Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: k5S4hL9XJYTljzOR9q+z7RmAmlE3XYprrSeq0D5DNoo=
Subject key identifier: DA:08:CA:1D:5B:AF:71:9A:5C:A6:88:34:48:91:05:A3:6D:D7:26:F3
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 01A0E13CD346748F331F124391C1B6650624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 1A72
Signing time: Sun 27 Sep 2026 05:00:54 +0000
Manifest this update: Sun 27 Sep 2026 05:00:54 +0000
Manifest next update: Mon 28 Sep 2026 05:00:54 +0000
Files and hashes: 1: H1aTR_3-hcIaSL6m2Xtkw0pDsL0.roa (hash: qNxstYo00+D1moz7OPyfI/Jls2a6koAXTIX0TooiMUg=)
2: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: 7+5BzC1pHH5WdxVCOOQ0iiuqnnX58Sx7Hz/Po4xd7gA=)
3: rV4fWnkrcGIszMs_FpYbegApVHE.asa (hash: 56jzfQdPh/s5EfuIXCaFZwWPR/T6Xgb5ZA7aJzX2/HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3c:d3:46:74:8f:33:1f:12:43:91:c1:b6:65:06:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Sep 27 05:00:54 2026 GMT
Not After : Sep 28 05:00:54 2026 GMT
Subject: CN=da08ca1d5baf719a5ca68834489105a36dd726f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fe:09:fd:0b:ca:e7:65:e2:b4:5e:44:06:54:
28:67:34:27:3d:a7:0b:92:2f:a0:34:a8:c8:5d:c6:
b7:8d:65:68:e1:c2:b6:8a:7a:41:00:0f:0f:09:54:
2d:82:04:c1:09:57:12:be:f9:5f:3c:cb:a8:ae:db:
b6:9c:f8:e9:3c:2b:0c:46:ec:dc:dd:1e:b1:a9:da:
c5:d7:7e:97:73:29:44:a1:30:84:08:2f:e4:e9:3b:
90:91:6a:b7:ba:d0:da:d8:0a:49:56:56:f2:e5:84:
6b:56:f7:61:9b:18:4e:2f:99:3c:8a:bf:bc:8d:3f:
45:b9:12:8b:2d:dc:52:50:40:49:17:fe:78:83:5f:
4b:d2:a7:68:ef:59:d8:19:b9:35:22:d3:74:24:6d:
25:08:5c:4b:38:dc:ee:50:cb:82:f7:38:bc:a7:40:
07:aa:65:e3:cc:fb:bd:93:7e:5b:72:df:71:d8:8e:
7a:82:6e:94:21:48:ef:85:c3:d1:b3:73:d8:c2:1a:
0e:8c:ad:f7:11:07:46:68:6a:00:6c:a7:9e:08:95:
a6:4e:bf:01:a4:b2:34:ff:70:6f:bb:1b:63:f5:f9:
b6:05:e5:10:d5:9f:f4:0a:67:30:4f:5c:e3:4b:0e:
73:6a:a4:b8:01:df:2d:a7:50:4f:e5:90:ac:3a:bb:
75:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:08:CA:1D:5B:AF:71:9A:5C:A6:88:34:48:91:05:A3:6D:D7:26:F3
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:55:de:b2:c5:c1:8d:8f:07:fb:e5:62:ac:e9:d8:1c:50:41:
8f:af:54:66:5a:77:f2:1b:56:37:be:fb:c4:73:0e:8a:17:58:
ee:d3:8c:9c:9c:26:a5:08:ca:8c:4c:cd:42:57:be:bc:16:23:
2f:65:17:3f:4d:17:a7:03:df:a2:8c:5a:41:cd:66:69:ca:87:
55:68:6b:27:2c:7a:87:39:f1:57:ca:9d:48:96:02:9c:13:d5:
22:68:dd:bc:72:99:29:b5:0c:63:26:43:81:09:4b:2e:eb:68:
e5:43:0a:e3:96:a7:9f:d9:a4:c0:a3:3f:7d:ce:46:21:e4:74:
6d:f8:4e:07:79:75:c2:71:62:12:20:93:5a:ad:52:b8:bc:be:
e2:1f:0f:45:01:e8:b0:a1:0a:d8:45:d1:f6:59:82:8b:9f:40:
64:28:58:9a:58:01:af:8f:43:84:30:f1:de:45:6d:ab:ec:9d:
a8:02:f1:ad:9a:ce:a8:a5:7f:ea:88:35:06:12:71:02:bb:06:
25:44:39:cf:28:08:7b:43:de:63:a2:50:67:a3:c2:1c:1b:65:
d9:ca:6a:5d:4a:74:b3:ba:ef:b5:15:b7:97:97:c4:cd:92:d6:
1a:f0:10:96:b9:d4:79:c1:3e:b9:a9:0c:18:b4:0c:24:69:8a:
c9:b3:5f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:33:55 2026 by rpki-client