Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: YFyWqxg1NJg+YMje9miJKRwqqmo+ZYbtSJH5s/AYjB8=
Subject key identifier: 0E:00:29:57:91:D2:E6:FE:E4:78:F9:BE:9A:84:22:AA:30:9E:9C:6F
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 019CA94643515F7DD5438D42AA1663A8362C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 12:01:19 +0000
Manifest this update: Sun 01 Mar 2026 12:01:19 +0000
Manifest next update: Mon 02 Mar 2026 12:01:19 +0000
Files and hashes: 1: 4C5txelxptdoicijUbZlUymO1KI.roa (hash: n5OUnYu6DQ52eh4gaqVWM1OYGrwmKHVhRB5oPVeomXo=)
2: 8ood-uHTXVuPr-Uhci0MBhQD_Ok.roa (hash: D9cQAbFXlUASgQDnCIvuvRErkHMl72I/fsdMBXIjpGU=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: GwF+hpdzenpehznDfqsnMenDx4qWUhOpUzP0O1wyi88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:43:51:5f:7d:d5:43:8d:42:aa:16:63:a8:36:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Mar 1 12:01:19 2026 GMT
Not After : Mar 2 12:01:19 2026 GMT
Subject: CN=0e00295791d2e6fee478f9be9a8422aa309e9c6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d4:27:85:68:48:1a:17:5e:18:4f:34:ca:d6:
40:03:ff:c7:54:56:e6:44:4a:a6:ed:8e:9e:4b:e8:
54:61:25:a2:cf:82:5b:52:db:47:07:37:da:18:ac:
00:72:f5:d9:8f:55:14:f9:31:10:f3:9e:3f:2c:76:
dd:e1:dd:aa:8d:f6:43:d4:cf:8f:78:a9:ea:8e:ca:
b5:32:30:ed:d3:23:ae:8a:b8:21:86:46:5c:e7:ce:
7f:16:50:d7:8f:08:4c:4f:22:72:0d:d5:7b:0d:5b:
cd:d0:8e:cc:d5:c2:9e:e8:19:c6:32:a2:f4:ea:8d:
9f:cb:ea:25:aa:c1:a3:f0:f4:d8:58:d3:5c:80:ed:
21:f9:8a:67:00:90:28:66:79:dc:7d:15:f7:bf:27:
c6:87:b6:aa:51:34:32:9f:64:d2:8b:1a:27:1f:83:
b1:80:e2:fe:2a:dd:0c:e4:9f:12:26:64:3e:9b:12:
07:3b:bd:24:27:67:85:ce:73:aa:b8:32:c1:b4:c8:
8e:85:f6:15:a3:bf:c0:27:86:19:9b:c9:78:86:e0:
86:05:00:bf:00:15:0c:a0:27:6c:91:a8:4e:b3:f7:
65:31:00:e9:0a:e6:e1:1b:b4:9d:96:ec:d0:e8:a2:
3a:9b:50:c6:d9:da:22:09:92:7f:0d:89:ad:ad:e2:
ce:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:00:29:57:91:D2:E6:FE:E4:78:F9:BE:9A:84:22:AA:30:9E:9C:6F
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ea:1f:33:0a:14:8d:fb:69:e0:a9:fa:92:67:6e:10:15:1d:
5b:ff:74:4c:07:6e:90:f6:c7:24:a0:19:c6:a7:da:2b:c1:85:
b7:7c:bf:f6:37:f2:c0:94:a8:e3:3d:95:a8:df:ad:a9:47:a8:
ec:e3:99:ab:43:63:30:94:8d:b7:1c:b0:ff:42:52:85:ce:f0:
a7:94:15:fe:67:7c:df:f8:b2:37:af:79:7e:20:58:74:c3:aa:
fd:25:e0:32:1e:f0:ae:7e:6b:35:2e:0e:d1:56:0c:94:4a:b7:
f4:02:af:37:6b:44:74:53:64:66:46:a4:2a:9a:9d:e2:31:f6:
a8:1e:74:74:0e:be:23:2c:a2:4e:80:18:b7:dd:75:43:f4:67:
9a:4f:ba:e7:40:95:fd:2b:52:cb:a9:4c:8f:8a:ca:d4:12:72:
59:c5:f6:d5:ac:f9:64:2b:23:fb:45:35:d7:dc:50:db:12:6a:
a8:ae:75:a7:9e:f8:ba:fb:d7:a6:18:0e:e6:4e:b4:61:46:e2:
6e:2d:c0:c5:f2:22:8e:fa:12:2d:d1:f0:e0:92:e7:c3:2b:27:
09:1e:aa:c3:1f:93:4f:a4:6e:83:b5:0f:ce:cb:96:01:b8:c9:
cb:75:76:c8:a7:8a:83:c3:3d:2f:a7:d1:e0:a8:31:de:31:cc:
d7:8f:29:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:53 2026 by rpki-client