Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
File: KV2FhrHf5iE-CywdK__BssjTUc8.mft (raw, json)
Hash identifier: aTf+PbYgdzPP5+AA3SlVhn8p+Ji00LxLXlguGJPvIPU=
Subject key identifier: 8B:51:DE:9D:7A:34:65:5A:80:A1:E2:94:E0:A1:03:7F:41:7C:E1:BE
Authority key identifier: 29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
Certificate issuer: /CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Certificate serial: 019D2516009A84B57521DCA7D8D440E846E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
Manifest number: 011A
Signing time: Wed 25 Mar 2026 13:01:32 +0000
Manifest this update: Wed 25 Mar 2026 13:01:32 +0000
Manifest next update: Thu 26 Mar 2026 13:01:32 +0000
Files and hashes: 1: KV2FhrHf5iE-CywdK__BssjTUc8.crl (hash: df21Vu56czc5bciV3X3a8bh9KEOVKtemdKJYHnV/y8o=)
2: RMsG8pQVuDko30N-hzzT26RjJ9Y.asa (hash: yi02C4KYzTGBREJtJL0ti8csY3NPFrvUw9hF+6s7XDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:16:00:9a:84:b5:75:21:dc:a7:d8:d4:40:e8:46:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Validity
Not Before: Mar 25 13:01:32 2026 GMT
Not After : Mar 26 13:01:32 2026 GMT
Subject: CN=8b51de9d7a34655a80a1e294e0a1037f417ce1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:7a:67:85:61:c5:56:73:42:85:95:20:5e:
8a:2f:61:a5:b9:33:3c:8f:ac:84:8e:f2:6f:4f:6b:
f9:ff:3b:17:dc:08:b2:91:53:0e:85:08:3a:31:0d:
bf:1d:fe:dc:d7:fe:94:97:ae:7f:a7:dc:06:6f:f9:
d5:5d:5e:0a:19:98:0a:43:b6:cb:b6:d7:5c:0d:55:
19:85:4c:23:57:8a:91:89:e5:c3:0e:36:b3:73:a8:
69:8b:38:81:c3:61:7f:40:03:89:3e:80:8f:52:7b:
fb:ed:fa:2e:e2:39:7f:8b:33:46:ec:4c:ce:9d:51:
79:1a:02:09:49:95:b1:46:ca:6a:c4:5a:67:5c:ed:
11:ea:2e:f8:46:cb:f1:f2:fd:ea:19:12:00:da:3b:
4b:e4:98:99:5a:75:47:26:74:9b:c3:ec:74:84:32:
a7:c3:75:11:7f:5b:ec:5d:89:72:51:00:21:7f:f7:
d6:d3:d1:d6:df:61:b2:fa:c9:2a:52:a8:1f:57:04:
48:dd:86:b0:67:4f:56:e2:73:33:e4:e1:90:5b:86:
23:13:63:06:09:bd:92:41:a7:10:2f:53:98:17:8d:
51:07:0d:29:92:b9:09:11:40:18:d9:7e:b4:19:36:
c3:cb:42:4d:17:93:f6:f5:a2:07:79:5d:8e:eb:60:
39:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:51:DE:9D:7A:34:65:5A:80:A1:E2:94:E0:A1:03:7F:41:7C:E1:BE
X509v3 Authority Key Identifier:
keyid:29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f4:e1:ac:ba:83:ee:f3:5e:9b:74:be:59:4f:6f:6c:59:e0:
e5:97:d4:09:a0:a5:0b:60:c0:a3:1f:bc:e9:e1:f3:59:b4:bf:
77:7a:d0:7d:09:8d:ef:67:b3:70:2f:c9:8c:08:9e:69:08:99:
42:fa:ed:b3:59:08:7b:7c:8e:54:8b:67:3a:65:ec:ef:b4:a5:
a8:ec:8c:52:12:7d:cc:17:33:9b:3c:d6:0a:69:15:e8:ad:05:
96:29:b6:14:3f:4c:ad:17:52:e4:f2:e7:01:a6:a0:59:90:f1:
9c:ed:19:ce:46:06:ac:7b:10:12:d6:e3:68:5d:7f:87:32:59:
24:38:74:da:e6:8a:cc:10:5f:1c:d1:c8:c8:5b:1b:33:4e:a5:
b5:d9:f3:60:36:44:2d:8a:78:f5:d0:d4:df:10:78:14:80:c2:
e0:7e:26:54:fe:16:74:dc:39:d2:a1:e2:b5:7b:e3:1f:12:38:
2f:c6:c4:61:ad:81:f8:c1:ed:dd:98:8c:fb:dc:83:28:93:8a:
54:40:ef:85:14:58:f4:e0:68:86:bc:94:aa:02:95:af:db:7d:
e0:69:b1:40:56:fd:83:0a:aa:a0:7f:55:59:47:2d:d5:a7:05:
27:12:69:b8:59:59:3d:97:81:af:90:22:77:f7:fd:e3:fa:59:
1e:0f:9e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:19:40 2026 by rpki-client