Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: FkgErnctjDBoQ93vVD8omK0Uo9u5qzkNFg8JhophxAQ=
Subject key identifier: 0D:9D:4E:F9:6B:5D:FE:9D:C1:2B:9D:7B:A1:A3:A7:8E:9B:1A:3F:F2
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 019D28BB9A4A7C517173ED8B794E933C26CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:01:16 +0000
Manifest this update: Thu 26 Mar 2026 06:01:16 +0000
Manifest next update: Fri 27 Mar 2026 06:01:16 +0000
Files and hashes: 1: 4C5txelxptdoicijUbZlUymO1KI.roa (hash: n5OUnYu6DQ52eh4gaqVWM1OYGrwmKHVhRB5oPVeomXo=)
2: 8ood-uHTXVuPr-Uhci0MBhQD_Ok.roa (hash: D9cQAbFXlUASgQDnCIvuvRErkHMl72I/fsdMBXIjpGU=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: NMpj3xl2tovVMJ/KG4aXWfeAA8Bs8qKVNsIzxfyzZzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:9a:4a:7c:51:71:73:ed:8b:79:4e:93:3c:26:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Mar 26 06:01:16 2026 GMT
Not After : Mar 27 06:01:16 2026 GMT
Subject: CN=0d9d4ef96b5dfe9dc12b9d7ba1a3a78e9b1a3ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:35:a8:4b:9d:9d:bf:7d:11:dd:ed:bf:4e:fe:
8e:fe:de:c3:6e:ac:d9:4c:e1:ad:57:c3:fa:59:b2:
43:bf:3f:0e:4b:fe:1c:fd:9a:b9:47:d4:cb:09:02:
e5:a9:b7:6f:78:6e:b2:7e:2e:17:14:a5:3c:ab:9a:
3b:24:84:39:4d:af:eb:df:70:27:bc:8f:8a:6e:80:
50:6d:58:84:99:71:26:8d:35:19:28:ab:ff:17:f3:
50:af:94:4d:60:3a:be:09:f7:c1:84:63:b3:b9:75:
e5:ca:47:b9:6c:c1:5b:c0:77:e2:85:f9:a2:a7:20:
41:db:ef:b9:d4:b0:42:51:c9:fe:44:e9:94:d0:26:
ac:c7:cd:04:7c:0e:81:39:85:7e:c3:20:34:1d:f4:
53:16:2f:1b:05:c2:cf:85:ed:d4:79:60:07:4e:cf:
de:32:cd:5b:77:05:e8:3d:9e:dc:ac:a3:38:55:91:
3c:94:92:cd:d8:0f:a7:a8:05:e2:c5:83:63:48:c6:
f3:24:8e:8f:49:3c:83:46:dc:87:71:2d:3b:c7:fd:
0a:75:18:f6:80:1b:a6:0c:b6:6c:2d:1f:6f:3d:5e:
29:08:b3:a7:55:21:71:a6:32:3d:89:08:55:87:28:
b0:e7:9b:97:63:14:16:82:f1:53:66:a7:2e:b0:f1:
e1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9D:4E:F9:6B:5D:FE:9D:C1:2B:9D:7B:A1:A3:A7:8E:9B:1A:3F:F2
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:12:97:37:29:1d:4a:e5:f1:a2:6a:d4:39:b5:ab:05:eb:29:
9c:51:9e:e6:b1:7c:df:b7:8b:78:23:2f:00:b1:98:28:da:c4:
61:e5:0c:b7:90:16:06:67:c9:2e:e9:13:31:c9:3d:7a:ed:25:
80:4a:00:ee:41:2b:6e:7f:a4:1b:10:94:38:21:a1:4c:f0:a4:
6b:ab:72:46:9b:44:23:e8:93:ef:a3:69:49:d0:c2:e5:c2:57:
9c:0d:07:e7:5c:8c:bb:41:36:6b:e6:42:f7:3b:ed:ae:53:8f:
08:00:a7:d8:81:c0:c2:7e:88:15:d7:52:34:4c:ff:2a:4c:a1:
34:a2:ca:bd:ba:1c:be:69:43:55:d2:6e:9b:e1:60:cb:d6:3b:
c0:5f:b8:d7:23:51:4a:10:99:9a:db:cb:c6:87:85:46:1c:6e:
f5:76:40:0c:c1:a9:4c:2c:4b:a2:eb:74:4f:49:17:30:af:19:
9c:d0:92:38:ab:06:fe:ed:ad:c6:05:5c:60:6d:22:b0:5e:49:
53:ad:4d:d3:35:5d:fc:13:66:f6:24:b4:92:b4:f8:68:e4:2d:
b2:de:b5:a3:d9:0e:ea:98:f7:b6:e1:07:c7:e3:0e:ee:c6:d7:
36:18:77:60:e2:ba:17:9f:37:cd:df:9e:65:9e:de:08:87:7e:
90:f7:e7:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ou5pKfFFxc+2LeU6TPCbOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NTU3OWY1YjY3M2RiZTJlYmJhMzQ4Y2ZiMGY1NjEyNGNk
ZTcwNDgwHhcNMjYwMzI2MDYwMTE2WhcNMjYwMzI3MDYwMTE2WjAzMTEwLwYDVQQD
EygwZDlkNGVmOTZiNWRmZTlkYzEyYjlkN2JhMWEzYTc4ZTliMWEzZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DWoS52dv30R3e2/Tv6O/t7DbqzZ
TOGtV8P6WbJDvz8OS/4c/Zq5R9TLCQLlqbdveG6yfi4XFKU8q5o7JIQ5Ta/r33An
vI+KboBQbViEmXEmjTUZKKv/F/NQr5RNYDq+CffBhGOzuXXlyke5bMFbwHfihfmi
pyBB2++51LBCUcn+ROmU0Casx80EfA6BOYV+wyA0HfRTFi8bBcLPhe3UeWAHTs/e
Ms1bdwXoPZ7crKM4VZE8lJLN2A+nqAXixYNjSMbzJI6PSTyDRtyHcS07x/0KdRj2
gBumDLZsLR9vPV4pCLOnVSFxpjI9iQhVhyiw55uXYxQWgvFTZqcusPHhXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2dTvlrXf6dwSude6Gjp46bGj/yMB8GA1UdIwQY
MBaAFClVefW2c9vi67o0jPsPVhJM3nBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYt
MzQzYzRkMjRjMjNiLzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8xNTc0YzktMDFkNS00OGZkLTk4MGYtMzQzYzRkMjRjMjNi
LzEvS1ZWNTliWnoyLUxydWpTTS13OVdFa3plY0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhKXNykd
SuXxomrUObWrBespnFGe5rF837eLeCMvALGYKNrEYeUMt5AWBmfJLukTMck9eu0l
gEoA7kErbn+kGxCUOCGhTPCka6tyRptEI+iT76NpSdDC5cJXnA0H51yMu0E2a+ZC
9zvtrlOPCACn2IHAwn6IFddSNEz/KkyhNKLKvbocvmlDVdJum+Fgy9Y7wF+41yNR
ShCZmtvLxoeFRhxu9XZADMGpTCxLout0T0kXMK8ZnNCSOKsG/u2txgVcYG0isF5J
U61N0zVd/BNm9iS0krT4aOQtst61o9kO6pj3tuEHx+MO7sbXNhh3YOK6F583zd+e
ZZ7eCId+kPfnHw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:16 2026 by rpki-client