Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: 4+Dbs8nj9WUzPSjJFBiJj/QprL5aMwJ0OBrtPoGLt4A=
Subject key identifier: 6B:9A:87:8B:89:CA:DF:EC:AE:3F:80:0F:70:0E:E0:82:F4:85:D5:CB
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 019D98BD6C8C0391815F6A59188C6D4033E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 00:00:44 +0000
Manifest this update: Fri 17 Apr 2026 00:00:44 +0000
Manifest next update: Sat 18 Apr 2026 00:00:44 +0000
Files and hashes: 1: 4C5txelxptdoicijUbZlUymO1KI.roa (hash: n5OUnYu6DQ52eh4gaqVWM1OYGrwmKHVhRB5oPVeomXo=)
2: 8ood-uHTXVuPr-Uhci0MBhQD_Ok.roa (hash: D9cQAbFXlUASgQDnCIvuvRErkHMl72I/fsdMBXIjpGU=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: VUdZrtycfxSydlOABvlrwfDxMKQPLjETPn5FL49hrh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:6c:8c:03:91:81:5f:6a:59:18:8c:6d:40:33:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Apr 17 00:00:44 2026 GMT
Not After : Apr 18 00:00:44 2026 GMT
Subject: CN=6b9a878b89cadfecae3f800f700ee082f485d5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0b:86:2a:c4:3f:8b:5b:7d:4b:44:02:ba:7f:
fa:71:26:86:89:8e:51:47:dd:6c:c9:a0:e6:b3:63:
7f:3c:d6:79:11:b6:22:5c:ae:45:d6:8a:68:7f:46:
0f:9d:47:db:39:e6:15:21:8d:cd:39:bf:ce:1c:99:
4f:1d:d1:64:8f:da:ac:28:5c:b1:f5:25:67:5b:3a:
e0:0d:47:31:e7:91:f1:26:4b:66:d4:67:d2:2d:06:
7f:a6:5a:f2:d9:8b:a6:28:9a:82:dd:e8:0e:4e:8b:
73:dd:4e:2c:fa:5a:89:cc:4e:47:af:d0:d7:55:88:
63:ed:8c:43:85:38:c2:50:e0:f1:56:e6:ee:9c:16:
b2:08:09:be:ca:a4:3d:7f:2f:10:82:95:b0:e7:82:
14:14:73:5c:3e:c9:ef:bb:06:1e:f6:1a:c8:d7:7b:
6b:2d:fa:fc:f9:9a:2c:fa:55:2d:fe:9a:2e:7e:fb:
ef:11:27:ce:cd:75:ee:8b:61:15:f4:a8:74:be:37:
4c:4e:e4:4d:d2:17:01:a8:ac:e2:0b:d9:84:44:8c:
0c:ed:3f:8b:21:ff:6f:42:8d:94:0c:0b:eb:36:4a:
24:9b:38:7c:cc:13:43:e5:25:51:c4:e8:fe:ca:8e:
17:ee:2d:1f:c5:42:56:f2:54:50:e4:0c:49:89:69:
c1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:9A:87:8B:89:CA:DF:EC:AE:3F:80:0F:70:0E:E0:82:F4:85:D5:CB
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:dc:58:be:8c:ec:f5:75:f4:56:51:5b:61:97:62:26:09:07:
53:5b:9f:ff:96:80:35:45:be:d9:dd:7c:c5:5d:79:b9:8b:51:
03:0e:cf:f2:bf:e3:14:94:43:d3:8d:31:c9:2f:38:74:3d:42:
71:9a:86:fe:26:09:6d:26:68:4a:6a:2b:02:2f:a1:48:94:72:
55:93:8e:ea:2a:f1:d4:ab:d3:60:8d:4b:03:b9:9e:00:aa:90:
e8:83:1c:2f:da:a7:1c:59:3f:a5:12:ca:11:a9:1e:0e:9a:13:
ff:71:6b:5b:d0:cf:ea:c8:15:f5:99:8d:06:69:8b:3f:3b:00:
bd:32:b5:c4:8a:98:6f:7c:b8:6d:56:bd:78:40:50:29:b1:66:
a7:09:95:1d:f6:e5:d6:48:a8:8e:a9:7e:c7:10:06:26:1d:95:
6d:2c:4b:12:af:36:b7:7b:98:2d:de:8e:f0:6b:1b:21:c2:e0:
01:ed:92:0a:a4:72:dd:ed:e0:62:4f:11:a2:69:00:6e:41:e7:
50:68:0b:e8:19:db:85:0f:71:96:a8:df:21:7c:17:bf:5e:2e:
02:14:4a:e7:30:58:df:1e:a0:76:c3:da:44:b9:34:3b:88:ba:
e4:50:6e:85:81:04:25:52:a1:8f:f4:a5:0b:46:85:5c:4b:db:
aa:bb:f2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:09:28 2026 by rpki-client