Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: 9OyJzR/3LETkL2TRGOLkWXFfvA7fgcy2Ip1umzjkB7k=
Subject key identifier: A4:03:17:C0:9A:D3:68:76:E4:9A:89:E8:BE:47:43:44:F0:CB:E2:61
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 019F8F46FB51A2A53A1EBD4B9DAE5503120C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 14:00:21 +0000
Manifest this update: Thu 23 Jul 2026 14:00:21 +0000
Manifest next update: Fri 24 Jul 2026 14:00:21 +0000
Files and hashes: 1: H1aTR_3-hcIaSL6m2Xtkw0pDsL0.roa (hash: qNxstYo00+D1moz7OPyfI/Jls2a6koAXTIX0TooiMUg=)
2: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: FE7j4lmS6HpyVUsHJ17/Km6mj5v8WJxrkSU0W+ZBtuQ=)
3: rV4fWnkrcGIszMs_FpYbegApVHE.asa (hash: 56jzfQdPh/s5EfuIXCaFZwWPR/T6Xgb5ZA7aJzX2/HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:46:fb:51:a2:a5:3a:1e:bd:4b:9d:ae:55:03:12:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Jul 23 14:00:21 2026 GMT
Not After : Jul 24 14:00:21 2026 GMT
Subject: CN=a40317c09ad36876e49a89e8be474344f0cbe261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0b:ec:71:4e:36:ca:67:cb:67:1d:cc:f6:e3:
2d:50:b5:47:ae:3d:bc:24:58:c5:05:67:82:cb:af:
0e:f9:8d:9b:6e:48:77:d1:e5:cd:f4:6c:38:f8:d7:
d3:29:c1:62:d2:a3:0e:62:b1:b2:90:4c:ae:e3:76:
e1:4f:ba:12:2f:0a:62:f5:5b:41:c7:9d:35:09:84:
82:ef:8e:a7:33:3c:c9:71:85:45:d4:63:f5:17:d3:
5e:f6:06:1a:5d:5b:1d:d5:da:bd:ae:45:24:7e:cb:
c0:ea:62:1f:1d:fd:91:c1:c5:9d:d0:05:f0:2c:a2:
db:77:53:bf:0b:fd:7f:55:d4:07:fa:42:4c:eb:d7:
99:65:00:bf:cd:4e:28:35:c1:c2:df:fd:d1:d2:6d:
14:13:4d:6c:3c:84:d0:33:fc:bb:bd:b8:4a:2e:c8:
f7:2b:6a:66:9a:d7:54:dd:4b:f5:87:53:55:12:2b:
30:a3:6f:ac:aa:ed:28:33:9f:41:d6:b6:5c:b4:3b:
1d:9b:b2:ca:66:ee:bb:5b:3d:8f:97:24:9b:a3:99:
85:cc:7d:2d:93:b5:2b:ca:95:9b:83:00:08:61:a4:
56:69:3a:3c:52:65:da:0a:c7:a5:67:5e:f6:16:02:
1a:c9:e1:25:42:67:b7:79:e0:57:13:a4:58:47:85:
9e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:03:17:C0:9A:D3:68:76:E4:9A:89:E8:BE:47:43:44:F0:CB:E2:61
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:83:9c:f2:07:24:29:ce:5f:ae:4c:26:25:50:f4:0e:05:88:
27:50:64:e4:c2:d6:49:d4:48:52:6b:e0:45:7d:1f:71:bf:26:
7c:a8:a0:08:49:d3:4e:e2:02:48:ac:50:ac:ab:e9:8f:78:20:
f6:59:89:36:a3:43:15:3d:39:70:06:d8:20:28:d9:93:10:07:
96:86:83:70:a1:c4:ea:fe:9c:b6:ea:0b:2f:5c:83:e0:4e:84:
67:45:3f:79:dd:ed:8c:dd:ff:5d:7e:70:fc:b0:ff:72:09:70:
d9:60:5f:f9:f1:7c:ca:89:5d:44:5f:9f:9b:53:c0:3c:23:7c:
13:93:bc:d9:5c:8b:7e:cb:84:70:76:95:36:a3:9e:89:7d:03:
68:7e:cd:63:8c:62:c8:49:16:64:c3:46:82:36:9f:41:64:af:
75:dd:dc:2b:64:d3:4e:09:ff:4c:80:64:07:4d:cf:43:47:99:
a0:0c:df:ed:71:f1:9c:94:f0:de:2b:6f:b7:63:77:5f:a7:ce:
43:11:53:e3:c0:aa:5b:3a:84:e8:9a:ee:e7:76:48:23:aa:65:
fc:e8:87:de:75:0e:87:29:bb:cd:55:71:a2:75:e5:d7:42:3f:
74:b2:cb:10:ae:ba:55:d3:85:09:2e:bf:ef:2f:eb:7a:9e:b1:
c7:b7:49:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:18 2026 by rpki-client