Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
File: KvXkhmugmCASSm5REQT8QfpUGZU.mft (raw, json)
Hash identifier: lmHZlIEbe+eR0RPp5f+CPDTaRgi9VfzrTbt6zov2T3Y=
Subject key identifier: 97:92:7D:67:1D:7C:F5:8D:91:F4:CD:71:AE:36:E9:31:AE:87:4B:C9
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial: 01A0DBA9E18860FE85733FFD96D838CD9527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
Manifest number: 17B1
Signing time: Sat 26 Sep 2026 03:02:18 +0000
Manifest this update: Sat 26 Sep 2026 03:02:18 +0000
Manifest next update: Sun 27 Sep 2026 03:02:18 +0000
Files and hashes: 1: 1-z20vDfkn7oH-6wUhtZ7pUOpXYs.roa (hash: 4MFRLpbPJz7onF3ec6CHT+GVAOztKot1i4cNl9/RUGQ=)
2: KvXkhmugmCASSm5REQT8QfpUGZU.crl (hash: /ME2ODcaYJhgVx76NxkRqy4BG4+lGHway+hDysFbKAE=)
3: O21Shcq_z6RKIQVhghQ8x3iEUgo.roa (hash: PftCITy+sH9MILDPnvPA0rgTafRE24Enke6NGZ2wU40=)
4: kip9OEz8XKCqejVGiyHb4UeVJqw.roa (hash: 2JQk1BgdQDCMPFy2Bnpli4/vgD3QHxPKM4wyX0aSciw=)
5: qFN4BBxdmHy_3BcnNOupfLTZLMo.roa (hash: BnnmcXeCam4+KhT/CdouCX5HwDOQfbwphY/d8ikHz1E=)
6: uak-SP6C0SdGYf4Tcy5QLvzCEvQ.roa (hash: 5hi2l5GuzQIHHEKLjg//xukNKdrAlFGmuJKbjmJZ2aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:e1:88:60:fe:85:73:3f:fd:96:d8:38:cd:95:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
Validity
Not Before: Sep 26 03:02:18 2026 GMT
Not After : Sep 27 03:02:18 2026 GMT
Subject: CN=97927d671d7cf58d91f4cd71ae36e931ae874bc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6d:77:e0:6b:74:0a:94:d1:39:9b:ca:f3:71:
72:7f:07:fd:dc:9e:b0:2f:d3:ad:9c:47:43:10:5e:
da:6b:b1:a4:d4:f1:c7:10:35:65:35:ea:80:fd:9a:
3c:c4:d2:b0:d1:3a:f7:80:56:9d:c5:24:67:e9:38:
5a:d8:27:17:4a:c0:87:9c:d7:0c:80:5a:68:2d:6e:
56:06:ef:6e:a4:e0:39:ca:be:61:a9:3c:47:ce:79:
35:49:86:b9:e0:6b:22:3e:a1:4f:4b:19:86:b5:a9:
1b:83:fc:1d:04:73:ec:4d:26:8e:f9:73:53:bf:6e:
e4:95:ba:72:12:a8:4d:69:9f:5c:4b:f5:f9:79:92:
6d:d8:bc:af:fc:c8:d4:b5:a3:af:d4:98:c7:4d:25:
a8:4f:2e:09:dc:7a:8f:ac:02:0b:37:1e:5c:4f:12:
8c:46:a7:0e:fb:66:8f:e4:e0:5c:1c:a5:17:88:b3:
bd:42:e2:50:d2:a8:05:05:d7:02:68:6d:79:f6:b9:
3b:5c:e9:f1:08:22:39:79:c9:65:ad:c2:1e:0c:03:
a1:ce:b9:49:62:9d:51:46:f7:84:60:23:8d:40:1d:
d5:69:ef:7e:9d:46:d1:2e:36:b0:0a:a9:68:06:13:
d2:62:92:ad:1e:85:e4:1d:37:70:83:f2:a5:f1:76:
f6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:92:7D:67:1D:7C:F5:8D:91:F4:CD:71:AE:36:E9:31:AE:87:4B:C9
X509v3 Authority Key Identifier:
keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:73:6e:e2:66:39:62:93:cc:67:8d:cc:30:7e:5c:36:d4:f8:
91:60:64:a4:36:bf:b6:03:20:ec:2b:44:94:dc:47:05:a6:50:
55:9e:86:ce:03:b8:19:a9:60:af:d4:da:04:9d:86:30:ee:1e:
46:33:50:8f:93:6a:40:42:8c:52:41:0d:27:c4:1e:fa:02:ba:
6f:12:51:cb:f2:c0:2a:58:0e:9b:c2:d7:e2:9e:00:d3:98:4b:
38:b2:8c:05:af:7e:69:a5:f7:54:74:50:51:be:c5:b3:45:6a:
9f:e6:da:92:00:91:5d:e4:6c:4c:c5:87:25:6e:94:b5:22:3c:
fd:9a:64:80:5e:d7:d8:02:11:ea:02:67:20:8c:b8:79:c9:19:
3b:f8:ba:9e:f8:1f:d8:8e:5a:18:2b:ef:44:4a:c7:4c:af:1a:
0b:14:02:d3:33:ca:b4:ad:c8:d3:60:6e:0e:ea:07:74:31:7d:
95:d5:20:03:4d:06:73:61:b8:43:14:b2:71:31:7d:9e:5d:99:
e6:a5:29:9e:0c:cf:cf:68:73:a6:ed:9e:b7:2b:e0:ad:d9:f1:
db:d3:79:7d:55:14:60:f9:21:73:3f:3d:a1:6b:da:c3:32:fc:
23:a7:e2:44:56:11:01:07:b8:ab:be:63:3c:2b:47:9a:8f:19:
21:a4:07:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:26:24 2026 by rpki-client