Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: pwww9KawaDzOTvCdqo+a6P6ce5o3V5QevULFCjRWjwg=
Subject key identifier: 2D:B4:72:B8:90:0F:3A:F8:03:3F:4A:88:05:C8:49:AF:CE:9B:8D:11
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 01A0D15B9099E4F5A89ACF19F6664F28EA73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 03:00:33 +0000
Manifest this update: Thu 24 Sep 2026 03:00:33 +0000
Manifest next update: Fri 25 Sep 2026 03:00:33 +0000
Files and hashes: 1: 4C5txelxptdoicijUbZlUymO1KI.roa (hash: n5OUnYu6DQ52eh4gaqVWM1OYGrwmKHVhRB5oPVeomXo=)
2: 8ood-uHTXVuPr-Uhci0MBhQD_Ok.roa (hash: D9cQAbFXlUASgQDnCIvuvRErkHMl72I/fsdMBXIjpGU=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: 95D6XrjpiG/etyVcJCXNXM4o4Xw1YpX0eGfkHgKr5I0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:90:99:e4:f5:a8:9a:cf:19:f6:66:4f:28:ea:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Sep 24 03:00:33 2026 GMT
Not After : Sep 25 03:00:33 2026 GMT
Subject: CN=2db472b8900f3af8033f4a8805c849afce9b8d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9b:da:95:87:30:86:86:24:0a:68:a3:73:17:
13:a9:71:7f:d2:b2:ef:21:2e:d2:3c:2b:52:ea:78:
e2:3e:93:fa:9e:a6:75:22:ca:b1:10:b1:a9:eb:4f:
81:0b:b0:00:89:82:b3:b7:a9:b2:bc:83:40:55:9d:
b8:60:a7:45:d1:bf:2d:b5:df:86:c2:59:76:7c:ca:
04:86:e9:ab:9c:0f:ea:6a:d4:45:80:6b:aa:42:a3:
bd:e7:05:98:41:4b:5a:98:47:dc:54:5f:4f:4f:be:
e0:bb:43:73:3d:9d:10:ea:fc:24:a2:2e:cc:82:ac:
32:60:bf:8d:c2:26:84:3b:e6:22:99:9b:4b:62:d6:
84:93:4f:0c:14:2d:b0:a1:9b:00:b2:bf:46:2b:ea:
86:fa:22:84:bd:97:f0:a4:35:bf:b2:eb:80:69:ad:
9d:7a:7b:a5:0b:74:45:cd:00:05:41:51:f2:1e:8d:
89:98:03:39:eb:5b:e9:42:ce:34:5d:93:01:72:aa:
03:b6:29:31:f8:55:6a:b4:d1:55:a8:e6:07:38:0b:
aa:0d:13:42:1c:40:1c:ea:c8:e1:89:a6:a9:30:7c:
11:c6:e4:81:8e:44:aa:46:68:1c:24:1b:d5:8f:d5:
3c:25:69:9c:25:49:57:bc:e6:1c:b2:77:c4:37:75:
32:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B4:72:B8:90:0F:3A:F8:03:3F:4A:88:05:C8:49:AF:CE:9B:8D:11
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:4c:f0:10:65:76:c4:a8:8c:ca:54:96:cb:b8:11:39:a3:76:
ba:41:e7:a4:c9:e1:d1:6d:ba:61:81:84:ec:68:0b:b1:12:1f:
cd:eb:4b:d5:52:bf:9f:1c:5a:63:df:bd:5e:f3:22:4d:d7:2a:
63:1f:93:eb:e6:e6:2c:91:26:a2:7e:20:a1:77:07:94:8f:87:
db:78:a9:87:c5:b9:9e:7f:fd:37:d4:30:d3:5c:1d:8f:30:33:
3c:d8:9a:50:b7:ce:6c:71:62:31:2d:f8:5c:e9:82:f3:e3:51:
44:36:1f:89:14:9e:dd:d1:e9:3b:77:f6:16:8c:e0:cf:63:af:
4c:62:9e:8c:4a:31:62:a0:a1:9d:c5:69:df:55:ac:fc:4b:75:
f5:c0:f7:63:e4:4c:06:64:20:48:35:e9:10:68:a1:2e:47:4c:
60:48:7c:61:aa:28:61:74:c7:06:5b:fe:af:a1:49:20:23:b5:
11:5d:cc:e3:e6:88:05:a1:eb:34:c8:32:de:34:e7:62:de:46:
a5:a1:af:32:28:bd:cf:cf:cb:a7:73:f2:16:c8:e6:55:40:fa:
67:1f:72:e1:4c:2c:e4:16:30:4a:92:75:7a:d0:4e:d3:b5:da:
6b:38:f0:a8:c3:c0:03:51:8f:42:50:b7:6c:0a:70:e7:54:a3:
e3:bc:43:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:30:25 2026 by rpki-client