Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: hJqXt8TUBAXFkf8OPg9H8N1najzcVGQ9mmFwRzLwfSg=
Subject key identifier: 4F:DE:08:AE:D6:57:06:5F:ED:1F:B0:A6:38:7C:0E:CC:F9:2C:DC:10
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 019FA9E2A1A102E545CAD7F8BA55D1F3E3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 18:00:29 +0000
Manifest this update: Tue 28 Jul 2026 18:00:29 +0000
Manifest next update: Wed 29 Jul 2026 18:00:29 +0000
Files and hashes: 1: 4C5txelxptdoicijUbZlUymO1KI.roa (hash: n5OUnYu6DQ52eh4gaqVWM1OYGrwmKHVhRB5oPVeomXo=)
2: 8ood-uHTXVuPr-Uhci0MBhQD_Ok.roa (hash: D9cQAbFXlUASgQDnCIvuvRErkHMl72I/fsdMBXIjpGU=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: fsfuJSROH6CDO85DudmiPXINQDX2usnDtb7qqwlnCQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:a1:a1:02:e5:45:ca:d7:f8:ba:55:d1:f3:e3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Jul 28 18:00:29 2026 GMT
Not After : Jul 29 18:00:29 2026 GMT
Subject: CN=4fde08aed657065fed1fb0a6387c0eccf92cdc10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4d:72:f1:2d:33:65:bb:ec:92:8f:a5:89:96:
bd:71:61:de:9b:a3:1c:39:a0:14:c6:9e:80:98:9a:
99:bd:ab:77:f7:9a:77:19:54:3c:76:f7:7f:39:41:
c5:c1:c9:a1:d2:72:2b:f7:f6:43:59:82:79:68:7f:
c5:5d:48:94:88:ae:86:f5:4a:d0:7a:9d:b7:03:f4:
b2:6e:b7:64:ef:0e:a9:0c:bd:d5:c5:63:5a:c9:ab:
fe:c6:ef:ef:f4:bd:6e:94:af:aa:53:f0:74:c8:86:
08:c2:71:60:a2:34:5a:12:2b:dc:61:e8:0b:ca:a6:
e4:db:bd:16:48:11:65:08:09:71:5f:72:56:e6:a6:
fc:22:07:af:f3:e7:64:9d:e5:5e:b1:8d:bf:7e:04:
93:39:18:09:e3:22:06:5c:91:fb:88:9a:45:ab:80:
8d:bd:15:28:b3:7a:33:61:29:d9:14:25:f3:04:8f:
90:d4:7d:9e:2f:95:f5:46:87:bc:9c:f7:94:4d:36:
d4:7f:bf:da:0e:7a:a2:8c:9e:24:9d:fe:61:03:f5:
85:cf:09:80:df:ff:e9:79:14:08:bf:0a:77:d3:20:
ef:b5:81:cd:fc:06:92:f3:f9:8e:27:28:b2:8b:cc:
3a:df:1f:9b:cb:93:e5:7c:a1:3e:a1:07:10:25:30:
40:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:DE:08:AE:D6:57:06:5F:ED:1F:B0:A6:38:7C:0E:CC:F9:2C:DC:10
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d1:df:3a:00:e3:9d:6e:93:55:1e:f2:a5:36:5c:ea:1b:5c:
0f:de:3f:b7:b6:6d:4c:a4:91:8a:06:f2:dd:27:8d:67:a4:68:
b6:23:ae:d4:df:c6:49:20:dd:54:24:f6:45:e7:26:78:e9:a3:
d9:79:52:cd:3b:77:ef:69:2e:d7:af:e4:61:54:83:dc:c3:29:
88:df:db:5a:41:4f:01:bb:e5:9d:88:ec:c5:27:64:46:06:d2:
10:39:4b:73:40:85:3b:1b:56:a0:cf:b6:34:5a:d1:cc:3a:f6:
72:ca:74:39:97:13:f2:eb:5a:19:7b:a9:e7:41:a7:9d:f0:f8:
77:fa:bc:43:93:e2:8d:9d:d7:de:dc:61:83:20:12:96:20:8c:
fa:f2:b2:36:a3:b8:0d:6b:94:c3:6a:8b:5d:e2:12:9d:4a:da:
4a:e1:7e:14:1c:87:ca:6b:77:1b:14:09:7f:98:4b:58:a4:cc:
cb:74:a5:ca:16:79:c4:5d:03:c5:63:7a:06:c8:8d:a1:07:97:
9d:fd:6f:3e:04:dd:6b:2d:6d:92:bf:b3:54:cc:c4:71:c4:20:
71:a6:a3:e6:d6:f5:b8:3c:e4:c2:e4:09:97:06:28:7e:5f:d3:
11:9a:4a:56:95:ec:8b:32:e8:79:c0:91:6b:6e:e1:6a:10:97:
3d:a7:25:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:34:53 2026 by rpki-client