Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: JlY7a6SQ+pAXz42litKIW5Qt8/LeEnqa4x9VwcS1hK4=
Subject key identifier: 63:53:78:7C:7C:BC:5F:96:60:6F:DC:92:AA:65:DD:E3:7E:10:25:06
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 019CAB3471619C9598AFE3A86D3598DE1CF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:01:06 +0000
Manifest this update: Sun 01 Mar 2026 21:01:06 +0000
Manifest next update: Mon 02 Mar 2026 21:01:06 +0000
Files and hashes: 1: 4C5txelxptdoicijUbZlUymO1KI.roa (hash: n5OUnYu6DQ52eh4gaqVWM1OYGrwmKHVhRB5oPVeomXo=)
2: 8ood-uHTXVuPr-Uhci0MBhQD_Ok.roa (hash: D9cQAbFXlUASgQDnCIvuvRErkHMl72I/fsdMBXIjpGU=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: BgMsgfvOTFlY39kP3o6rAM6fHI2KmNaZLustzID8+Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:71:61:9c:95:98:af:e3:a8:6d:35:98:de:1c:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Mar 1 21:01:06 2026 GMT
Not After : Mar 2 21:01:06 2026 GMT
Subject: CN=6353787c7cbc5f96606fdc92aa65dde37e102506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:67:cb:91:db:09:0a:32:0b:4f:5a:d1:b7:d1:
4d:2c:97:0a:af:7c:d2:f3:d4:ac:a0:bf:08:de:7b:
9e:ba:ab:e0:ab:46:86:92:c9:3c:4b:20:0f:cd:f6:
79:79:ef:29:16:29:6b:6c:5a:71:5c:49:ec:99:82:
0d:5c:78:ce:d3:c7:28:68:7d:27:a9:f1:b4:1b:14:
3e:3b:98:80:d0:d5:8c:ed:54:89:0f:3d:08:da:2b:
3d:3e:15:9e:22:8c:22:0a:88:0b:95:34:56:30:1c:
af:cb:1c:5a:92:0b:25:d0:e0:10:eb:ea:3a:a0:fe:
d2:26:a8:e8:48:ca:76:af:4d:5c:d8:8d:28:c8:95:
ad:be:a4:d3:22:66:17:a8:91:4f:8e:12:f6:57:96:
44:b4:bf:bf:86:8e:b7:67:c0:42:62:98:e4:8f:b0:
32:4b:29:01:c7:e9:0f:47:e2:54:c4:de:b6:5a:46:
63:10:23:19:8b:25:26:d8:44:67:ab:5d:46:de:29:
cb:a5:0f:8e:d7:12:70:f8:2a:44:1a:e8:39:06:aa:
ac:65:18:bd:02:f0:0e:8a:7f:cd:3a:1a:40:17:41:
7b:9b:b0:90:ca:90:5c:5b:a2:dc:d9:cf:a0:be:0a:
e0:4f:1b:5e:00:8d:6f:ac:73:23:87:61:f6:57:e3:
29:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:53:78:7C:7C:BC:5F:96:60:6F:DC:92:AA:65:DD:E3:7E:10:25:06
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:93:6f:62:4f:8f:03:a4:de:8e:4d:62:51:a5:be:d0:f7:75:
27:70:c5:ef:f2:20:ff:c7:f3:5a:48:9a:1d:58:22:a3:e7:4c:
ec:e8:3d:2e:dc:1e:ca:fe:07:ca:e8:e0:e8:2a:59:a8:18:26:
e3:a8:5f:21:20:7f:9c:f8:f8:11:0c:e3:4e:7f:ea:01:21:12:
80:d5:a1:2f:9c:76:f0:9b:ad:86:47:84:a6:ad:7b:12:46:f4:
b9:bf:ca:db:bf:3a:01:fa:05:d6:5e:b6:7c:f7:b1:33:ab:a3:
5e:24:d1:3e:3e:f8:60:fd:03:65:4e:ba:8f:e5:a3:61:08:c9:
37:75:38:ea:72:f6:dd:11:5e:2d:66:92:43:a6:9f:b8:29:f4:
3e:0b:97:0d:68:ed:97:0b:c9:df:9c:48:32:62:41:16:3c:f2:
e6:39:06:32:d2:ce:89:97:e2:3f:5b:b0:2a:5a:e4:2e:55:f6:
f3:e9:73:e7:cb:57:52:a7:77:28:0b:8a:43:ca:9c:60:43:6d:
cb:4f:52:d0:84:6f:75:17:b9:cf:ba:fc:14:94:06:88:6f:89:
be:12:b8:a0:4a:95:00:c0:d1:18:43:2a:de:de:82:b2:a2:76:
ad:40:a2:9a:51:58:ef:17:24:34:f4:50:5e:89:fe:77:eb:a6:
51:58:d0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:27:01 2026 by rpki-client