Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json)
Hash identifier: //cRoN5v4ItPO6tZbWK2t55gUJdOV8bW3kjhSo+PMV0=
Subject key identifier: 15:D6:58:28:4E:66:D7:14:B5:66:44:7B:C1:1A:F7:87:AB:3C:67:E6
Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Certificate serial: 019D27E01FBB60BB7E7B7259926BF60F8E96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
Manifest number: 0FA2
Signing time: Thu 26 Mar 2026 02:01:32 +0000
Manifest this update: Thu 26 Mar 2026 02:01:32 +0000
Manifest next update: Fri 27 Mar 2026 02:01:32 +0000
Files and hashes: 1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: eTszzJiTDMl+n1Ff1SV1B44pBHcvbqzomP+cWV105qU=)
2: qr3Na9k4dEq-BltyNe_Y-J5z6Xg.roa (hash: WKJf5bBFt3vRZjUBsw0y9RXB09W0E9StehXTEF8mDn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:1f:bb:60:bb:7e:7b:72:59:92:6b:f6:0f:8e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Validity
Not Before: Mar 26 02:01:32 2026 GMT
Not After : Mar 27 02:01:32 2026 GMT
Subject: CN=15d658284e66d714b566447bc11af787ab3c67e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:45:a3:30:c2:6d:0c:d4:0e:6a:38:89:cb:
da:f8:a3:39:b2:b0:3e:56:6b:fa:d3:65:cb:2d:c5:
e0:30:99:73:31:8a:dd:68:5a:76:16:1f:bd:2c:4b:
c5:f1:68:44:0a:ee:3b:45:1c:30:00:d8:7c:05:19:
94:5c:b6:57:ed:82:d8:84:5e:85:9c:ef:e2:cf:68:
df:24:c2:10:4a:8f:86:ba:7c:9b:6f:e3:2b:c7:bc:
13:c6:4d:f8:47:61:c1:39:36:24:0a:10:9c:f4:2f:
27:a0:cc:1b:f9:c1:aa:6c:b1:7a:10:c8:bb:ee:a0:
64:7c:a1:2c:b3:9f:c0:0b:ae:e9:7b:e2:3d:e7:4b:
e7:ae:2e:fc:bb:47:f1:18:c0:c8:10:d0:22:24:8c:
80:98:88:bd:22:34:e0:c7:58:46:15:7d:c1:b5:c2:
83:f0:7b:68:97:7b:f3:7c:94:e5:fe:e0:34:9a:d3:
f2:7d:e0:a0:a0:43:c7:bc:72:59:88:71:70:82:c2:
15:f7:8b:31:6b:3c:59:af:6c:76:e4:cf:f2:10:88:
dc:ee:fa:98:2f:f2:9e:21:f1:9b:c3:6e:0a:a3:2b:
bb:4b:1a:54:2c:c2:4d:33:9d:96:6b:65:fc:58:5e:
2b:20:0e:ca:b3:ef:89:63:6b:93:a6:17:fa:41:d3:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D6:58:28:4E:66:D7:14:B5:66:44:7B:C1:1A:F7:87:AB:3C:67:E6
X509v3 Authority Key Identifier:
keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a8:81:78:e5:1f:e7:b8:c1:01:fc:75:04:9d:43:4e:93:e9:
01:f8:52:b9:cf:86:a1:98:b0:39:98:ed:f0:33:ec:7d:a5:c2:
34:5b:be:90:1a:86:5d:84:49:d0:d4:20:fd:be:42:23:d6:29:
0c:e9:a1:eb:36:b8:48:f7:6f:37:35:de:93:3f:9b:00:5b:6f:
8e:74:5e:26:12:46:28:a6:c1:e5:3d:0b:43:29:fc:2a:c6:92:
28:2d:73:80:55:0c:33:0a:d0:17:0c:dc:ef:28:98:c3:4a:e4:
38:15:30:50:43:5a:2b:81:ae:ed:2e:2d:46:6f:3b:9c:cd:a2:
20:17:d2:c1:6e:8b:49:63:5e:46:15:4c:ff:47:f4:30:2a:01:
5d:71:28:2d:e8:8c:6e:91:3c:e7:da:28:f8:21:16:bb:05:59:
5d:2b:3c:72:8f:c3:3a:c8:79:d2:2b:6b:94:60:b1:33:41:13:
dc:41:1c:9a:85:84:20:8f:31:41:ac:af:6e:93:63:3e:c0:f7:
42:6a:8f:9d:78:8e:f4:42:e1:8c:bc:9c:5e:43:37:24:95:a8:
df:cd:6f:c3:ac:32:ce:5d:bd:b9:ec:c0:62:c6:dc:f5:23:21:
16:3f:a4:7b:bd:73:aa:a9:7a:a6:7d:55:37:25:96:b3:e9:12:
09:82:d4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:56:18 2026 by rpki-client