Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/900aec-82be-4250-b5ff-972f0d06fe15/1/KVLgXqYJM8R-1SPlZ-4abH3_n8I.mft
File: KVLgXqYJM8R-1SPlZ-4abH3_n8I.mft (raw, json)
Hash identifier: pZhCZjO3u4/8iZSbZCy00XgfnmYm7960fK9Emuod0cE=
Subject key identifier: B0:0A:35:C8:5C:39:10:4F:CE:D0:F8:52:60:08:8C:8A:27:2F:B5:47
Authority key identifier: 29:52:E0:5E:A6:09:33:C4:7E:D5:23:E5:67:EE:1A:6C:7D:FF:9F:C2
Certificate issuer: /CN=2952e05ea60933c47ed523e567ee1a6c7dff9fc2
Certificate serial: 01A0F0E81BB193A47CD1369742D7DF214D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVLgXqYJM8R-1SPlZ-4abH3_n8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/900aec-82be-4250-b5ff-972f0d06fe15/1/KVLgXqYJM8R-1SPlZ-4abH3_n8I.mft
Manifest number: 3F
Signing time: Wed 30 Sep 2026 06:02:18 +0000
Manifest this update: Wed 30 Sep 2026 06:02:18 +0000
Manifest next update: Thu 01 Oct 2026 06:02:18 +0000
Files and hashes: 1: KVLgXqYJM8R-1SPlZ-4abH3_n8I.crl (hash: kzu9DkhBLICOBzL68XpgHA1rqBnRArqM+qDVA6dOlpU=)
2: xnPtBprlW7ByFkk94boZ3ieoZYw.roa (hash: cG2BXmdDk03+etJMnp2WURUvWfVQuYGe2WLtJJwW8Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/900aec-82be-4250-b5ff-972f0d06fe15/1/KVLgXqYJM8R-1SPlZ-4abH3_n8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/900aec-82be-4250-b5ff-972f0d06fe15/1/KVLgXqYJM8R-1SPlZ-4abH3_n8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVLgXqYJM8R-1SPlZ-4abH3_n8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e8:1b:b1:93:a4:7c:d1:36:97:42:d7:df:21:4d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2952e05ea60933c47ed523e567ee1a6c7dff9fc2
Validity
Not Before: Sep 30 06:02:18 2026 GMT
Not After : Oct 1 06:02:18 2026 GMT
Subject: CN=b00a35c85c39104fced0f85260088c8a272fb547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:25:ca:b5:b8:eb:cb:59:ad:18:e7:74:4b:83:
69:7a:e7:40:67:71:42:40:b8:35:57:27:c0:87:8f:
dc:ba:0a:82:0a:ae:4b:b3:26:e4:ab:c4:12:3a:a2:
8a:21:d7:77:87:3a:e5:80:f9:5c:72:2d:ca:9e:d2:
4a:91:9d:b0:81:55:1b:cb:18:e2:5a:53:66:27:6a:
06:2f:5a:96:0b:8e:b5:ec:1d:99:e5:4d:3b:17:25:
72:a1:97:bc:2e:dd:d9:df:6c:22:69:eb:51:99:99:
b7:36:22:41:e6:e4:2d:a0:cf:1a:bf:2b:2f:8b:83:
68:4e:02:34:9f:8b:8a:07:f4:97:f1:2b:2d:26:ec:
7e:77:70:4f:de:d9:5e:dd:96:c1:47:5f:78:be:6f:
77:57:88:85:c6:79:17:4f:b3:8e:ff:eb:38:22:a0:
b5:ba:9f:a4:07:0b:bc:e9:6b:0b:44:02:bd:ec:a4:
68:5d:87:6b:d7:e9:61:f3:7f:f3:4d:fb:9e:fc:df:
c2:dc:b2:13:2d:83:a2:c3:43:05:9c:f3:fa:9a:c7:
39:d2:2d:9c:db:f5:43:d9:60:80:c5:d0:b0:bc:d0:
a4:ad:da:a5:fa:7c:26:a6:51:01:d9:9d:03:33:03:
b5:5f:31:93:8e:62:ba:6d:46:38:40:a7:5a:f1:69:
02:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0A:35:C8:5C:39:10:4F:CE:D0:F8:52:60:08:8C:8A:27:2F:B5:47
X509v3 Authority Key Identifier:
keyid:29:52:E0:5E:A6:09:33:C4:7E:D5:23:E5:67:EE:1A:6C:7D:FF:9F:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVLgXqYJM8R-1SPlZ-4abH3_n8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/900aec-82be-4250-b5ff-972f0d06fe15/1/KVLgXqYJM8R-1SPlZ-4abH3_n8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/900aec-82be-4250-b5ff-972f0d06fe15/1/KVLgXqYJM8R-1SPlZ-4abH3_n8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d0:c1:0d:bd:f8:3a:77:1e:46:25:77:38:8c:f0:81:57:47:
ba:bf:6f:21:bb:b7:87:ce:39:c0:bd:f9:c8:fc:e9:b9:dd:f3:
79:e2:13:c8:fc:8a:1f:8d:67:1b:e9:02:02:f6:a0:92:67:05:
6d:48:32:5b:97:3f:03:dc:4f:5a:63:75:26:41:b0:6f:e9:76:
79:98:32:8e:1e:f2:3d:83:6d:1a:54:8f:da:33:72:fe:88:76:
63:cc:77:75:df:ad:fa:41:5f:e1:d8:48:4f:3c:a8:60:93:48:
09:23:7b:cc:94:3c:2d:3b:e4:f5:f3:9b:57:36:e6:75:d2:68:
e9:29:dc:c8:59:c4:ae:eb:a6:ed:3b:8a:06:bf:d7:b3:cc:e6:
29:bf:6a:ec:db:fb:89:a1:66:93:2e:f0:c4:bb:d8:08:5b:93:
44:1f:9b:eb:03:fa:10:a2:da:ce:05:38:30:ec:3c:9d:b3:03:
b7:d1:8c:8a:95:3e:42:9c:34:8c:60:71:b8:b9:46:4f:14:11:
de:d9:44:1d:9c:5b:ad:3b:50:f6:3d:f8:7c:c1:34:63:a2:45:
f5:4a:7f:7e:4f:d8:eb:44:13:37:78:b9:69:71:7d:1c:a4:76:
93:e0:0f:17:ae:0e:04:2c:98:26:09:61:0e:3a:53:97:84:59:
64:85:56:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 11:30:53 2026 by rpki-client