Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier: XdevPRnTCRO0y7aqtBsaCQDKGtAZWm1c2UlytqShMtk=
Subject key identifier: CA:7C:89:1B:97:D7:3A:A2:2E:90:73:5C:DA:4A:FB:98:91:0F:FD:EA
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial: 01A0D200839EDD932BE50621AC18AA118DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number: 0AC7
Signing time: Thu 24 Sep 2026 06:00:43 +0000
Manifest this update: Thu 24 Sep 2026 06:00:43 +0000
Manifest next update: Fri 25 Sep 2026 06:00:43 +0000
Files and hashes: 1: HrGcgBvg4DY29ekAPoOs0k_ceU8.roa (hash: Zi9LIDXSmXdYftVe/mbJqu9FZB8L69cv5MK/RNZAW5k=)
2: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: oJa0vBkdv5pRjEZU1BeAOoFElb8uxS9PDZ0UsatuNgA=)
3: RxNLLXxR-CzB0lCNzFXnXse6o58.asa (hash: +bxHDoutbQA8pq/ltILKkfOw9KUe0ujPJE9JrTsk4Fw=)
4: YVLbsPphUzr0gk62ZWqr-AU_xYs.roa (hash: 40/VqOwzeKbDNYjqt9gFE2PfKWEcwlXPJGHdZ1QMGtM=)
5: xhu-0mZ6I_dG18XDHBeHb4pHzuI.asa (hash: Ckg17sZrLC7ovu4WHIS5uCgsXOtfqzHSeiiwzrs9BRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:83:9e:dd:93:2b:e5:06:21:ac:18:aa:11:8d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Validity
Not Before: Sep 24 06:00:43 2026 GMT
Not After : Sep 25 06:00:43 2026 GMT
Subject: CN=ca7c891b97d73aa22e90735cda4afb98910ffdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:38:9b:dd:cb:fd:7c:8b:33:d7:3c:0a:cb:43:
5a:94:28:ec:fa:d7:d4:2a:ad:ed:d0:08:54:b8:67:
b4:f1:02:57:38:dd:b3:04:3c:0f:0a:c6:0b:42:0f:
30:58:5e:ec:e8:0b:b5:29:68:63:83:ac:a3:79:3c:
ad:7b:49:a0:18:d4:e6:b0:6f:fc:8b:19:45:09:b6:
83:05:f7:8b:99:d4:e6:8f:8e:34:23:64:d2:12:16:
8c:46:b2:ce:2e:ba:3d:eb:96:bc:06:00:d5:a6:fa:
d4:d8:03:c6:ff:d7:1b:c4:aa:6d:c4:d8:77:bc:f6:
79:22:f7:a2:c3:e0:65:a2:64:f7:69:db:96:b1:34:
ba:4c:4f:68:ad:35:04:e4:ab:81:99:b9:59:8a:03:
e8:a8:5b:07:02:a4:9b:e0:06:05:3d:d4:7b:de:04:
e8:05:89:51:3b:a0:d4:4b:c5:8b:87:81:74:70:96:
b8:8c:73:58:f5:54:5e:d3:2e:0b:09:2d:0e:c6:87:
e6:46:10:47:7b:94:e6:5c:95:55:1e:5e:36:b5:95:
bb:62:5f:fb:7b:99:e8:45:e0:13:2d:25:71:39:2f:
d1:db:1e:2c:2a:56:fb:c6:d5:81:d7:9e:fb:63:52:
4c:2a:17:f6:6a:81:ad:af:02:54:0c:a2:f7:17:c1:
38:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7C:89:1B:97:D7:3A:A2:2E:90:73:5C:DA:4A:FB:98:91:0F:FD:EA
X509v3 Authority Key Identifier:
keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b8:a6:16:66:4e:ba:84:e1:28:dd:28:0a:70:4c:5a:5b:da:
