raw, json)
Hash identifier: qSN6o+FZkMSOo7qLw3kgiCw4U9y5rSeW5hhgmYcp6pw=
Subject key identifier: BA:91:AB:06:82:69:88:B7:07:3A:1B:62:8F:83:9A:F6:F4:D0:46:E4
Authority key identifier: 29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
Certificate issuer: /CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Certificate serial: 01A0E853113A78F89F25FF75D233FAF2A3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
Manifest number: 030D
Signing time: Mon 28 Sep 2026 14:02:32 +0000
Manifest this update: Mon 28 Sep 2026 14:02:32 +0000
Manifest next update: Tue 29 Sep 2026 14:02:32 +0000
Files and hashes: 1: AP-xXNHU0gsTip0y1Z9Q1Az_oHI.asa (hash: mEQ7UyBPxSpqS6xnOjHHOLsuKuVx3u/9H3fQI1OuMmY=)
2: KV2FhrHf5iE-CywdK__BssjTUc8.crl (hash: IA/UwxnEx3l7VrR5kIfFBR0eMzdtQyXdguewB7IAhMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:53:11:3a:78:f8:9f:25:ff:75:d2:33:fa:f2:a3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Validity
Not Before: Sep 28 14:02:32 2026 GMT
Not After : Sep 29 14:02:32 2026 GMT
Subject: CN=ba91ab06826988b7073a1b628f839af6f4d046e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:91:33:32:01:e9:40:20:ef:0e:c5:cf:10:
43:5b:10:5d:b5:91:46:b6:dd:2a:91:29:8b:57:64:
26:d9:b5:2a:ea:bb:96:70:69:37:cd:66:06:c1:cf:
7e:54:0c:da:0e:1e:41:cc:9d:b1:c9:ab:c4:46:85:
6d:02:e0:72:69:4d:bd:15:6c:94:a6:2a:dc:42:f8:
41:6f:f5:a7:b2:c1:f2:a7:33:75:d4:9b:a8:9f:58:
62:08:ab:b3:2a:f5:b4:35:82:de:98:21:e5:62:17:
b7:bd:76:11:78:b8:b5:84:8e:6c:34:bf:a2:de:62:
e8:7a:71:fd:3b:54:a4:18:27:af:cd:6b:46:4c:24:
89:54:07:5e:50:72:09:74:2b:1e:09:0a:72:d3:d9:
49:d2:18:38:83:f7:00:ef:98:d2:3a:76:19:84:5c:
39:78:06:1a:57:10:e8:eb:29:6e:3e:33:ed:08:09:
01:4d:67:4f:64:21:0f:0f:d5:3a:89:5a:e2:c1:54:
78:10:61:e9:15:d7:a7:49:ad:85:06:ba:8c:68:ce:
4d:7f:7e:5b:b5:42:e6:aa:51:88:89:d3:b5:a9:84:
68:b9:5b:d5:c5:3a:4c:b3:ee:28:61:d8:16:32:b9:
7f:44:01:09:36:f1:49:c6:89:f9:63:36:49:29:e2:
2e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:91:AB:06:82:69:88:B7:07:3A:1B:62:8F:83:9A:F6:F4:D0:46:E4
X509v3 Authority Key Identifier:
keyid:29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b2:f9:bd:14:39:f4:8f:9a:96:15:f9:4a:79:1c:e3:3e:be:
81:f1:2f:5f:4b:0d:8b:c8:6d:f5:36:17:bd:0b:a5:70:1b:12:
d1:d9:ad:bc:8a:7b:a6:58:35:33:f0:21:05:b1:c4:da:ea:52:
5f:97:d2:2d:65:32:57:91:10:28:ca:b7:35:7b:dc:d2:f1:0c:
a9:23:f1:a6:f8:38:ab:35:22:19:ce:97:8e:9e:21:7d:f4:3b:
2d:e4:08:e8:27:c7:d3:0e:7c:ef:3d:8f:1a:38:f3:93:a9:f3:
8a:50:0d:0c:80:3a:e5:18:a9:c5:ce:06:85:62:63:f0:08:09:
92:f6:80:7b:91:10:b2:05:fa:98:5d:cf:eb:ae:a0:42:e4:c4:
16:e4:2b:9c:a2:49:50:ee:cb:55:7b:e2:15:99:d1:63:b7:09:
83:77:ff:68:ee:ff:6e:91:cb:8c:12:ab:85:57:8b:a1:30:e1:
19:b4:be:cf:6a:83:3d:51:a9:6f:d0:dc:c0:71:ed:87:3d:c7:
b4:d9:7f:bc:e6:e0:d2:dd:a8:b3:e8:ad:4d:b9:3b:5a:94:8e:
14:8b:ba:70:aa:ac:ab:c8:45:ad:38:60:91:0c:a9:e2:34:d6:
8e:4a:ff:a0:a2:13:dd:70:7a:40:85:c1:44:5e:67:79:92:9d:
f1:76:46:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:43:27 2026 by rpki-client