Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: 0r2gzhScyn+8dZoBUnwmrdtxJIYGdGjhpmLOSyeUqFU=
Subject key identifier: CB:AB:4C:58:9D:B2:71:85:F2:37:45:31:B5:0A:FB:9F:04:00:53:4C
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 01A0D6F060D5A44501091E0CAF4AAE9A2508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 05:01:12 +0000
Manifest this update: Fri 25 Sep 2026 05:01:12 +0000
Manifest next update: Sat 26 Sep 2026 05:01:12 +0000
Files and hashes: 1: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: h6kwbomNIqBVWl2HGV3wAYjTcHZRqrGTtKg2GhVhU/0=)
2: du4Uc1Tw1A4vtFUr5_RZZE4mr9c.roa (hash: VHvvL6d/GOaFCBnvC8MIBYdWi2shlhJJCY1UWI68tyA=)
3: u3hZ4Wo-VF-Q5oSlFkaUlkQvEKA.roa (hash: U2nT3r9q5huh0VOndjllE1MWO9Yu+mYw1a5lsTdkP+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:60:d5:a4:45:01:09:1e:0c:af:4a:ae:9a:25:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Sep 25 05:01:12 2026 GMT
Not After : Sep 26 05:01:12 2026 GMT
Subject: CN=cbab4c589db27185f2374531b50afb9f0400534c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b1:3c:80:90:f0:bb:5b:41:f7:5e:5f:8a:9a:
58:d7:cb:d5:99:89:5b:89:d6:d0:f3:b6:10:c3:5c:
ee:96:bf:94:00:81:19:ba:ab:08:8e:a0:7b:dc:04:
f5:50:63:9b:bc:b9:e5:5f:1d:6f:45:7a:c8:51:ce:
d0:b4:3f:60:18:0b:f6:48:70:61:89:e7:ed:ad:59:
a3:2b:31:cd:76:5d:b8:b3:07:64:54:6b:69:b5:66:
e2:f6:32:6b:cb:e4:cb:aa:17:49:53:90:2a:72:50:
71:d6:66:13:52:e3:e3:8b:50:86:a0:3a:d6:65:67:
64:51:4f:55:41:bc:20:f0:a1:a7:d2:f7:94:9d:d1:
b1:0d:42:f3:ed:86:b5:1b:cd:4c:03:80:3e:4f:d3:
69:63:ea:b5:84:94:69:96:7a:60:ec:b7:4f:2b:b9:
5e:3d:37:f9:62:2f:22:0f:89:72:b2:1b:28:7c:71:
66:d6:03:8b:e6:3e:d7:00:51:5c:f8:e6:11:76:17:
41:5c:8c:4f:bd:f9:fc:f1:1a:38:29:6f:dd:bc:c1:
2f:ea:d4:31:83:bd:4f:14:8d:b4:96:2f:51:a8:5d:
f6:3b:9e:36:f8:3f:e0:97:46:82:b8:c8:d3:21:71:
c3:d3:3b:4e:43:41:a3:04:5b:2d:f6:09:47:57:28:
5c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AB:4C:58:9D:B2:71:85:F2:37:45:31:B5:0A:FB:9F:04:00:53:4C
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a8:5c:de:53:d7:ae:ed:f6:71:ad:70:da:f6:d9:c6:79:1e:
9c:79:89:23:c2:14:b1:26:ac:94:1e:c2:26:c5:03:30:b5:55:
42:02:8f:ae:b2:c6:ea:eb:d2:cc:00:b7:40:ec:7c:41:75:81:
98:71:21:32:ca:04:6b:d5:42:0e:ba:84:5d:39:39:53:86:43:
fa:cc:26:38:2c:cc:6a:d9:bd:c2:a8:4d:0d:70:31:ed:87:64:
67:9c:31:9c:6b:05:8e:f1:c4:fe:43:2f:55:ea:58:bd:34:79:
a7:31:6a:f1:ce:d2:1c:2d:fc:dc:4b:e8:9d:ce:45:34:aa:fb:
70:24:de:70:47:ff:76:13:01:31:cd:92:32:21:a7:7d:e6:29:
0e:5b:34:32:ff:f3:f5:8d:2f:82:25:42:d0:32:ba:4d:d8:b2:
81:ae:1b:0b:f4:43:64:e0:6c:81:13:a4:34:52:89:f2:5b:04:
ce:6f:d6:ec:d7:91:3d:6f:e3:01:1d:57:16:77:c6:c7:de:cc:
0d:32:22:eb:90:0d:82:50:98:7f:de:50:5c:a8:79:a8:fa:d2:
3a:70:92:c1:4e:73:84:38:00:65:7c:aa:68:87:ea:41:26:f3:
b7:00:af:21:a1:cf:c6:27:33:3a:b6:65:ca:16:f5:43:3c:d2:
90:99:d3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:01:12 2026 by rpki-client