Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
File: KV2FhrHf5iE-CywdK__BssjTUc8.mft (raw, json)
Hash identifier: mzzlYWqwThmE2S2xg/ypy5W/JR1CyVHtKrgzjkfgAoU=
Subject key identifier: 08:59:C0:F2:59:5E:7D:B6:AC:65:3C:48:02:AD:BA:8D:2A:6E:7A:38
Authority key identifier: 29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
Certificate issuer: /CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Certificate serial: 01A0CF35C8C33B3E08CA6F61BE68C1C19371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
Manifest number: 0300
Signing time: Wed 23 Sep 2026 17:00:03 +0000
Manifest this update: Wed 23 Sep 2026 17:00:03 +0000
Manifest next update: Thu 24 Sep 2026 17:00:03 +0000
Files and hashes: 1: AP-xXNHU0gsTip0y1Z9Q1Az_oHI.asa (hash: mEQ7UyBPxSpqS6xnOjHHOLsuKuVx3u/9H3fQI1OuMmY=)
2: KV2FhrHf5iE-CywdK__BssjTUc8.crl (hash: U543uOMv9MedeH23ExDtqzhiMWI4ALQedbbSpblqAAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:35:c8:c3:3b:3e:08:ca:6f:61:be:68:c1:c1:93:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Validity
Not Before: Sep 23 17:00:03 2026 GMT
Not After : Sep 24 17:00:03 2026 GMT
Subject: CN=0859c0f2595e7db6ac653c4802adba8d2a6e7a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:fd:ce:82:ef:e6:1e:fa:52:ae:d7:ff:06:
43:5c:cb:fd:16:dd:4a:e1:a1:ce:7c:b7:d0:87:3c:
a9:28:c4:67:72:cf:86:a0:a0:63:4c:2f:50:5d:b5:
f2:14:e5:be:20:f3:d6:7e:a9:db:db:66:69:10:d2:
b0:a2:c6:a4:6f:c5:fa:16:03:34:ba:52:10:cd:be:
e3:30:20:bf:d7:87:bc:c2:b1:10:cb:21:4c:20:39:
a8:f3:81:91:71:4d:ac:64:a2:9e:05:86:a4:75:d9:
3b:fa:50:e6:80:84:42:53:93:de:80:53:fc:ce:85:
f5:e9:5e:51:53:33:8c:3c:79:fe:16:65:c3:33:54:
d1:36:14:65:8e:d3:78:c3:ce:0a:df:14:2a:57:da:
25:77:2e:80:d0:12:34:06:30:c2:fc:fa:5a:7a:27:
69:8a:cd:4b:bc:a9:06:a1:eb:d6:a1:8d:af:e0:76:
d1:29:e0:6f:bd:90:3f:24:87:0a:ad:bd:a9:c6:2d:
f3:de:1d:76:1c:4d:e3:83:a2:ae:2c:a9:f0:8a:db:
ae:80:a4:1e:1e:28:8d:e4:7b:ea:4e:ad:92:1f:10:
1f:2b:08:06:d1:55:2a:8a:d3:d5:0c:52:05:40:5e:
59:70:63:8e:f2:01:56:8c:e1:f6:67:14:be:1d:01:
f9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:59:C0:F2:59:5E:7D:B6:AC:65:3C:48:02:AD:BA:8D:2A:6E:7A:38
X509v3 Authority Key Identifier:
keyid:29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:be:63:da:79:ef:8b:ab:07:7c:71:2e:ac:07:5d:90:bf:21:
5e:08:c2:a5:67:be:58:fd:ee:7d:1c:78:38:0d:37:e3:53:9c:
52:a3:a7:c8:33:74:39:c4:86:cc:6f:30:20:5b:e3:7d:9e:77:
50:3b:d4:5b:27:97:43:46:4b:cc:89:c9:2a:71:c1:2f:42:14:
d4:8d:ea:ed:d0:25:0c:54:2a:6c:51:47:91:61:a4:4e:e1:7d:
c7:74:09:cc:be:46:5d:67:46:ae:84:7b:9c:05:bd:6a:75:44:
7f:64:42:75:ce:fb:8e:73:7f:a4:36:65:07:a5:4b:5d:cd:55:
8b:e0:3f:24:2d:3f:c2:9b:8e:1c:d8:5b:cb:f6:57:b2:02:e4:
86:2a:90:ef:ef:bc:67:7c:d9:2b:cc:82:49:e3:c6:12:0f:21:
70:db:92:60:cb:92:ef:a1:f3:23:26:4a:ed:44:56:e5:20:a4:
25:48:de:6f:36:b0:c3:66:a9:1a:af:7e:e2:a5:47:23:c2:42:
ac:b3:7a:e2:a3:c9:aa:6c:2b:3a:13:52:44:48:3b:20:4a:60:
78:81:88:77:61:4d:29:4c:83:0c:aa:0c:6f:b0:4d:c8:a3:b2:
dd:d9:8b:74:eb:05:f7:43:c2:9a:95:cf:fb:27:c0:83:66:1c:
72:db:4b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:05:46 2026 by rpki-client