Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: Pl/KCiUfwSibDmJpHGQLGhLZ+GOrAvvRKAPZiMFhmF8=
Subject key identifier: 22:9D:06:D0:95:FD:F0:8C:C5:98:57:3A:1F:B8:1C:02:EB:32:AC:C1
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 019EC1EE042328746F87998D5BF7F9F39756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 17:01:01 +0000
Manifest this update: Sat 13 Jun 2026 17:01:01 +0000
Manifest next update: Sun 14 Jun 2026 17:01:01 +0000
Files and hashes: 1: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: b3Ix8+G/67lpYOOUWNuSlGve3SZM9RM8tQpfsEJ1SF8=)
2: du4Uc1Tw1A4vtFUr5_RZZE4mr9c.roa (hash: VHvvL6d/GOaFCBnvC8MIBYdWi2shlhJJCY1UWI68tyA=)
3: u3hZ4Wo-VF-Q5oSlFkaUlkQvEKA.roa (hash: U2nT3r9q5huh0VOndjllE1MWO9Yu+mYw1a5lsTdkP+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:04:23:28:74:6f:87:99:8d:5b:f7:f9:f3:97:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Jun 13 17:01:01 2026 GMT
Not After : Jun 14 17:01:01 2026 GMT
Subject: CN=229d06d095fdf08cc598573a1fb81c02eb32acc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b2:cb:98:75:83:fa:19:54:f0:bf:02:9d:5d:
18:7d:fb:38:03:f6:c0:c3:dc:32:93:40:1b:1b:36:
e7:a0:a9:d3:d5:47:79:aa:ee:77:15:ba:62:31:02:
1e:ce:d9:40:cc:c7:57:99:7c:bf:75:26:47:8d:0b:
8a:9c:81:ff:03:ab:b4:bd:12:2a:13:0a:ff:b9:50:
65:44:b5:09:e2:44:33:57:5b:dd:b0:a6:30:48:a7:
8a:e2:11:63:7b:16:9c:7f:9e:32:74:b0:42:f0:75:
86:65:91:48:8b:a7:85:e1:15:80:27:dd:83:1f:8c:
2f:63:8a:b5:d7:2d:f2:a8:18:fb:59:b2:21:18:d8:
84:c1:f8:49:5d:e7:d3:37:d1:f8:ff:f3:8d:f8:36:
27:f3:03:c0:bc:e9:42:5a:6f:07:43:19:21:aa:f0:
f2:96:e6:09:d7:2d:75:e7:bd:f5:f1:87:f4:34:23:
45:05:c3:74:6a:e6:dc:88:08:ad:c0:0f:97:e8:ed:
d9:91:0d:f9:db:6b:d5:1b:fc:be:1f:66:20:6a:0f:
35:bb:8b:27:af:be:9f:16:53:51:ea:e9:90:8e:78:
e5:62:58:0f:2e:80:f1:0c:ca:3d:4e:e9:f1:ab:c6:
5b:90:df:18:a6:36:da:d1:62:41:10:12:fd:a4:d7:
a4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:9D:06:D0:95:FD:F0:8C:C5:98:57:3A:1F:B8:1C:02:EB:32:AC:C1
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:81:6c:81:b0:3b:55:eb:b2:bc:82:82:4b:4c:ae:8e:ce:9d:
77:bb:14:54:6e:45:89:91:a2:9d:4f:72:cb:99:4f:d9:9d:58:
22:de:16:3e:90:6a:e6:af:cb:a2:18:5e:80:b1:c1:95:01:e2:
19:9a:d6:68:5c:18:34:f0:bb:5a:b6:0c:81:3a:71:c0:9c:2d:
69:86:e9:f9:c1:3d:d3:da:df:42:5c:d8:05:d7:72:3b:32:7c:
d0:1d:52:7e:49:d8:05:aa:c5:5e:a5:b5:67:81:fb:51:7a:25:
44:e1:f2:90:d3:58:70:9d:cc:63:d8:c6:41:cd:be:a3:b6:23:
03:ce:81:ae:67:35:3a:22:6d:9f:c7:1d:ab:0b:d2:15:1a:ae:
21:1e:2c:34:d2:e3:a6:bc:63:61:df:c0:b8:14:f3:fd:27:64:
49:98:b0:8b:77:36:be:43:da:51:96:f3:34:26:2f:a9:ca:4a:
89:36:b7:8c:d3:b6:1b:ea:b0:a6:12:2f:62:45:df:ab:dc:51:
e2:33:4c:d5:b2:44:10:2e:db:ab:fd:b9:43:a2:a6:e8:22:dd:
ae:fa:2a:76:09:8b:f5:d9:f4:1b:ce:28:cc:bb:0c:15:9f:fe:
41:b1:90:2b:14:7c:83:17:1b:17:aa:cf:e9:48:2a:4c:20:90:
24:93:fb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:04:45 2026 by rpki-client