Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: ajeEqv46O0rgj2HDU9St4mz87PSlV/Aasbqiv4p1iUQ=
Subject key identifier: 3C:12:07:92:BB:DB:53:B6:BF:CA:A5:BF:78:79:77:F3:0E:C5:AE:E0
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 019FAD88AB6A658A141AD72F2B72AFD0537C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 19D7
Signing time: Wed 29 Jul 2026 11:00:42 +0000
Manifest this update: Wed 29 Jul 2026 11:00:42 +0000
Manifest next update: Thu 30 Jul 2026 11:00:42 +0000
Files and hashes: 1: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: 26tdBmgYBZK3PuWjlRxKRHuSgJvs7i46Vg8BzzJYJIY=)
2: du4Uc1Tw1A4vtFUr5_RZZE4mr9c.roa (hash: VHvvL6d/GOaFCBnvC8MIBYdWi2shlhJJCY1UWI68tyA=)
3: u3hZ4Wo-VF-Q5oSlFkaUlkQvEKA.roa (hash: U2nT3r9q5huh0VOndjllE1MWO9Yu+mYw1a5lsTdkP+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:88:ab:6a:65:8a:14:1a:d7:2f:2b:72:af:d0:53:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Jul 29 11:00:42 2026 GMT
Not After : Jul 30 11:00:42 2026 GMT
Subject: CN=3c120792bbdb53b6bfcaa5bf787977f30ec5aee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8e:df:99:3f:c7:fa:63:8d:72:c3:1c:80:2a:
da:06:03:ff:41:65:2c:e4:a6:fc:ee:31:ba:b3:03:
37:eb:a0:4b:0a:c3:6d:a4:a8:e6:e5:d7:13:98:2e:
ab:a5:75:ef:24:32:07:6d:58:60:51:c6:63:a5:63:
de:42:37:f7:41:28:f1:5e:a7:67:13:9a:1a:cd:2f:
b2:c9:55:9e:e8:db:bf:e0:16:8e:95:a5:d7:8c:85:
a2:07:ca:37:a5:c1:45:f8:b4:39:60:fd:35:f7:68:
6f:6d:38:df:00:6f:ea:ee:6c:38:1a:ba:6a:de:74:
fe:7f:5d:a3:0a:0e:ea:82:70:eb:9a:fc:13:9f:28:
b4:ef:c1:11:22:8d:99:38:3e:8c:c5:cf:1d:03:86:
a3:3b:fd:0e:21:b0:91:31:58:9c:d8:78:f8:4f:38:
97:db:f3:b0:15:7a:4c:0b:6e:48:76:da:d6:bf:e9:
61:26:e0:8f:cc:96:33:19:b6:3c:6f:31:8a:c4:14:
49:79:b5:08:00:9a:f8:b2:e2:2a:a2:89:48:47:3f:
54:c6:0e:d3:86:8f:f8:07:4b:ff:96:46:f1:3e:94:
91:36:64:47:5c:d2:a5:82:60:83:08:de:de:bb:00:
d5:6d:0e:9d:17:ab:92:75:23:e1:d0:6e:f0:75:ff:
f3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:12:07:92:BB:DB:53:B6:BF:CA:A5:BF:78:79:77:F3:0E:C5:AE:E0
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:8f:9d:15:ac:47:61:31:61:28:7c:27:92:03:ce:c5:ec:33:
42:26:d8:59:d0:f1:c6:79:40:7d:34:9d:2b:85:09:6b:f8:5f:
be:ae:75:06:e6:e6:2a:c9:94:51:43:38:65:2d:ed:11:0b:b8:
ee:8f:f8:bb:17:f7:96:96:1a:f2:ce:90:5f:78:df:d0:aa:88:
89:38:ad:eb:53:88:d3:b4:32:84:8a:fe:52:ea:55:b2:b9:8f:
43:aa:15:70:f4:a2:ea:4d:bc:28:7b:1a:69:27:b6:76:81:6b:
9d:8d:d7:21:eb:e9:d4:5a:7e:6a:85:11:fe:22:9d:1b:1c:6f:
c1:de:f0:4e:47:4c:93:bf:5c:f3:71:01:0c:1e:c1:cb:56:46:
80:f0:99:bb:cd:af:6b:ea:8a:8b:a5:9b:78:a4:11:25:5e:3f:
a8:36:cf:10:da:96:dd:2f:81:04:47:1c:25:a9:5f:0a:07:c6:
9a:78:7d:c0:90:94:fe:7b:2e:8c:3e:de:1c:e0:b0:67:68:3d:
e7:b6:52:04:e5:ae:4d:53:c9:70:b2:b4:c1:2b:a8:25:e9:cb:
7f:0f:6f:9b:31:74:bb:9c:59:53:17:31:b1:a1:b6:22:66:c2:
51:d7:60:54:a7:ad:29:7a:f0:9d:6a:0c:b9:63:87:43:7d:c2:
dd:b8:ee:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tiKtqZYoUGtcvK3Kv0FN8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NWE5MmI3NzhlZGRmYThkY2Q5MTdjYmI4N2NkZTMxYmEy
YzczMmYwHhcNMjYwNzI5MTEwMDQyWhcNMjYwNzMwMTEwMDQyWjAzMTEwLwYDVQQD
EygzYzEyMDc5MmJiZGI1M2I2YmZjYWE1YmY3ODc5NzdmMzBlYzVhZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI7fmT/H+mONcsMcgCraBgP/QWUs
5Kb87jG6swM366BLCsNtpKjm5dcTmC6rpXXvJDIHbVhgUcZjpWPeQjf3QSjxXqdn
E5oazS+yyVWe6Nu/4BaOlaXXjIWiB8o3pcFF+LQ5YP0192hvbTjfAG/q7mw4Grpq
3nT+f12jCg7qgnDrmvwTnyi078ERIo2ZOD6Mxc8dA4ajO/0OIbCRMVic2Hj4TziX
2/OwFXpMC25IdtrWv+lhJuCPzJYzGbY8bzGKxBRJebUIAJr4suIqoolIRz9Uxg7T
ho/4B0v/lkbxPpSRNmRHXNKlgmCDCN7euwDVbQ6dF6uSdSPh0G7wdf/zYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwSB5K721O2v8qlv3h5d/MOxa7gMB8GA1UdIwQY
MBaAFClakrd47d+o3NkXy7h83jG6LHMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUt
ZGNkYzVjZWUyNzZmLzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUtZGNkYzVjZWUyNzZm
LzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqY+dFaxH
YTFhKHwnkgPOxewzQibYWdDxxnlAfTSdK4UJa/hfvq51BubmKsmUUUM4ZS3tEQu4
7o/4uxf3lpYa8s6QX3jf0KqIiTit61OI07QyhIr+UupVsrmPQ6oVcPSi6k28KHsa
aSe2doFrnY3XIevp1Fp+aoUR/iKdGxxvwd7wTkdMk79c83EBDB7By1ZGgPCZu82v
a+qKi6WbeKQRJV4/qDbPENqW3S+BBEccJalfCgfGmnh9wJCU/nsujD7eHOCwZ2g9
57ZSBOWuTVPJcLK0wSuoJenLfw9vmzF0u5xZUxcxsaG2ImbCUddgVKetKXrwnWoM
uWOHQ33C3bjugQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:09:00 2026 by rpki-client