Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: 9LYA4NfFna0Ca11IMn5sPZJMpcJvSj99hKgv/p+drwM=
Subject key identifier: 30:BE:AA:05:13:85:53:47:DB:FE:7A:51:6B:2C:C8:93:FF:DC:5D:B1
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 01A0DB04753CF9252BD73D05792EF6C74CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 00:01:37 +0000
Manifest this update: Sat 26 Sep 2026 00:01:37 +0000
Manifest next update: Sun 27 Sep 2026 00:01:37 +0000
Files and hashes: 1: 4C5txelxptdoicijUbZlUymO1KI.roa (hash: n5OUnYu6DQ52eh4gaqVWM1OYGrwmKHVhRB5oPVeomXo=)
2: 8ood-uHTXVuPr-Uhci0MBhQD_Ok.roa (hash: D9cQAbFXlUASgQDnCIvuvRErkHMl72I/fsdMBXIjpGU=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: angYTmA9bos03HOaPvgtUPtf6sFd3S+FMR3cPqvFItA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:75:3c:f9:25:2b:d7:3d:05:79:2e:f6:c7:4c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Sep 26 00:01:37 2026 GMT
Not After : Sep 27 00:01:37 2026 GMT
Subject: CN=30beaa0513855347dbfe7a516b2cc893ffdc5db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:f7:a6:fb:6b:87:41:86:93:b4:3d:80:ba:
63:5e:8d:9b:15:93:a3:37:f7:f0:95:ae:57:5e:e6:
6a:d4:e1:0c:95:0e:c9:17:e3:45:76:7f:f2:d8:bb:
65:3f:59:bc:d8:03:dd:0b:f3:3d:32:6c:03:b0:35:
bb:e6:3f:f1:88:bc:d4:f4:12:e5:a7:4e:35:f9:9a:
b3:47:86:6c:1d:7f:b3:2e:6c:69:f5:bb:ab:6c:65:
65:13:e8:01:6f:9b:0f:fe:0b:63:05:bc:8c:aa:35:
b1:c7:51:12:2e:26:66:f9:7f:03:bc:d2:93:0c:d4:
c2:e8:24:de:4c:23:26:31:79:72:49:34:6f:15:63:
46:e6:aa:10:97:20:8c:7e:9e:d9:aa:84:bd:b4:61:
4c:c7:12:e2:96:bb:0e:2c:d2:57:07:15:65:3e:92:
80:04:39:60:6c:66:c9:58:da:25:f9:ee:79:86:e9:
db:b7:7e:75:bc:2e:ff:f9:f4:f9:73:a7:cc:07:cd:
68:b3:c6:7d:35:5e:25:0c:d7:84:53:fc:7b:9d:e8:
db:03:a1:8c:20:13:5b:89:4a:74:e1:c5:c9:c4:38:
b5:76:b9:c7:67:b7:9c:7b:0d:58:f1:f6:dc:8a:ed:
dd:e0:ef:ce:5f:71:f1:f7:51:99:17:54:bd:9f:80:
a7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:BE:AA:05:13:85:53:47:DB:FE:7A:51:6B:2C:C8:93:FF:DC:5D:B1
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0a:49:22:28:9c:63:20:a5:37:34:cd:dc:36:92:f5:06:47:
15:3d:3f:63:37:8a:45:59:8f:75:53:a0:29:d9:cb:c8:0d:9f:
08:72:24:6a:a4:3e:35:f6:16:ae:73:14:22:af:6c:4d:18:42:
3c:cf:b7:24:4a:32:6a:ea:98:e9:2d:33:07:44:82:63:4c:c5:
87:fc:c4:07:8e:8e:1b:0c:ec:3e:e3:59:05:43:5c:e7:5e:43:
c0:39:ee:b5:4a:76:52:60:cc:3f:e0:b1:ca:ad:e0:6d:20:40:
07:a3:3d:b0:87:f2:ce:5b:2e:3b:91:f8:4f:91:ff:ce:69:61:
2b:8c:1b:57:33:fb:68:1a:f1:f5:a3:3e:2e:b7:c7:3b:c1:a6:
da:4e:5e:06:31:c0:96:17:f9:ea:55:2f:4e:85:36:53:99:77:
ec:c1:71:7f:51:73:0b:6e:ba:26:87:d5:08:25:7a:a0:72:07:
db:c7:ca:5a:7f:26:12:da:c7:48:f6:4f:64:9e:bd:91:c6:43:
c4:54:35:8e:3f:9e:5c:a3:e2:97:22:56:73:12:53:dd:7b:e8:
7c:2f:a4:81:5c:83:db:b9:14:b0:b4:f2:17:41:80:51:7a:76:
18:b2:b9:7e:bf:75:7c:ba:9d:67:57:a2:af:c6:fb:d7:dd:83:
07:9c:da:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:19:48 2026 by rpki-client