Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
File: KV2FhrHf5iE-CywdK__BssjTUc8.mft (raw, json)
Hash identifier: lcytt1DNhag6LxwXaUF/8OnVj+MUNPU75a7gAsx7yhU=
Subject key identifier: 00:FC:5A:6E:DE:13:A8:13:D7:88:51:EE:A3:B1:7F:BD:41:D7:E5:EF
Authority key identifier: 29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
Certificate issuer: /CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Certificate serial: 019F8EA2E6436A8FA90500EA0BEE5855FC03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
Manifest number: 025A
Signing time: Thu 23 Jul 2026 11:01:08 +0000
Manifest this update: Thu 23 Jul 2026 11:01:08 +0000
Manifest next update: Fri 24 Jul 2026 11:01:08 +0000
Files and hashes: 1: AP-xXNHU0gsTip0y1Z9Q1Az_oHI.asa (hash: mEQ7UyBPxSpqS6xnOjHHOLsuKuVx3u/9H3fQI1OuMmY=)
2: KV2FhrHf5iE-CywdK__BssjTUc8.crl (hash: egsH/87mNFOvy40PGttkcdSrphAUgltqfXaov4iqHZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:e6:43:6a:8f:a9:05:00:ea:0b:ee:58:55:fc:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Validity
Not Before: Jul 23 11:01:08 2026 GMT
Not After : Jul 24 11:01:08 2026 GMT
Subject: CN=00fc5a6ede13a813d78851eea3b17fbd41d7e5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bd:c3:ae:ae:9d:4c:01:74:fa:d4:4a:97:d5:
d1:2b:80:af:db:cf:09:50:3d:fc:48:b2:35:78:ed:
75:ea:1c:5b:56:30:a2:8f:db:87:78:99:e9:0f:96:
08:c0:4f:b3:60:05:b8:5b:a5:09:e2:a7:8b:ec:bc:
f8:91:70:ce:0f:11:27:96:68:2b:de:2a:c4:56:b4:
84:85:16:7f:4d:95:07:70:84:01:3d:85:7d:3a:37:
b1:1f:af:c8:e6:3c:69:7f:42:cf:4f:64:28:36:94:
05:30:62:03:9e:a9:74:f7:7e:eb:eb:34:4f:42:03:
74:37:6b:18:c6:44:ee:be:f7:0b:cc:d6:df:b3:44:
2a:26:e2:ce:6e:7a:f6:7b:96:98:0b:d4:cf:f2:32:
3e:49:82:f4:95:91:aa:51:57:a7:2e:f8:db:a0:51:
0e:0f:24:e6:d2:c2:5a:f2:51:eb:d3:8d:36:82:02:
e2:77:7e:ef:c9:1b:6d:4b:34:2a:be:dd:73:e8:2f:
6a:17:76:86:78:65:29:eb:07:5a:48:90:e9:0d:1b:
f5:41:a7:a6:e7:88:64:e9:28:05:a2:6f:87:86:8a:
1b:7f:bc:3a:c2:11:74:dc:3d:f1:55:85:8c:14:47:
6b:d3:63:d2:e0:f0:10:64:ac:79:2b:b7:51:82:f2:
61:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:FC:5A:6E:DE:13:A8:13:D7:88:51:EE:A3:B1:7F:BD:41:D7:E5:EF
X509v3 Authority Key Identifier:
keyid:29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9b:59:d3:21:42:3c:38:5f:50:a0:49:39:16:c0:aa:a9:cc:
a4:57:65:8f:6e:79:3f:e4:cb:26:2a:98:59:67:32:e3:17:5e:
ba:78:c5:a7:4e:aa:52:9e:1c:7d:c6:fc:d2:3d:38:c5:8b:28:
f2:08:37:da:7e:c2:7b:72:c2:70:e3:20:36:60:3e:b2:e9:33:
80:30:f3:bb:86:d9:87:70:63:48:d9:9e:c9:64:46:fd:aa:1f:
67:fb:37:21:83:f2:d1:60:8c:de:49:c3:ef:c5:bc:71:24:69:
1a:81:c3:d6:ed:c6:17:f9:c1:7c:b7:54:4b:fc:81:db:40:7a:
6b:e0:a8:3a:96:c9:5c:f9:b2:65:a1:f9:a5:1b:56:54:dd:b5:
08:e8:35:81:75:f6:66:76:ca:59:13:a9:96:e4:4e:35:17:f3:
e7:80:75:90:23:66:cf:ea:8d:f6:c3:c7:bc:8d:36:94:85:9e:
64:07:83:6d:83:a5:f2:f9:82:94:07:68:d4:80:b6:6a:d0:20:
b1:2f:3c:e2:f5:c1:63:bd:3d:21:78:8f:df:48:42:a3:ab:b9:
16:53:40:ea:78:1b:ef:c4:5b:ac:14:43:9c:21:e9:01:9b:fc:
b2:69:46:9a:ce:22:04:46:6a:1c:8c:87:85:7d:ec:72:7d:52:
71:20:92:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:39 2026 by rpki-client