Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: bWa//Wui9035FluSfTg/rQ6N54O7V9nNCPw0cRsytTE=
Subject key identifier: FC:EF:85:DD:03:AB:8C:37:FB:11:9D:F5:BD:FC:E8:12:36:29:4A:4F
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 01A0D5020769D702C57A40C22758F2D727DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 20:01:14 +0000
Manifest this update: Thu 24 Sep 2026 20:01:14 +0000
Manifest next update: Fri 25 Sep 2026 20:01:14 +0000
Files and hashes: 1: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: dIJMZH5ea+2BRjdK/sETeOX2tPGe5JaqC+c5LL2Rc7Y=)
2: du4Uc1Tw1A4vtFUr5_RZZE4mr9c.roa (hash: VHvvL6d/GOaFCBnvC8MIBYdWi2shlhJJCY1UWI68tyA=)
3: u3hZ4Wo-VF-Q5oSlFkaUlkQvEKA.roa (hash: U2nT3r9q5huh0VOndjllE1MWO9Yu+mYw1a5lsTdkP+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:07:69:d7:02:c5:7a:40:c2:27:58:f2:d7:27:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Sep 24 20:01:14 2026 GMT
Not After : Sep 25 20:01:14 2026 GMT
Subject: CN=fcef85dd03ab8c37fb119df5bdfce81236294a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f3:87:e5:5e:64:2e:4b:5b:28:0d:7c:92:da:
ba:9d:20:62:2d:d2:2b:d6:9a:51:9b:ef:b0:a7:a4:
1b:de:c2:c6:74:a7:72:c2:51:eb:30:f2:d9:e7:8c:
35:fc:9f:a9:12:cf:90:d9:64:6a:27:2e:7d:df:92:
5e:16:ac:48:dc:39:a3:0a:01:1d:e1:33:22:b5:1b:
51:23:3a:50:6b:8a:92:e7:33:01:93:4b:64:c2:83:
ee:d7:11:82:50:ae:51:74:05:10:69:1c:51:be:42:
f3:52:26:dc:f4:b3:5f:1c:55:e9:e9:ab:96:6c:34:
b4:6c:ad:57:35:d1:e2:6c:10:d3:da:f3:63:4d:a4:
2e:be:b4:1a:9e:38:20:f1:de:99:20:bf:c5:ce:fe:
91:2c:76:19:0f:6c:a5:db:20:d5:19:33:2a:a2:da:
22:21:40:4d:2f:39:8b:e1:8a:11:94:47:21:cf:7f:
2f:cf:1f:a8:31:1d:61:9d:e5:ea:da:42:34:ef:d0:
45:3e:24:7a:46:f1:a1:fd:02:0d:05:7c:bc:be:b7:
25:2f:8f:88:8f:e5:09:2f:41:3c:c3:4d:20:5e:dd:
cf:31:7e:8b:17:dd:b8:5a:64:ad:e8:40:98:cc:ee:
20:f8:40:bd:fd:4e:c7:5d:64:f9:bd:b8:48:fa:13:
8c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EF:85:DD:03:AB:8C:37:FB:11:9D:F5:BD:FC:E8:12:36:29:4A:4F
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a1:fa:36:37:93:95:3b:53:df:fd:64:97:55:f4:b3:14:8b:
5a:48:6c:e4:de:3d:30:fe:16:8d:34:fc:2b:da:f7:7d:0b:35:
56:cb:ce:dd:c2:74:a7:8b:1f:4d:5e:09:b4:66:6a:cc:94:65:
88:43:ea:c3:47:7b:ab:47:c0:2b:6e:4e:fe:33:00:cb:3f:56:
3c:89:84:d4:20:57:64:1b:67:c2:89:fd:94:61:c1:3b:51:d1:
9d:e3:d5:d3:7c:47:e6:f0:8a:f8:d9:34:ee:02:ff:89:aa:9a:
91:fe:a1:14:3b:7f:31:e8:ba:b9:8d:77:e3:fd:be:f8:2b:b5:
3b:7c:36:25:3e:9f:a9:8e:3d:3f:00:1a:0c:c1:41:b9:ce:e0:
36:1e:19:4b:09:f0:df:c7:01:e6:c5:0a:63:9d:2b:ce:85:0f:
36:93:55:7b:54:37:33:58:49:29:f6:5f:ff:64:f7:fb:3a:5b:
c2:d5:24:fa:be:0a:a5:55:17:6b:65:92:87:f8:0a:1e:35:51:
b1:a5:65:df:67:23:09:9d:66:22:27:7f:98:b6:f7:6c:9f:5a:
6b:3b:87:01:8a:69:aa:ae:e5:c5:6e:1a:fe:2e:d5:e9:9e:1f:
2f:a5:f1:f9:39:d0:61:5a:bc:b6:ba:18:6d:54:b1:dc:f0:33:
57:c6:01:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:17:48 2026 by rpki-client