Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: hgM6RVKIenN+lTrJB+rO4bQYiG+M02eMufMQ3i2ebjY=
Subject key identifier: 84:69:2F:4C:9E:AE:0A:A1:14:12:D8:80:2C:70:B1:BE:AB:B5:32:C6
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 019E1DFE99AA3393E5EF038A415020148F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 21:01:25 +0000
Manifest this update: Tue 12 May 2026 21:01:25 +0000
Manifest next update: Wed 13 May 2026 21:01:25 +0000
Files and hashes: 1: 4C5txelxptdoicijUbZlUymO1KI.roa (hash: n5OUnYu6DQ52eh4gaqVWM1OYGrwmKHVhRB5oPVeomXo=)
2: 8ood-uHTXVuPr-Uhci0MBhQD_Ok.roa (hash: D9cQAbFXlUASgQDnCIvuvRErkHMl72I/fsdMBXIjpGU=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: KTKS+L9lkq90fFEV/m19zcmbHz6L+8ivLBQQP1DlxVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:99:aa:33:93:e5:ef:03:8a:41:50:20:14:8f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: May 12 21:01:25 2026 GMT
Not After : May 13 21:01:25 2026 GMT
Subject: CN=84692f4c9eae0aa11412d8802c70b1beabb532c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:de:dd:6e:b4:fc:66:b7:a0:92:60:16:73:ad:
bd:2d:99:ef:e4:7a:77:de:6f:8f:45:66:71:f4:10:
3b:fe:6f:3a:23:fc:65:97:b3:e2:65:90:72:8b:91:
fc:37:15:6f:ba:78:ec:68:2f:2a:85:36:60:f4:d6:
27:5c:d5:2c:9c:07:ba:1c:b1:d0:3d:ec:11:31:85:
42:37:4b:e8:57:e0:76:7a:5e:ae:09:be:98:ef:51:
f8:b0:9c:6a:5e:ca:30:d2:ec:94:c3:94:61:36:6e:
c4:78:ee:8d:e9:7d:4f:f8:9d:e6:07:24:d9:d0:ff:
d0:96:00:e2:c3:36:9c:9f:e6:76:0f:6a:e0:4f:01:
be:86:70:41:a3:73:30:88:aa:ca:66:44:f7:2b:21:
aa:b9:41:ad:d6:b8:f7:03:a3:31:2e:ed:1b:cf:e3:
90:2a:8b:95:51:d5:0f:22:da:44:e0:ab:b7:fc:7a:
33:8e:7a:f2:5e:ff:f7:a2:d9:1a:9a:cd:91:ac:8a:
04:d4:63:c3:71:e1:c6:28:69:81:26:6b:d1:3d:a0:
26:5b:69:03:2f:43:34:c2:de:21:97:02:a7:6e:21:
60:77:ef:5a:95:ae:67:18:48:68:41:98:be:8e:74:
df:8b:01:de:44:67:9a:81:5c:78:1a:b8:8e:fe:69:
0f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:69:2F:4C:9E:AE:0A:A1:14:12:D8:80:2C:70:B1:BE:AB:B5:32:C6
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:00:0c:67:3a:02:5c:e8:79:70:df:d4:81:36:8f:df:e4:a7:
28:61:b1:0d:12:f2:66:7f:3b:2c:58:57:e4:92:0b:8b:11:4e:
d7:f5:98:d2:63:fd:14:42:b7:24:44:90:1b:15:38:a8:97:ae:
cd:85:d4:04:6b:5b:68:36:a2:dc:f8:49:d9:da:da:29:41:0d:
ac:e0:a7:be:da:cd:70:2d:d1:15:d4:94:8a:32:99:98:33:cf:
02:18:19:5a:fc:90:06:1f:7c:f4:b1:52:18:a8:9c:d4:59:65:
44:12:57:1c:2a:b1:e7:81:24:e3:a2:86:8f:6c:52:f4:bc:b5:
a1:3c:af:5d:1b:21:27:db:87:31:22:3b:05:52:6d:94:c1:45:
4b:87:10:91:e4:25:e1:7c:66:01:3d:41:c2:84:85:a1:e8:56:
e7:a5:75:ca:f4:7d:6a:7a:27:14:82:65:77:dc:4a:69:02:73:
40:20:24:81:a6:dc:1e:7a:80:45:6c:b0:27:e2:16:99:98:43:
da:4f:4d:65:02:0a:da:29:1f:61:10:8c:ec:cd:43:f8:d5:dd:
76:e4:34:20:f0:95:bd:de:19:ac:39:7f:91:ee:be:51:b4:d6:
11:71:c4:72:08:db:b5:d9:30:19:11:8b:67:fa:d5:e9:f1:17:
e3:d5:41:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:19:52 2026 by rpki-client