Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
File: KUv7SsSIYBHwbZ3E79RVMyZO14g.mft (raw, json)
Hash identifier: 4JSKW0jPWqaU3UaFSuQgJ9nObDe9z1v2sBLy+cWx00Y=
Subject key identifier: 65:9D:7A:C9:E1:6D:24:AE:4D:F7:26:A0:35:C9:5D:F9:33:D4:22:68
Authority key identifier: 29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
Certificate issuer: /CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Certificate serial: 019CAFB623A8E7DE39F95BF3F70BA3897406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 18:01:15 +0000
Manifest this update: Mon 02 Mar 2026 18:01:15 +0000
Manifest next update: Tue 03 Mar 2026 18:01:15 +0000
Files and hashes: 1: KUv7SsSIYBHwbZ3E79RVMyZO14g.crl (hash: ClKw1eHn/bYuf8giDpUnWwL+gDi8uvVKQkw/qTV9h0o=)
2: Xp-6MgKL7FDxA8beZ_B2_voMBOA.roa (hash: RTnZFx7lRZDDt83YmwGHtedrtI7DlR7GynWDCNcROwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b6:23:a8:e7:de:39:f9:5b:f3:f7:0b:a3:89:74:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Validity
Not Before: Mar 2 18:01:15 2026 GMT
Not After : Mar 3 18:01:15 2026 GMT
Subject: CN=659d7ac9e16d24ae4df726a035c95df933d42268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:20:27:07:38:ff:1a:6f:4a:e2:ee:23:aa:
12:8f:a0:d1:ff:e8:cc:a2:fd:23:43:4b:6f:a2:f4:
5d:22:8c:36:53:83:97:b5:51:0b:ed:c7:33:1c:42:
1c:d5:49:2c:5d:16:28:a5:4b:27:07:de:29:d5:8a:
47:01:70:f8:fc:9f:12:c7:77:20:1e:6a:4f:51:86:
1f:17:26:49:e9:cd:7a:f6:f9:54:86:56:21:3c:cf:
f3:22:d9:00:36:2e:c2:a4:9a:17:ea:de:db:4a:0d:
21:31:97:16:6f:d6:b0:68:f9:2d:86:c9:ce:e3:f8:
1b:36:81:74:64:ea:ad:15:a0:5c:68:05:d3:4d:19:
a5:73:5c:2e:7e:1c:0e:2a:70:5b:6b:b5:e0:5f:af:
86:21:a9:67:07:38:c6:3e:1c:29:6f:4c:40:81:12:
05:21:8b:fa:24:de:4b:fb:20:88:ba:17:55:56:3d:
e5:1b:89:ff:9d:56:b1:d3:a8:b2:8a:bd:50:46:c8:
c5:3b:0b:8d:49:45:61:7f:3b:80:6e:6d:19:05:a1:
ee:da:9e:4e:20:ba:c6:09:27:b4:0c:c3:f8:a1:a1:
46:60:2c:0b:6f:a0:86:5b:6e:06:12:1e:07:e0:5f:
10:7e:af:15:9f:87:17:c9:93:46:72:82:9e:de:00:
3d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9D:7A:C9:E1:6D:24:AE:4D:F7:26:A0:35:C9:5D:F9:33:D4:22:68
X509v3 Authority Key Identifier:
keyid:29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:ba:a5:77:5e:4e:49:66:12:d9:29:e2:00:86:58:40:ea:30:
69:ed:00:f1:61:c8:01:5a:38:e1:2e:b5:26:b0:90:f0:49:9b:
9f:35:43:35:82:4f:3d:93:50:d6:3e:34:3c:03:57:ae:26:53:
2a:ba:ba:a1:f9:0a:87:7f:1e:ce:2c:fe:aa:4e:8d:1a:8c:26:
94:22:9c:2c:fe:4f:e4:ef:4d:87:50:1a:06:62:c3:ef:08:97:
ce:88:b8:65:68:f9:32:1c:3b:ca:99:e8:83:00:6b:a7:89:25:
32:9b:54:49:88:a6:1a:cd:e6:79:e6:d7:cc:9c:8e:2f:88:28:
cf:ae:08:4a:fa:0e:a5:fb:78:00:21:45:98:b8:21:74:31:98:
54:57:5f:fc:89:5b:7a:da:b8:73:b0:a3:eb:8c:62:5e:bf:41:
81:01:90:13:4b:35:75:fb:84:fb:50:e6:83:cd:31:e4:df:24:
a2:92:83:62:da:f9:82:9c:4f:54:da:97:90:93:84:23:00:17:
6d:af:98:68:53:65:d4:69:ee:9a:bd:ca:85:b7:da:0d:31:5f:
d6:e0:0f:62:03:9c:32:09:f5:c1:ca:2e:8e:ca:8e:94:52:17:
82:6e:00:34:4f:0a:e5:45:13:79:a4:b4:8f:b4:18:15:c2:26:
9c:39:8a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:46 2026 by rpki-client