Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier: B1dPBIKIAVS+SqNPy2b76Be6iki6R22fCVHQh/SGbqI=
Subject key identifier: 32:D6:53:4C:1B:09:12:4E:5A:8D:29:B5:AC:58:D8:E9:A1:B3:FC:43
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial: 019F8F7F9CBC650AB2EDE91792806712AAC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number: 0A20
Signing time: Thu 23 Jul 2026 15:02:12 +0000
Manifest this update: Thu 23 Jul 2026 15:02:12 +0000
Manifest next update: Fri 24 Jul 2026 15:02:12 +0000
Files and hashes: 1: HrGcgBvg4DY29ekAPoOs0k_ceU8.roa (hash: Zi9LIDXSmXdYftVe/mbJqu9FZB8L69cv5MK/RNZAW5k=)
2: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: WJwI9SsMNvWX29XA55lyZGZBRNCatyKAViVI0aZS8qg=)
3: RxNLLXxR-CzB0lCNzFXnXse6o58.asa (hash: +bxHDoutbQA8pq/ltILKkfOw9KUe0ujPJE9JrTsk4Fw=)
4: YVLbsPphUzr0gk62ZWqr-AU_xYs.roa (hash: 40/VqOwzeKbDNYjqt9gFE2PfKWEcwlXPJGHdZ1QMGtM=)
5: xhu-0mZ6I_dG18XDHBeHb4pHzuI.asa (hash: Ckg17sZrLC7ovu4WHIS5uCgsXOtfqzHSeiiwzrs9BRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:9c:bc:65:0a:b2:ed:e9:17:92:80:67:12:aa:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Validity
Not Before: Jul 23 15:02:12 2026 GMT
Not After : Jul 24 15:02:12 2026 GMT
Subject: CN=32d6534c1b09124e5a8d29b5ac58d8e9a1b3fc43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2a:a3:f8:01:1f:9b:cd:6b:8d:aa:cb:ee:52:
bd:33:95:a4:56:d9:82:ba:d3:cb:ee:4f:b6:c0:80:
28:ec:e3:e4:c2:45:3f:9d:7f:83:b1:a7:b1:be:94:
de:26:95:da:33:ff:ce:e3:3d:0b:f7:b0:aa:32:90:
b9:17:fc:00:cf:33:93:8c:6f:36:65:61:2d:6c:85:
2f:a3:dd:40:96:a5:b4:3d:3a:de:25:0d:cc:89:f2:
61:97:ac:91:51:c8:41:20:3b:20:d8:f1:62:42:a8:
34:b0:3f:20:6b:ec:44:0e:94:f5:b9:7c:16:69:f8:
90:bd:85:13:fd:07:3b:98:97:50:81:5d:14:24:d2:
44:bd:e8:05:9e:1f:0e:69:cb:1b:5b:ce:3b:c8:b8:
c1:43:20:ce:a3:5b:e6:05:3c:05:34:19:7e:dd:9d:
72:a2:b8:62:0a:70:18:38:fc:c1:50:4c:0a:22:6c:
f4:21:5f:06:ce:1d:8d:44:91:ce:eb:cc:ad:63:4b:
9f:45:cd:84:10:44:8d:4d:73:89:fd:9b:d0:f6:41:
f4:c5:75:99:f1:84:e0:93:96:b9:d6:42:a3:c8:2e:
2c:36:7a:b7:02:86:a0:13:b5:c0:dc:28:bb:6e:b3:
37:30:58:49:c7:da:0e:be:80:4c:6b:a0:fa:f6:ee:
da:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D6:53:4C:1B:09:12:4E:5A:8D:29:B5:AC:58:D8:E9:A1:B3:FC:43
X509v3 Authority Key Identifier:
keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:40:33:4f:cd:a0:75:06:21:51:ee:de:67:6f:cc:57:7f:2d:
b7:b5:0a:2a:f0:92:1c:05:b8:d1:86:d0:c2:b9:bf:b1:49:2f:
c3:c5:88:e8:91:a9:05:5d:36:5d:35:75:3d:aa:0e:c2:f9:25:
e8:e6:ac:76:af:1f:8d:cb:9f:87:6a:ad:58:1f:68:d9:33:7a:
d7:3f:cb:c7:c0:df:32:4b:58:6e:68:b5:db:e9:46:f9:9a:ab:
36:6a:c2:85:e7:84:f2:80:ee:d9:65:91:b4:dc:ea:c3:bf:be:
5a:e4:41:5f:57:a7:92:ce:9c:6f:bb:73:63:fb:23:b6:59:e1:
41:2d:1c:fa:fd:fd:64:74:e2:e0:d3:63:59:5e:5d:cd:54:6e:
05:48:f2:f7:f3:81:0d:2b:f8:a8:15:4f:18:3e:ec:92:34:9f:
d2:d8:de:a7:a0:e1:b3:04:f6:10:da:74:1a:3f:22:07:08:15:
7d:54:ce:59:b8:b3:86:a8:0d:eb:bd:1f:b3:f2:5d:02:8f:e7:
0e:0f:13:e9:87:74:56:ad:53:97:7c:a1:e7:9f:2a:6a:ed:21:
c8:b3:3a:bc:33:22:f5:85:82:a2:ac:0a:9e:48:57:f3:82:1a:
89:2c:3d:a0:b5:ab:47:60:98:4c:07:48:32:52:a7:bf:d4:cf:
24:54:5e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:24:04 2026 by rpki-client