Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: 9JHVo5aOBJFi1HEHPM5HkOLo/rlirkFpDr33+4j1NOk=
Subject key identifier: 29:D4:A6:6F:D7:1C:EA:8C:C2:EB:CC:8E:F6:31:F8:B6:B7:91:6E:95
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 019EC2248936E1EE41181E631661AEF3EDB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 18:00:34 +0000
Manifest this update: Sat 13 Jun 2026 18:00:34 +0000
Manifest next update: Sun 14 Jun 2026 18:00:34 +0000
Files and hashes: 1: 4C5txelxptdoicijUbZlUymO1KI.roa (hash: n5OUnYu6DQ52eh4gaqVWM1OYGrwmKHVhRB5oPVeomXo=)
2: 8ood-uHTXVuPr-Uhci0MBhQD_Ok.roa (hash: D9cQAbFXlUASgQDnCIvuvRErkHMl72I/fsdMBXIjpGU=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: vd76isjRX+kE2APHeUpt5xhs4aGfHVrasNjWUUaOYh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:89:36:e1:ee:41:18:1e:63:16:61:ae:f3:ed:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Jun 13 18:00:34 2026 GMT
Not After : Jun 14 18:00:34 2026 GMT
Subject: CN=29d4a66fd71cea8cc2ebcc8ef631f8b6b7916e95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:5a:8d:fd:a3:7c:9c:df:8a:a4:92:03:8a:
c5:82:9d:73:6a:72:e8:46:d9:5a:2e:09:ac:73:33:
3e:e9:e5:70:06:96:97:74:e3:7b:2a:d4:85:99:c3:
d1:90:71:d7:e3:1b:6e:cb:08:72:f4:ff:39:75:1d:
56:54:33:43:41:18:6f:b8:65:8b:5a:01:bc:34:47:
a3:16:57:6e:b6:4e:90:de:7b:ee:7f:f8:c9:82:c6:
59:b4:41:9f:09:83:3d:43:fe:11:b9:8a:aa:fb:f0:
f0:37:12:35:b3:23:4b:e0:f4:72:7a:98:6c:56:d2:
d6:7c:d8:51:63:f5:ec:94:06:18:1d:b2:4c:ef:f7:
26:54:4c:7c:cf:19:77:32:be:90:c5:c1:5b:47:54:
21:2b:33:2d:a6:82:f2:99:b8:e0:ca:f7:30:bb:66:
3b:8c:4e:10:e2:6c:44:ae:0c:62:62:8f:2f:f8:9a:
0c:68:ee:28:58:8c:5c:c7:9f:69:fc:96:71:2a:3c:
3d:99:fe:99:4c:9c:c9:da:d7:46:14:8a:e0:d4:a6:
1a:cb:54:c4:d7:4e:6f:b5:aa:fa:92:87:d3:90:b6:
c0:fa:a2:72:55:da:e4:00:b6:71:92:d4:b2:bd:67:
ec:9a:38:c0:d4:18:a2:4d:6c:1c:e0:9e:78:03:5d:
4d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D4:A6:6F:D7:1C:EA:8C:C2:EB:CC:8E:F6:31:F8:B6:B7:91:6E:95
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3f:b7:1f:8a:18:c8:62:63:76:8b:97:50:74:db:0c:d1:0b:
af:ad:9c:f7:88:18:b5:8c:a4:55:cf:b9:33:1e:df:34:2a:85:
f7:91:ef:88:4a:ab:50:a4:e8:4e:af:54:0c:cc:46:69:75:73:
12:9d:65:b6:f8:41:98:9c:70:09:95:bd:1c:2a:03:73:03:a7:
05:62:55:9d:ae:a6:27:36:8b:53:ed:cf:2b:ee:30:00:81:49:
65:22:11:2e:9d:66:9f:d4:0f:93:0a:97:1a:4e:3f:2b:6f:ff:
c9:06:bb:de:f9:29:20:72:f5:31:ca:78:2a:66:27:aa:3c:ee:
07:e0:84:0b:27:74:73:cf:30:8a:a6:5a:45:2f:8e:73:99:4c:
c5:f9:6d:7d:48:a4:c3:a1:04:c8:fb:ba:db:29:59:7f:3f:ed:
6d:2a:be:5c:8d:0c:61:5c:97:49:af:76:cb:b2:35:46:e3:b9:
ba:44:cf:93:cd:1b:95:d8:75:ce:ad:30:04:f6:eb:88:0d:ad:
df:d6:fe:e6:58:ef:42:a5:af:6b:4d:be:74:42:5b:e9:32:dd:
cc:4c:32:21:ad:18:65:d1:eb:3c:6a:94:bd:95:58:1e:6c:94:
fd:88:f5:e3:4e:fc:dd:2e:ed:76:35:91:56:d3:aa:93:4e:12:
3b:4e:4b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:08:36 2026 by rpki-client