Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: 4P7wD0UkVf359PB6jRtYXUsWcmBXicYdoluBRrm4gw4=
Subject key identifier: 86:7D:7F:72:BA:BA:9D:19:E1:3E:F9:1E:1E:3A:16:59:DB:F6:55:9C
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 019F965C6F056A8F83CE20B75DE0F4AC3936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 23:01:07 +0000
Manifest this update: Fri 24 Jul 2026 23:01:07 +0000
Manifest next update: Sat 25 Jul 2026 23:01:07 +0000
Files and hashes: 1: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: cUWh5sGbmRhGIDfviuCyE0Ajj0Rx+pJ/nr/WPBedOqc=)
2: du4Uc1Tw1A4vtFUr5_RZZE4mr9c.roa (hash: VHvvL6d/GOaFCBnvC8MIBYdWi2shlhJJCY1UWI68tyA=)
3: u3hZ4Wo-VF-Q5oSlFkaUlkQvEKA.roa (hash: U2nT3r9q5huh0VOndjllE1MWO9Yu+mYw1a5lsTdkP+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5c:6f:05:6a:8f:83:ce:20:b7:5d:e0:f4:ac:39:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Jul 24 23:01:07 2026 GMT
Not After : Jul 25 23:01:07 2026 GMT
Subject: CN=867d7f72baba9d19e13ef91e1e3a1659dbf6559c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:45:ac:98:31:d9:a9:08:94:79:b2:2d:ce:45:
ad:a7:4f:6c:43:da:dd:58:a7:7a:df:5e:29:03:ff:
f2:73:98:0c:e4:17:8b:b2:48:6c:ef:01:31:4d:34:
27:9a:85:0e:7e:77:e2:e5:9b:8c:50:ed:ad:b0:a1:
a4:df:d4:0c:b1:50:64:fc:99:c0:62:1b:fe:6c:48:
c1:4f:08:11:6f:96:13:12:d5:d5:62:84:8b:e3:b2:
3e:f5:16:20:bc:bb:7a:07:46:83:27:df:23:5b:e1:
72:a1:55:c2:74:e1:47:ac:7d:0f:a1:13:59:11:09:
dd:92:17:24:6a:68:f5:9d:7e:73:e4:2f:9c:ef:00:
8f:e8:b6:e3:ec:af:c4:6f:2b:fc:a1:2e:a8:a3:30:
31:67:29:32:6f:e2:c9:a5:24:e5:b2:ef:d5:09:66:
c1:05:51:eb:74:80:9c:7f:47:21:ed:33:35:1e:c3:
0f:75:9c:70:d5:9b:cd:6d:b9:04:74:6e:8d:c6:67:
34:c8:d7:e7:7a:00:c7:99:3e:57:a6:cf:9e:79:73:
00:cd:c7:64:fb:d6:2d:87:83:15:98:c0:8e:40:4f:
b2:d3:bd:ab:44:df:10:2e:5c:14:4f:e7:0e:8c:ba:
be:af:dc:7d:97:c5:06:29:94:19:88:bf:f2:d8:6a:
36:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7D:7F:72:BA:BA:9D:19:E1:3E:F9:1E:1E:3A:16:59:DB:F6:55:9C
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a0:83:dc:b1:7c:9d:10:a5:e3:34:52:ef:76:9d:b2:b1:34:
12:15:5a:4a:2b:ec:d5:3e:76:26:5c:36:95:14:ad:6e:56:fb:
02:a5:76:a4:3c:6e:5d:16:8c:d9:91:5b:13:64:f8:4c:08:b8:
19:65:14:a5:bf:b3:49:3b:70:f3:67:0c:0a:10:5b:b1:c5:29:
2d:eb:59:8b:0e:eb:2a:5c:c7:a4:0a:ce:f6:2d:6a:64:0e:a0:
85:14:88:b2:f9:48:ff:53:4e:82:62:9a:b1:21:6a:0b:33:80:
e2:e0:5d:72:99:1c:bf:3a:b3:0f:d8:f6:ac:99:47:fd:cc:14:
20:28:85:2f:33:98:7c:09:7a:42:6d:7a:59:a1:47:31:32:99:
58:e7:99:f3:ad:da:e1:63:b1:5c:4a:4f:28:ff:44:c1:80:d2:
5d:52:0d:66:04:44:ff:2e:c4:b5:9e:18:3d:2a:22:9c:7f:7e:
93:b0:40:fd:0e:6a:26:a2:60:db:67:bb:54:05:21:e7:7b:e8:
b3:32:06:49:6b:fa:65:be:5f:ca:58:af:39:18:65:7f:d9:d0:
5e:96:5f:0c:92:d4:36:1b:67:5b:9a:74:81:d7:d8:3d:71:9a:
10:4c:ca:4b:3b:ae:55:a9:9d:93:a5:e6:a2:ec:ec:15:5c:f1:
db:e5:f3:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WXG8Fao+DziC3XeD0rDk2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NWE5MmI3NzhlZGRmYThkY2Q5MTdjYmI4N2NkZTMxYmEy
YzczMmYwHhcNMjYwNzI0MjMwMTA3WhcNMjYwNzI1MjMwMTA3WjAzMTEwLwYDVQQD
Eyg4NjdkN2Y3MmJhYmE5ZDE5ZTEzZWY5MWUxZTNhMTY1OWRiZjY1NTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6UWsmDHZqQiUebItzkWtp09sQ9rd
WKd6314pA//yc5gM5BeLskhs7wExTTQnmoUOfnfi5ZuMUO2tsKGk39QMsVBk/JnA
Yhv+bEjBTwgRb5YTEtXVYoSL47I+9RYgvLt6B0aDJ98jW+FyoVXCdOFHrH0PoRNZ
EQndkhckamj1nX5z5C+c7wCP6Lbj7K/Ebyv8oS6oozAxZykyb+LJpSTlsu/VCWbB
BVHrdICcf0ch7TM1HsMPdZxw1ZvNbbkEdG6Nxmc0yNfnegDHmT5Xps+eeXMAzcdk
+9Yth4MVmMCOQE+y072rRN8QLlwUT+cOjLq+r9x9l8UGKZQZiL/y2Go2jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZ9f3K6up0Z4T75Hh46Flnb9lWcMB8GA1UdIwQY
MBaAFClakrd47d+o3NkXy7h83jG6LHMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUt
ZGNkYzVjZWUyNzZmLzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUtZGNkYzVjZWUyNzZm
LzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6CD3LF8
nRCl4zRS73adsrE0EhVaSivs1T52Jlw2lRStblb7AqV2pDxuXRaM2ZFbE2T4TAi4
GWUUpb+zSTtw82cMChBbscUpLetZiw7rKlzHpArO9i1qZA6ghRSIsvlI/1NOgmKa
sSFqCzOA4uBdcpkcvzqzD9j2rJlH/cwUICiFLzOYfAl6Qm16WaFHMTKZWOeZ863a
4WOxXEpPKP9EwYDSXVINZgRE/y7EtZ4YPSoinH9+k7BA/Q5qJqJg22e7VAUh53vo
szIGSWv6Zb5fylivORhlf9nQXpZfDJLUNhtnW5p0gdfYPXGaEEzKSzuuVamdk6Xm
ouzsFVzx2+XzCQ==
-----END CERTIFICATE-----
Generated at Sat Jul 25 02:03:35 2026 by rpki-client