Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: yE2WGSII0T0h7IPyM2KV5RP2L8rtYldopSArYdbCppk=
Subject key identifier: F0:55:67:39:A2:CF:BC:87:18:4E:80:A2:52:23:39:B3:7F:3A:5D:90
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 019F92B6057C00A8BE1AE5A47BB539D4F200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 06:00:30 +0000
Manifest this update: Fri 24 Jul 2026 06:00:30 +0000
Manifest next update: Sat 25 Jul 2026 06:00:30 +0000
Files and hashes: 1: 4C5txelxptdoicijUbZlUymO1KI.roa (hash: n5OUnYu6DQ52eh4gaqVWM1OYGrwmKHVhRB5oPVeomXo=)
2: 8ood-uHTXVuPr-Uhci0MBhQD_Ok.roa (hash: D9cQAbFXlUASgQDnCIvuvRErkHMl72I/fsdMBXIjpGU=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: qUWODw6bex4s/nXxUHyZIqYyjdCLHVffSe5agW65AJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:05:7c:00:a8:be:1a:e5:a4:7b:b5:39:d4:f2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Jul 24 06:00:30 2026 GMT
Not After : Jul 25 06:00:30 2026 GMT
Subject: CN=f0556739a2cfbc87184e80a2522339b37f3a5d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:e1:96:78:9a:e4:ed:f7:b9:c7:d1:96:04:
17:fc:ea:0d:27:d6:3a:15:fa:b6:b0:b3:3c:90:83:
13:70:b3:6d:99:4e:18:03:e6:8f:53:71:80:4f:f5:
35:3b:c7:73:8e:aa:c6:b0:73:75:0e:86:ba:7c:c8:
80:4b:f7:3b:1d:55:a3:64:23:1d:49:4a:39:d8:0e:
46:cb:9e:cb:a7:ac:3f:21:58:98:cb:c1:99:5e:43:
91:7e:8f:9c:14:34:fb:29:f2:13:16:aa:75:3e:c0:
35:63:72:ff:06:1a:9d:a4:98:d1:43:89:73:f9:c1:
97:41:ed:28:c0:bc:15:8e:a0:c9:e0:df:02:24:03:
0b:d4:f3:0a:65:f8:d6:aa:3a:11:59:6a:d5:db:31:
37:ae:95:28:6f:b4:b1:5e:88:c5:5f:37:df:90:15:
ca:ba:0c:fc:ea:97:d0:01:54:a7:60:c7:26:10:31:
62:5a:1b:d4:84:61:93:c6:ef:3f:76:0b:db:41:0c:
78:fd:88:b1:a9:01:f3:df:1b:23:84:1d:d9:4c:ad:
40:91:92:e1:d0:3c:41:2e:56:bf:3a:e1:2c:7e:eb:
89:30:0f:1c:ac:dd:bb:eb:64:ff:c0:02:b9:0e:0f:
c6:05:e6:40:19:4c:07:6e:dd:bf:e7:a3:66:e8:d5:
0c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:55:67:39:A2:CF:BC:87:18:4E:80:A2:52:23:39:B3:7F:3A:5D:90
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6c:89:77:8b:bd:c4:ce:54:62:48:9a:0e:48:33:ab:f5:f8:
3a:7f:dd:c1:75:49:3f:5b:ee:56:06:4a:36:9e:89:69:b5:de:
89:79:2b:49:d3:24:b0:d3:8a:2a:f6:87:21:ed:15:36:c5:bf:
3c:76:11:ad:07:e9:29:e3:02:18:d6:75:b6:6f:7f:0a:91:78:
a3:c2:a1:c0:59:a6:04:7f:34:4c:03:26:24:a5:e4:ac:1a:bb:
6c:a9:c5:4b:25:44:1e:b7:3a:6e:f5:8e:5b:8f:79:52:80:a0:
0b:aa:ac:9a:43:3a:4c:92:48:2b:5d:8b:95:63:d3:f8:a9:0e:
6d:49:f5:ad:bf:90:3e:47:9f:4f:8f:e4:e1:80:05:4e:ec:8d:
b4:2e:55:b4:35:f8:ca:f2:33:67:f5:23:b4:52:5c:c2:2c:1f:
6f:db:4f:55:79:35:6b:80:59:96:8a:55:57:05:07:19:63:df:
e2:3a:46:6a:c6:94:09:c4:ad:3f:20:dc:f3:38:dd:cf:34:fb:
a4:0b:92:33:4f:53:9a:5a:82:0b:ca:1f:1d:62:52:96:4f:77:
6a:02:d5:dc:57:7f:5e:de:e1:e9:95:82:cd:46:8e:a8:26:a9:
dc:c6:86:b0:3a:98:c9:8f:5d:3a:31:7b:0d:2d:83:00:79:ba:
3f:cf:62:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:44:47 2026 by rpki-client