Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: SgPn18FToWGuTqQ73KaI3+q7Xnfy1S4ZJDaXRxS7Gf8=
Subject key identifier: F5:81:16:C0:EE:23:34:0D:6E:D1:A4:93:05:E2:BD:AA:03:27:E7:64
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 019E1DC788326938B80DEE78890AA48AE66B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 20:01:16 +0000
Manifest this update: Tue 12 May 2026 20:01:16 +0000
Manifest next update: Wed 13 May 2026 20:01:16 +0000
Files and hashes: 1: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: md0h9uAbGsIia63+QxbGl0Tm0hURPsP++mE/+Xk91CI=)
2: du4Uc1Tw1A4vtFUr5_RZZE4mr9c.roa (hash: VHvvL6d/GOaFCBnvC8MIBYdWi2shlhJJCY1UWI68tyA=)
3: u3hZ4Wo-VF-Q5oSlFkaUlkQvEKA.roa (hash: U2nT3r9q5huh0VOndjllE1MWO9Yu+mYw1a5lsTdkP+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:88:32:69:38:b8:0d:ee:78:89:0a:a4:8a:e6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: May 12 20:01:16 2026 GMT
Not After : May 13 20:01:16 2026 GMT
Subject: CN=f58116c0ee23340d6ed1a49305e2bdaa0327e764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:aa:b8:46:90:97:33:96:cd:92:4b:ce:72:
5f:4c:0f:33:ba:9c:7f:81:fa:27:a5:9b:93:70:f5:
b9:82:3f:10:00:c1:47:21:a2:fc:cc:6b:e2:4f:9c:
ec:c9:10:ac:0b:0b:13:e4:b4:35:e8:ca:c4:e7:ec:
79:ca:5b:78:d7:7d:ba:b3:53:e2:cd:9a:d1:fc:b4:
fc:3a:ad:73:4a:97:d9:e2:c1:b9:59:a1:38:52:1c:
ca:32:94:3b:2b:21:f8:11:87:7a:71:99:d9:fd:b6:
2a:00:81:5a:6d:6d:15:68:5e:cf:98:34:dd:c4:8a:
f5:72:6f:ed:91:fd:6c:59:f2:11:20:3e:e3:b2:8c:
dd:03:12:45:03:b8:9c:f3:d2:be:ae:3a:59:7e:09:
9e:d0:04:09:69:66:9c:e6:16:7a:4d:41:2d:a8:31:
e0:26:76:94:12:10:cb:60:6d:f9:13:1d:76:50:b2:
99:3d:be:6a:86:95:1c:a6:c1:97:3e:0b:9c:3e:df:
04:f2:17:05:16:b2:a7:75:77:5e:2b:6c:96:10:14:
8c:ec:ae:b1:22:c5:a7:2b:0b:a6:72:65:b3:51:58:
17:9a:52:01:c3:40:b1:78:af:c4:9c:66:00:1e:9d:
f6:6a:ea:ca:17:15:54:b0:0c:42:a1:d8:a6:57:28:
79:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:81:16:C0:EE:23:34:0D:6E:D1:A4:93:05:E2:BD:AA:03:27:E7:64
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:fa:fe:a4:fb:f4:9f:6d:4d:5d:c4:f9:d1:3d:b0:ae:b7:a1:
18:04:e7:f3:59:e2:56:60:67:5f:ca:8b:81:19:fe:35:b8:54:
a4:c1:46:f2:ef:67:dd:32:e6:d5:b1:54:8a:05:c8:2e:24:41:
d4:95:cc:dd:fd:df:f1:fe:87:ce:ba:be:2f:4b:94:83:33:0e:
7e:95:ff:ea:0c:cb:3e:d3:70:a8:de:d1:a5:32:07:28:58:3f:
f5:01:66:aa:b2:c7:34:b4:37:44:99:2b:35:3e:9c:75:9e:bf:
a1:9e:b1:f5:a5:2f:2c:99:ae:c4:d5:83:af:8e:bd:64:b2:d5:
b9:a5:f6:c6:ac:a0:2b:c7:d8:86:4c:5b:92:d5:40:ba:13:a6:
3f:fe:2e:f0:73:28:50:49:82:16:a7:b7:95:b7:8e:b8:c1:f5:
b5:e5:7b:92:1a:c6:e1:46:36:96:d4:8b:29:19:3b:e2:6f:af:
56:e7:db:24:1d:e0:6a:73:88:44:c6:9a:e2:1e:2e:53:f0:4e:
f8:69:28:96:f6:d9:e6:ae:56:a9:a0:fa:fd:41:b0:63:56:62:
2e:cc:f9:81:4b:00:bf:9b:81:a4:57:4a:c8:af:93:a8:39:db:
d2:22:a3:a8:fc:bc:fa:7f:a3:26:9e:28:f4:fb:42:90:b7:ba:
3e:be:5a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:46 2026 by rpki-client