Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: JBTRd26BtPYoKHqqC3uW4fDrZYm8V+JeBN9gktC+79E=
Subject key identifier: 33:52:D0:4B:7C:E0:5E:6E:64:54:C4:13:A3:D6:68:0B:81:80:D3:D7
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 019FABD18FC6E9BD0BB09F594E295156C61D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 03:01:05 +0000
Manifest this update: Wed 29 Jul 2026 03:01:05 +0000
Manifest next update: Thu 30 Jul 2026 03:01:05 +0000
Files and hashes: 1: 4C5txelxptdoicijUbZlUymO1KI.roa (hash: n5OUnYu6DQ52eh4gaqVWM1OYGrwmKHVhRB5oPVeomXo=)
2: 8ood-uHTXVuPr-Uhci0MBhQD_Ok.roa (hash: D9cQAbFXlUASgQDnCIvuvRErkHMl72I/fsdMBXIjpGU=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: JMp/yNUfQ7BjW2V4rcmURdn8UTbK7PepWB3Isy2EvYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:8f:c6:e9:bd:0b:b0:9f:59:4e:29:51:56:c6:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Jul 29 03:01:05 2026 GMT
Not After : Jul 30 03:01:05 2026 GMT
Subject: CN=3352d04b7ce05e6e6454c413a3d6680b8180d3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:e0:a9:ae:cc:57:07:8d:1b:1e:10:72:a2:
38:56:01:e6:02:2b:12:77:6f:0b:60:01:ab:05:b6:
e9:4a:7a:ed:ef:eb:db:4d:54:68:a7:5b:83:10:0c:
94:00:8f:37:1d:6b:54:49:0b:58:81:bd:8c:db:10:
64:64:db:77:2b:79:22:a4:f9:18:df:9b:7a:a4:c5:
b5:f0:33:d6:49:db:60:09:d5:c1:33:65:f2:87:1c:
2f:e5:50:b3:bb:87:96:02:6e:d6:61:01:b3:f4:59:
c4:bc:05:b9:a0:01:4a:10:d5:b8:d2:69:af:74:b0:
9d:06:42:04:e5:8e:aa:4d:68:11:ec:6a:c1:4b:d6:
45:7e:0d:ca:b5:60:07:fe:9c:b9:36:ee:c3:36:71:
34:ba:34:f6:b8:79:10:09:2a:b0:9e:90:74:cf:bc:
97:6a:59:2c:38:7e:85:dd:e9:98:05:68:c3:30:08:
07:26:29:69:3f:3d:3f:78:a4:89:30:54:7a:8a:e4:
62:49:bd:2d:10:f0:28:b1:38:2d:0a:37:80:3f:ae:
94:68:d7:ad:55:f1:82:38:25:b8:75:cf:88:28:e2:
fc:b9:2e:24:94:61:ab:dc:99:3b:d4:d6:0b:95:fc:
1c:60:64:ad:43:f3:fe:ff:8b:ce:0c:a1:ad:53:ba:
6a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:52:D0:4B:7C:E0:5E:6E:64:54:C4:13:A3:D6:68:0B:81:80:D3:D7
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:45:e0:86:e1:69:65:25:91:61:ec:08:ce:f3:1b:ba:75:f6:
57:4c:1e:88:47:fd:36:08:b1:4c:e1:08:bc:74:2b:7a:37:a9:
df:da:fc:6d:eb:55:a0:7f:68:45:bc:ac:06:36:4a:cc:75:37:
57:d6:b3:94:6a:1c:9f:af:a0:92:1c:0f:ee:6a:52:50:e3:4a:
0d:8c:66:18:35:94:9b:76:0a:a2:c4:b7:95:24:03:98:ee:db:
82:79:70:5e:5e:85:79:34:e4:9b:4f:d7:fa:9d:04:b5:3e:f9:
85:6e:ff:96:9b:21:b2:51:6a:ff:6e:83:e5:73:ad:f2:b4:4f:
ec:77:d4:64:d5:80:ad:45:17:1f:a4:e1:2a:07:6b:be:80:96:
d9:b9:d0:30:28:8d:94:4a:d3:62:4a:1d:c2:ba:c0:ec:d5:d9:
70:02:24:ac:dc:74:8d:28:01:54:57:de:08:fb:22:83:64:a2:
f7:d4:39:22:80:3c:7c:1b:66:f8:f7:5c:43:86:fd:91:a5:7e:
fd:f2:b0:9e:07:10:29:58:db:d5:1b:fe:74:0b:82:9a:17:04:
8d:3d:61:38:e4:d0:95:c5:0e:e9:05:d9:71:00:21:62:e8:3c:
a4:1f:85:ef:8e:a9:b1:07:e5:dd:90:7c:b8:cb:bf:62:fe:3b:
96:78:31:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:47:37 2026 by rpki-client