Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json)
Hash identifier: CdDQcnq2wH668zDRo+Runs7AR2OHPGyKV0ri+iELxbw=
Subject key identifier: FF:7A:2D:FE:9C:28:01:34:5C:AC:05:39:FF:43:D7:A2:72:C0:E7:7B
Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Certificate serial: 019E1F10BBD4166EBEA977BBCEF43D0EECE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
Manifest number: 1022
Signing time: Wed 13 May 2026 02:00:50 +0000
Manifest this update: Wed 13 May 2026 02:00:50 +0000
Manifest next update: Thu 14 May 2026 02:00:50 +0000
Files and hashes: 1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: phletXGz5aJXGHBNkCdRoSZXPrVtFVOccPUbYP3tKlg=)
2: qr3Na9k4dEq-BltyNe_Y-J5z6Xg.roa (hash: WKJf5bBFt3vRZjUBsw0y9RXB09W0E9StehXTEF8mDn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:bb:d4:16:6e:be:a9:77:bb:ce:f4:3d:0e:ec:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Validity
Not Before: May 13 02:00:50 2026 GMT
Not After : May 14 02:00:50 2026 GMT
Subject: CN=ff7a2dfe9c2801345cac0539ff43d7a272c0e77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:9b:96:cd:1a:58:41:1d:2b:cb:13:ac:d4:
f6:52:ee:54:43:80:5f:e6:1e:10:a7:9d:54:16:64:
46:4d:9c:97:32:ea:74:e3:06:99:4a:14:c8:11:1a:
b8:89:cf:5e:0d:56:15:8e:35:0f:1d:34:58:f2:59:
fd:02:fc:31:34:e6:af:77:ab:f8:48:5a:4d:28:1f:
e0:60:34:50:7f:81:45:fd:b9:5b:15:18:27:b6:0b:
84:ac:68:87:bd:25:ca:25:9e:27:c3:75:ff:07:b7:
0a:8e:0d:03:73:83:47:78:42:08:b2:dc:59:5f:ae:
86:d6:df:1c:c2:a1:4b:7f:d2:fa:69:b3:47:50:f3:
db:9c:cf:aa:cf:02:07:4e:ea:eb:c2:1e:a5:35:08:
cb:cc:90:92:0c:8b:bd:6f:27:9c:77:19:11:68:d3:
6a:47:44:a9:6d:d7:6f:80:9b:86:67:3a:88:58:a3:
08:a7:f0:03:2e:fe:1d:82:1a:eb:15:2e:41:62:69:
cc:a4:39:ed:84:e4:13:4f:95:56:27:35:39:36:d6:
2a:5f:40:ca:2a:b0:05:96:da:a1:d0:0b:04:f1:ee:
23:ef:7e:89:ea:17:c9:fe:cf:6f:80:e1:2a:eb:6f:
58:ae:e0:35:d1:fa:37:82:a7:cb:fc:ea:82:7b:f3:
f4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7A:2D:FE:9C:28:01:34:5C:AC:05:39:FF:43:D7:A2:72:C0:E7:7B
X509v3 Authority Key Identifier:
keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:43:f9:7c:a7:b6:fa:9f:03:74:16:9d:19:21:30:4d:61:25:
26:b3:df:ff:a5:51:07:71:ff:f5:49:35:0c:4c:02:7a:cb:93:
82:39:80:bc:d1:c4:e4:e7:68:85:00:9f:b7:5f:0a:50:bb:2d:
6d:d0:3c:5f:b2:b4:8a:d6:e2:3d:45:d0:b9:ac:ac:71:dd:8f:
21:34:81:f4:28:0c:07:42:07:7d:73:9b:02:d9:9a:13:d0:61:
ca:00:c7:df:d7:50:5a:ce:03:2a:c8:0e:d5:68:2e:d9:ba:79:
60:31:cf:5f:6a:9b:8b:de:ad:dd:95:30:20:49:06:b4:9a:da:
b1:81:3e:0b:07:5c:7e:8c:66:f0:07:ab:74:89:8e:e4:78:b7:
82:45:f6:c3:38:fc:b7:28:dd:8c:cc:4f:5d:b3:fe:e1:d3:b7:
69:34:e4:04:89:c8:fc:72:1b:8c:56:11:39:9b:ba:90:97:5f:
f4:82:7a:9f:a5:0b:bf:38:d8:c6:eb:d9:8d:6f:98:70:c6:70:
30:d0:93:f9:33:fb:4c:a0:37:3b:4f:49:b9:0d:38:8c:9e:a1:
42:cd:28:fc:80:fa:18:9d:70:a8:28:1e:b7:8f:2e:21:91:06:
ad:a7:70:39:c8:6a:50:2b:51:db:fb:94:0a:26:ef:9e:90:7c:
38:ee:1c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:14:53 2026 by rpki-client