Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
File: KvXkhmugmCASSm5REQT8QfpUGZU.mft (raw, json)
Hash identifier: jSBjoYxOFfw51WO1eKClp5kVvIV47dJD3QtqWMO9qNY=
Subject key identifier: D0:18:52:46:D3:7D:E4:96:01:F9:7E:CC:93:E8:39:58:FB:84:58:86
Authority key identifier: 2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
Certificate issuer: /CN=2af5e4866ba09820124a6e511104fc41fa541995
Certificate serial: 019F935ABFE4364B1B526393CBAE2B8CBE8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
Manifest number: 1707
Signing time: Fri 24 Jul 2026 09:00:25 +0000
Manifest this update: Fri 24 Jul 2026 09:00:25 +0000
Manifest next update: Sat 25 Jul 2026 09:00:25 +0000
Files and hashes: 1: 1-z20vDfkn7oH-6wUhtZ7pUOpXYs.roa (hash: 4MFRLpbPJz7onF3ec6CHT+GVAOztKot1i4cNl9/RUGQ=)
2: KvXkhmugmCASSm5REQT8QfpUGZU.crl (hash: 9iQXVwGIL6vgXPVjjNSpBJMceZd0XGG5J4hfIRZ3hlY=)
3: O21Shcq_z6RKIQVhghQ8x3iEUgo.roa (hash: PftCITy+sH9MILDPnvPA0rgTafRE24Enke6NGZ2wU40=)
4: kip9OEz8XKCqejVGiyHb4UeVJqw.roa (hash: 2JQk1BgdQDCMPFy2Bnpli4/vgD3QHxPKM4wyX0aSciw=)
5: qFN4BBxdmHy_3BcnNOupfLTZLMo.roa (hash: BnnmcXeCam4+KhT/CdouCX5HwDOQfbwphY/d8ikHz1E=)
6: uak-SP6C0SdGYf4Tcy5QLvzCEvQ.roa (hash: 5hi2l5GuzQIHHEKLjg//xukNKdrAlFGmuJKbjmJZ2aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5a:bf:e4:36:4b:1b:52:63:93:cb:ae:2b:8c:be:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2af5e4866ba09820124a6e511104fc41fa541995
Validity
Not Before: Jul 24 09:00:25 2026 GMT
Not After : Jul 25 09:00:25 2026 GMT
Subject: CN=d0185246d37de49601f97ecc93e83958fb845886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e4:ad:92:5e:16:29:a5:bf:16:e0:55:a1:4e:
d4:19:49:6e:b0:48:a5:73:46:40:98:80:e6:ee:6e:
7b:07:6d:e1:cd:2e:f9:f9:cd:35:74:10:b6:f4:ca:
c8:18:18:f3:65:8f:ed:54:66:70:cd:94:3b:23:3d:
af:ea:8e:d7:f6:5f:83:2d:d1:3b:73:89:11:af:76:
33:20:6b:1d:70:db:d7:23:45:89:ed:69:89:8f:27:
64:43:20:6e:46:95:f7:5e:3b:1f:fb:8e:35:ef:ae:
75:ce:2c:e4:ee:82:99:0f:af:8a:d6:43:4d:46:31:
9e:ea:7a:87:60:e3:15:61:01:20:41:d8:ec:8b:9c:
55:f8:11:ba:d3:ba:89:b6:e7:fe:c5:d0:d7:87:6c:
11:1c:16:98:d5:a5:08:f5:71:1b:ea:38:1b:21:a1:
49:5e:95:b3:52:fc:59:ee:a6:1f:bd:ef:57:65:94:
bc:3c:8c:79:7b:67:f4:36:b2:30:54:b3:d5:6a:74:
d8:7d:ca:f2:57:78:ae:e1:ef:52:94:6d:4e:c2:32:
17:1a:89:dd:c3:eb:5e:ed:ac:45:e9:04:46:c7:10:
5a:73:b9:9f:c1:a8:e5:7f:47:bb:0e:f7:84:af:90:
2f:aa:11:ae:36:bd:00:ec:cc:20:47:22:81:f4:34:
29:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:18:52:46:D3:7D:E4:96:01:F9:7E:CC:93:E8:39:58:FB:84:58:86
X509v3 Authority Key Identifier:
keyid:2A:F5:E4:86:6B:A0:98:20:12:4A:6E:51:11:04:FC:41:FA:54:19:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KvXkhmugmCASSm5REQT8QfpUGZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/252761-019a-4de5-957d-c320e50a3c79/1/KvXkhmugmCASSm5REQT8QfpUGZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ee:98:59:6b:70:2d:34:28:57:04:a1:f3:4e:3c:c5:f5:35:
73:71:29:05:bb:6c:af:27:39:83:dc:f4:8a:95:36:1a:c2:fe:
25:c9:85:de:0b:be:53:1d:b0:c0:c5:c6:c7:bd:4e:01:2e:24:
66:a5:98:1e:20:f3:f5:7d:26:dd:01:e4:57:59:cd:02:e6:83:
22:25:dc:f8:d8:f1:e9:5d:7a:71:84:6e:74:75:26:94:0f:39:
ee:9d:14:f3:fe:17:0e:f0:54:21:fe:fd:97:ad:9d:d7:64:01:
38:7a:d2:f1:26:9e:07:69:4c:d0:15:3e:47:ec:13:25:9a:b1:
3f:e8:3a:a2:2a:32:10:b3:db:8f:4d:5a:fa:cf:8a:15:eb:8a:
4b:79:2f:a5:e0:73:ec:b2:ff:73:d5:0f:81:af:d9:d6:eb:69:
c6:65:59:da:be:c9:82:e4:88:36:36:2e:5b:f1:19:d0:c1:77:
54:c8:d8:ae:c5:9e:8b:a2:b1:c5:5e:7c:c5:21:d4:46:98:5d:
c9:25:8b:48:b9:bc:f9:4e:c7:d2:45:c3:9d:de:aa:33:4c:02:
24:c9:c6:12:2f:c4:31:81:9a:ff:ba:c7:d7:04:a0:cd:b2:e4:
76:d4:b7:d0:41:f7:27:7c:e4:e2:89:2d:b8:d0:b3:22:24:fc:
ca:82:93:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:55 2026 by rpki-client