46:d3:ac:00:59:8e:0c:c8:31:e7:17:9d:de:38:41:12:40:4e:
e9:ed:ab:78:a4:15:cb:24:15:c1:58:6d:65:e7:86:1a:a8:32:
49:fb:8f:15:b8:b0:9a:75:fc:b0:29:7e:34:ed:ce:b4:8e:4e:
b9:04:1c:97:78:9b:52:62:de:45:0a:80:96:37:65:da:2e:79:
d9:02:63:1f:16:90:30:4e:9f:05:b6:97:fa:68:4b:2f:c8:80:
43:3e:97:d1:86:86:5b:83:ac:b4:9f:28:d3:9e:eb:b4:e7:17:
85:a9:83:8d:0b:e3:00:03:2e:c4:78:06:7f:d3:1c:a7:37:c9:
50:a8:af:8d:68:82:a5:1d:9c:f5:bb:8a:46:3f:25:07:ce:36:
ec:5a:4f:b4:8f:27:3d:7c:5b:0a:91:87:ee:0b:04:f5:7f:52:
a1:3e:b6:b4:45:c5:69:66:2e:2d:ae:64:88:f9:e5:0d:88:9f:
de:c4:9a:3b:56:3b:14:77:bb:3a:89:22:2d:57:15:3b:da:12:
f6:c1:70:11:72:99:16:ea:6b:0b:65:7f:70:88:89:92:f1:01:
d6:57:34:a7:15:84:1d:c5:1d:46:b1:0a:89:bc:1b:be:b0:39:
fc:66:8c:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSAIOe3ZMr5QYhrBiqEY3yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NTc0NTc2ZTljZWEzOGVhM2Y2ZWViMjZjODMyNzUyOGEw
YTFiZmYwHhcNMjYwOTI0MDYwMDQzWhcNMjYwOTI1MDYwMDQzWjAzMTEwLwYDVQQD
EyhjYTdjODkxYjk3ZDczYWEyMmU5MDczNWNkYTRhZmI5ODkxMGZmZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzib3cv9fIsz1zwKy0NalCjs+tfU
Kq3t0AhUuGe08QJXON2zBDwPCsYLQg8wWF7s6Au1KWhjg6yjeTyte0mgGNTmsG/8
ixlFCbaDBfeLmdTmj440I2TSEhaMRrLOLro965a8BgDVpvrU2APG/9cbxKptxNh3
vPZ5Iveiw+BlomT3aduWsTS6TE9orTUE5KuBmblZigPoqFsHAqSb4AYFPdR73gTo
BYlRO6DUS8WLh4F0cJa4jHNY9VRe0y4LCS0OxofmRhBHe5TmXJVVHl42tZW7Yl/7
e5noReATLSVxOS/R2x4sKlb7xtWB1577Y1JMKhf2aoGtrwJUDKL3F8E4DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMp8iRuX1zqiLpBzXNpK+5iRD/3qMB8GA1UdIwQY
MBaAFClXRXbpzqOOo/busmyDJ1KKChv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iZDA1NTYtM2YzMy00NmRlLTkyOTEt
M2IzNDQyMGQ5MGQyLzEvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iZDA1NTYtM2YzMy00NmRlLTkyOTEtM2IzNDQyMGQ5MGQy
LzEvS1ZkRmR1bk9vNDZqOXU2eWJJTW5Vb29LR184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbimFmZO
uoThKN0oCnBMWlvaRtOsAFmODMgx5xed3jhBEkBO6e2reKQVyyQVwVhtZeeGGqgy
SfuPFbiwmnX8sCl+NO3OtI5OuQQcl3ibUmLeRQqAljdl2i552QJjHxaQME6fBbaX
+mhLL8iAQz6X0YaGW4OstJ8o057rtOcXhamDjQvjAAMuxHgGf9McpzfJUKivjWiC
pR2c9buKRj8lB8427FpPtI8nPXxbCpGH7gsE9X9SoT62tEXFaWYuLa5kiPnlDYif
3sSaO1Y7FHe7OokiLVcVO9oS9sFwEXKZFuprC2V/cIiJkvEB1lc0pxWEHcUdRrEK
ibwbvrA5/GaMuw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:22:23 2026 by rpki-client