Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: SWoQ+i7nrus/FprYsDfsFd1wSMMRq0Ugji8ISSJjJgE=
Subject key identifier: 34:18:DA:A7:C7:5D:3E:90:E3:CC:A8:5C:1E:E5:03:EA:BB:13:AD:9C
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 01A1DD9495E321EE555773656DA244207BC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 05:01:04 +0000
Manifest this update: Sun 15 Nov 2026 05:01:04 +0000
Manifest next update: Mon 16 Nov 2026 05:01:04 +0000
Files and hashes: 1: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: Ib0S92+9Ql72ilrwkv3eEpI0hwJFD1hLuOp3HJYuSJs=)
2: du4Uc1Tw1A4vtFUr5_RZZE4mr9c.roa (hash: VHvvL6d/GOaFCBnvC8MIBYdWi2shlhJJCY1UWI68tyA=)
3: u3hZ4Wo-VF-Q5oSlFkaUlkQvEKA.roa (hash: U2nT3r9q5huh0VOndjllE1MWO9Yu+mYw1a5lsTdkP+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:94:95:e3:21:ee:55:57:73:65:6d:a2:44:20:7b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Nov 15 05:01:04 2026 GMT
Not After : Nov 16 05:01:04 2026 GMT
Subject: CN=3418daa7c75d3e90e3cca85c1ee503eabb13ad9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:51:0c:6a:73:64:49:65:cc:db:f6:8c:dd:
4c:f8:ae:a7:00:f8:b5:6e:b5:20:2d:31:aa:5d:f8:
fd:42:f2:4d:67:d1:7a:cf:a1:1d:90:a5:aa:e2:6d:
3d:f8:47:0e:47:5e:42:43:d9:30:92:b4:dd:ba:67:
f1:ca:4c:a8:e0:02:d5:71:1d:44:11:6f:68:31:f0:
42:a6:83:63:bb:ea:ee:db:d6:f7:f0:a1:0a:44:54:
12:85:0f:e1:f9:fb:2a:d9:24:55:b9:35:18:1c:3b:
18:0e:89:6a:1e:c2:31:33:eb:cf:87:b5:ab:10:45:
7f:b1:29:86:25:d4:60:8d:5c:59:73:7c:2e:f7:21:
8b:db:5a:68:14:9d:9a:96:85:0e:7d:63:30:59:b7:
ed:67:0d:ed:32:81:7e:3e:66:a7:7f:92:9a:2d:03:
a7:0a:e5:f7:e8:e1:14:1e:98:62:2b:d3:5b:bf:d2:
a2:6d:c5:d2:51:df:c5:c1:86:71:da:74:89:3f:44:
cb:0b:ef:dd:9e:2b:d5:7e:9c:9b:d6:d5:da:22:c5:
b3:b1:fd:ff:14:3b:82:8d:75:99:fa:1c:e5:ff:2f:
f3:2a:29:8a:f8:34:4f:7a:d5:67:e1:3d:08:fa:2c:
2b:16:2b:d8:6b:15:88:72:21:6e:d6:f3:03:79:a3:
81:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:18:DA:A7:C7:5D:3E:90:E3:CC:A8:5C:1E:E5:03:EA:BB:13:AD:9C
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d1:ff:ed:0c:a3:2d:b1:db:cd:6a:da:88:d9:51:f0:8b:20:
f3:d4:45:ed:14:84:61:13:24:9a:d6:ca:77:15:d4:90:6b:ed:
c6:79:b2:80:fb:f0:3a:8e:bc:ac:a9:bd:34:96:31:2f:41:fb:
c8:76:7c:d0:c5:8f:6c:6e:21:8f:d8:f0:78:a9:d7:70:a0:a3:
88:eb:11:a4:9e:39:eb:ae:49:da:66:d3:bf:e8:00:b1:49:6b:
8b:45:97:e3:04:0b:5f:53:f3:a4:08:48:46:89:45:1f:4d:bb:
ab:6d:9f:87:eb:94:d1:8b:02:da:b8:9a:ce:45:2e:aa:5e:02:
ae:74:e0:75:53:2c:f4:03:be:18:3d:dc:69:84:d6:2c:fd:8e:
59:bd:b6:c0:af:13:fa:06:9e:19:a1:2e:8f:60:5f:9c:21:94:
0d:57:58:cc:e8:0c:5f:28:af:c2:f7:9b:c0:1e:0c:77:a6:7c:
b7:6a:c3:53:70:ce:49:b9:2b:c3:ff:b7:96:27:c9:63:5f:89:
b0:38:4e:88:e3:28:68:bf:6a:f8:93:57:5b:1f:c6:20:22:47:
f8:a7:f0:97:c7:1a:42:b8:5e:3d:39:68:b9:eb:88:76:83:c1:
25:a9:26:94:cb:d7:89:78:94:40:c4:18:67:5a:10:c4:8d:08:
89:c2:05:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:13:20 2026 by rpki-client