Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
File: KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft (raw, json)
Hash identifier: DcLKsiOte1tO+wjD7P6BOvzQGWUG5mevOM8Fk9bEdLo=
Subject key identifier: F4:D4:13:FF:E5:85:E6:82:E0:EA:98:B9:77:17:F0:EB:17:0B:75:E9
Authority key identifier: 29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
Certificate issuer: /CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Certificate serial: 019D265F24E3A00F9FFA925BED0CC55F6CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 19:01:02 +0000
Manifest this update: Wed 25 Mar 2026 19:01:02 +0000
Manifest next update: Thu 26 Mar 2026 19:01:02 +0000
Files and hashes: 1: 6lZg39Dhr7zrxTLyXPcjt6cAvG4.roa (hash: Dz/xeXOlzGJEgfQFVOAk562cT1XbEmexi7bAid4Phqk=)
2: KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl (hash: h09GDzbf1ciE1+n3jRMbbLTqiDQybCz+Dp9KCFiMEmM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:24:e3:a0:0f:9f:fa:92:5b:ed:0c:c5:5f:6c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Validity
Not Before: Mar 25 19:01:02 2026 GMT
Not After : Mar 26 19:01:02 2026 GMT
Subject: CN=f4d413ffe585e682e0ea98b97717f0eb170b75e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6c:04:22:a8:d5:60:fc:1d:ca:e7:41:47:1a:
71:b8:06:b8:55:0e:76:10:a8:e3:e4:3a:c8:a4:a1:
ce:61:91:28:89:7a:cc:e5:9d:d4:0f:72:b0:12:27:
19:a7:9f:7b:6b:7e:cd:1b:c1:b4:84:52:10:c2:fd:
34:29:8d:ae:a7:25:bc:31:e9:f3:91:ba:1f:90:94:
c5:24:0e:84:70:b0:10:98:bb:b8:4d:ab:64:09:3a:
ac:24:ed:fc:dc:45:56:66:7e:4f:85:22:d0:86:98:
cf:94:00:9c:98:df:57:53:d1:ca:36:74:ec:32:8b:
5d:13:1f:9d:52:d1:a1:8c:5b:2d:e3:ba:9c:09:f1:
b7:9e:51:02:04:36:ff:f6:cc:43:fd:5c:e3:94:10:
a7:e5:8c:2e:bb:0f:59:38:78:4b:ae:e5:d8:ce:63:
b4:af:77:e6:bb:6c:51:fc:6c:f8:64:aa:df:62:62:
ba:02:f7:e2:3d:57:64:de:8b:4c:ab:7a:e9:dc:34:
cb:63:ea:bd:dc:17:c0:68:3d:b3:7e:26:b2:80:12:
5c:1b:94:ec:5d:9b:8b:3b:bd:4a:05:e1:03:98:15:
81:d5:61:a6:3a:e9:8f:09:bd:29:2f:e4:14:65:34:
8a:76:db:09:65:ff:ca:9a:37:81:82:9f:93:03:70:
e2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D4:13:FF:E5:85:E6:82:E0:EA:98:B9:77:17:F0:EB:17:0B:75:E9
X509v3 Authority Key Identifier:
keyid:29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:df:0b:98:0b:8f:24:ba:ac:2e:54:b6:16:0b:5d:1e:b5:9e:
e3:3f:76:01:12:13:22:f4:01:59:91:0e:de:bb:f3:3f:3b:54:
3f:76:52:8e:00:45:62:4a:0d:6f:0e:91:fd:14:c6:02:11:74:
6b:d8:d7:21:44:be:55:97:86:22:0b:68:a9:a0:1a:20:d2:e5:
d2:cb:9f:e7:ab:82:29:ef:79:5a:45:ad:82:a5:80:b0:9a:ca:
f1:8a:76:c9:24:92:43:93:40:6d:43:30:6b:3a:6b:db:94:d3:
a2:8f:d2:0b:f4:69:89:97:b9:ba:90:97:59:7b:6b:32:6c:7c:
9a:2d:bb:ab:e8:27:b8:24:00:18:92:fc:30:50:25:f8:e5:9a:
0f:30:90:e2:75:74:4b:80:20:cc:0c:3f:83:0b:b0:ad:d2:e7:
bd:f2:b0:ae:1f:11:fa:05:48:18:26:4e:59:d9:b5:00:37:2c:
f5:1a:59:23:c2:20:c8:6d:74:08:c0:50:ce:af:9e:a5:96:08:
1a:79:0f:fa:30:d0:f3:f3:60:f5:5f:6f:f0:84:7a:fa:a5:3d:
26:00:09:33:35:33:17:28:46:66:ba:96:ec:51:2e:e7:9e:2b:
da:46:96:26:3c:ea:01:04:55:90:46:1a:a4:2b:e4:2d:8c:7f:
b5:db:d8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:37 2026 by rpki-client