Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
File: KV2FhrHf5iE-CywdK__BssjTUc8.mft (raw, json)
Hash identifier: DwRnuQ8oMvhFXGDd+qAJp5UG9ek/YDaGrm5xiQAD5D0=
Subject key identifier: B1:ED:93:F4:19:BC:88:50:3B:51:A5:14:E5:55:2D:60:C7:6C:2A:2C
Authority key identifier: 29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
Certificate issuer: /CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Certificate serial: 019E1E355668CBDDE8CD07BDF4C2E7059DAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
Manifest number: 019B
Signing time: Tue 12 May 2026 22:01:12 +0000
Manifest this update: Tue 12 May 2026 22:01:12 +0000
Manifest next update: Wed 13 May 2026 22:01:12 +0000
Files and hashes: 1: KV2FhrHf5iE-CywdK__BssjTUc8.crl (hash: R8UlxiX+oMUHe8qm8w3eTEpZaGCo/iB6UWtV/NwOe88=)
2: RMsG8pQVuDko30N-hzzT26RjJ9Y.asa (hash: yi02C4KYzTGBREJtJL0ti8csY3NPFrvUw9hF+6s7XDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:56:68:cb:dd:e8:cd:07:bd:f4:c2:e7:05:9d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295d8586b1dfe6213e0b2c1d2bffc1b2c8d351cf
Validity
Not Before: May 12 22:01:12 2026 GMT
Not After : May 13 22:01:12 2026 GMT
Subject: CN=b1ed93f419bc88503b51a514e5552d60c76c2a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:cb:e1:7f:b4:2e:bf:85:34:b9:e8:d7:4f:78:
7c:53:be:dd:ac:1b:f3:67:3e:77:8d:34:46:4a:16:
c7:2c:ed:4b:8f:40:03:6a:eb:34:f0:b2:e0:1a:92:
67:fe:e5:31:65:82:38:28:b9:74:10:a4:6d:ba:65:
3d:dd:c0:c8:ce:c7:f1:0d:10:9b:68:69:2e:ba:02:
81:ec:41:a1:cb:a5:6f:0b:f3:9b:c0:f1:b6:2e:38:
25:30:2a:fb:0b:6d:2d:d8:c9:68:c1:16:3b:09:e6:
04:6e:6e:24:6b:7b:0a:8c:61:61:76:13:fa:31:c5:
fa:14:a4:a3:64:29:8a:99:07:10:72:0e:9f:5e:6f:
17:e9:f4:00:54:e9:c7:c1:2f:42:49:3a:09:76:a3:
7c:f8:36:99:ed:b2:b5:d0:02:21:51:9a:7a:d8:19:
fb:b9:16:ae:12:bb:23:db:02:ff:d0:8f:96:17:ae:
51:8e:42:35:07:50:f1:47:8d:bd:cc:10:87:42:75:
26:bd:8d:4e:f1:68:44:84:6c:74:20:63:29:a8:16:
bb:73:68:5c:9f:e6:3a:56:ff:d2:cd:4c:34:39:2d:
e3:45:d0:1e:20:12:43:5d:66:76:71:07:c5:5f:0f:
15:15:f6:bd:0e:ab:1c:87:cd:e4:18:b4:e6:1c:9d:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:ED:93:F4:19:BC:88:50:3B:51:A5:14:E5:55:2D:60:C7:6C:2A:2C
X509v3 Authority Key Identifier:
keyid:29:5D:85:86:B1:DF:E6:21:3E:0B:2C:1D:2B:FF:C1:B2:C8:D3:51:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KV2FhrHf5iE-CywdK__BssjTUc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7c3654-570f-4544-adeb-66bb30c27bc1/1/KV2FhrHf5iE-CywdK__BssjTUc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b2:13:13:ea:33:e1:e6:45:9c:9d:71:3d:0b:e5:13:91:1a:
6c:08:80:11:a2:a1:f7:ea:6f:72:c0:d3:61:86:73:66:3d:89:
07:84:8f:b7:c6:bf:11:7b:42:c8:ad:ec:ee:e9:2e:a9:ae:70:
c1:e7:9e:d9:a0:1e:21:3e:80:e9:97:5d:36:41:fb:f6:c7:28:
75:a3:69:ee:87:4f:4d:ee:98:09:41:c5:e1:4f:fa:ef:c1:9e:
b6:e1:d1:91:fe:ca:fd:62:78:3c:57:39:ad:c5:73:6c:5c:95:
ff:87:ed:e8:e3:e3:45:37:26:31:6c:e3:f4:83:d5:fb:5d:98:
a9:4e:16:05:09:42:82:12:c9:e1:ee:4d:cd:05:27:72:24:5b:
93:df:4b:6c:ef:01:af:81:d6:b2:d1:ca:ce:f0:df:ca:d1:16:
d6:cb:10:74:ae:25:cc:64:78:38:92:23:cc:ca:09:4c:88:94:
e2:49:11:43:c8:d2:84:6a:fb:9d:c0:a8:75:78:e5:65:69:8c:
d8:e0:97:8f:6b:8c:bc:17:9a:74:62:b2:8b:dd:08:78:a9:a6:
f0:a6:3e:09:01:1c:e6:c8:2a:46:6e:8e:26:60:44:e1:3b:ad:
2b:17:a0:de:14:33:62:0a:ab:64:73:05:bf:5d:d0:ea:7d:5c:
65:58:bb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:04:34 2026 by rpki-client