Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: kkb79Y1N3oYwNHDczxuuCNe0O7/I4xXwftMEM+8Uago=
Subject key identifier: 0B:5C:F1:4F:A1:22:1F:97:D1:F9:E9:41:24:67:5D:C5:BB:2F:03:1B
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 019D26966B4110985AB847941FF76F7064F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 20:01:25 +0000
Manifest this update: Wed 25 Mar 2026 20:01:25 +0000
Manifest next update: Thu 26 Mar 2026 20:01:25 +0000
Files and hashes: 1: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: HHY+vJrbpbTCVE692r93HCiMxGtfX98YeuAB2BSGGs4=)
2: du4Uc1Tw1A4vtFUr5_RZZE4mr9c.roa (hash: VHvvL6d/GOaFCBnvC8MIBYdWi2shlhJJCY1UWI68tyA=)
3: u3hZ4Wo-VF-Q5oSlFkaUlkQvEKA.roa (hash: U2nT3r9q5huh0VOndjllE1MWO9Yu+mYw1a5lsTdkP+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:6b:41:10:98:5a:b8:47:94:1f:f7:6f:70:64:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Mar 25 20:01:25 2026 GMT
Not After : Mar 26 20:01:25 2026 GMT
Subject: CN=0b5cf14fa1221f97d1f9e94124675dc5bb2f031b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:82:c8:34:a8:3a:18:79:ef:5f:33:cf:2a:a0:
cc:29:77:7a:77:30:05:bd:62:ea:4d:3d:d8:c8:42:
7d:ff:2d:19:e7:27:ec:96:a9:46:a7:39:1c:ee:f7:
ac:78:25:ef:0d:60:4b:e1:21:da:7a:2e:4b:5b:92:
9b:34:1e:ad:7a:c3:24:8a:d5:66:cc:1e:06:68:45:
6f:d5:b8:83:6e:7f:11:1d:06:e7:8c:a8:52:43:05:
b0:0a:fa:d0:ad:a4:0e:71:8f:04:81:74:4b:57:c5:
e0:73:e6:ee:58:7b:14:87:f7:eb:9a:36:d8:17:a3:
a7:81:b2:a8:d3:75:d8:30:15:15:f8:53:38:0e:e2:
41:0b:2e:4c:1e:93:a1:45:48:e2:b8:3f:c2:7d:2c:
5b:aa:99:0f:b0:ce:29:7c:25:52:97:1d:65:cb:8e:
c9:30:4c:af:da:66:93:c5:43:fb:1e:57:69:f4:02:
2d:89:32:ca:62:ae:fc:57:03:1d:5e:84:74:86:9c:
40:8e:db:16:24:44:3f:4d:f3:37:5b:07:09:7a:31:
45:66:36:f7:07:7f:a8:cf:04:71:d6:79:aa:fa:d9:
25:d1:dd:d2:3c:fb:9a:6c:25:0c:d6:5d:3e:7e:c3:
36:58:92:91:2a:c6:dd:76:60:e9:ff:ef:35:f6:36:
f7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5C:F1:4F:A1:22:1F:97:D1:F9:E9:41:24:67:5D:C5:BB:2F:03:1B
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:40:e4:63:40:46:7f:37:13:d9:0c:6f:12:ee:06:7f:9d:27:
b9:6f:4a:a7:bb:55:36:17:3e:22:43:68:e4:33:73:26:53:7a:
c0:ce:65:e9:b3:f6:af:80:46:f4:c5:b7:a4:64:41:6f:23:e1:
34:e9:d3:f0:2a:c7:a4:cb:3c:b1:ea:20:ec:6e:bb:66:29:93:
78:7e:f5:08:cd:a6:10:a9:3a:cf:4c:4d:98:5f:6c:42:52:20:
6d:50:3b:5d:06:72:fd:22:1c:bc:ff:6b:3d:e9:02:b2:20:c9:
14:14:64:17:c2:3c:48:c1:12:99:63:ab:22:dd:50:3f:ff:69:
dc:9d:63:3e:84:f8:a3:8c:49:b2:8d:89:ee:9d:98:ba:ed:87:
77:93:34:1f:45:bd:30:a2:b8:b7:b6:c4:34:5c:95:2a:2f:48:
33:d5:00:cf:4a:49:d6:41:b1:95:a4:a7:53:33:70:23:71:61:
1a:8f:1d:e3:29:0f:f8:af:a0:fa:8e:f7:98:fe:33:a0:c0:f3:
a8:0a:b4:52:92:d5:a8:d6:43:cd:08:d7:70:86:33:65:3e:7a:
83:53:80:de:30:11:7e:61:d7:b7:2d:7f:83:83:df:83:bb:57:
00:b3:83:ef:27:a8:8c:39:12:61:71:4b:fc:42:df:99:40:97:
0a:d8:85:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mlmtBEJhauEeUH/dvcGT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NWE5MmI3NzhlZGRmYThkY2Q5MTdjYmI4N2NkZTMxYmEy
YzczMmYwHhcNMjYwMzI1MjAwMTI1WhcNMjYwMzI2MjAwMTI1WjAzMTEwLwYDVQQD
EygwYjVjZjE0ZmExMjIxZjk3ZDFmOWU5NDEyNDY3NWRjNWJiMmYwMzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/YLINKg6GHnvXzPPKqDMKXd6dzAF
vWLqTT3YyEJ9/y0Z5yfslqlGpzkc7veseCXvDWBL4SHaei5LW5KbNB6tesMkitVm
zB4GaEVv1biDbn8RHQbnjKhSQwWwCvrQraQOcY8EgXRLV8Xgc+buWHsUh/frmjbY
F6OngbKo03XYMBUV+FM4DuJBCy5MHpOhRUjiuD/CfSxbqpkPsM4pfCVSlx1ly47J
MEyv2maTxUP7Hldp9AItiTLKYq78VwMdXoR0hpxAjtsWJEQ/TfM3WwcJejFFZjb3
B3+ozwRx1nmq+tkl0d3SPPuabCUM1l0+fsM2WJKRKsbddmDp/+819jb3FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtc8U+hIh+X0fnpQSRnXcW7LwMbMB8GA1UdIwQY
MBaAFClakrd47d+o3NkXy7h83jG6LHMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUt
ZGNkYzVjZWUyNzZmLzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy83NTcwZTEtYWUzZC00OTAxLTljODUtZGNkYzVjZWUyNzZm
LzEvS1ZxU3QzanQzNmpjMlJmTHVIemVNYm9zY3k4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0DkY0BG
fzcT2QxvEu4Gf50nuW9Kp7tVNhc+IkNo5DNzJlN6wM5l6bP2r4BG9MW3pGRBbyPh
NOnT8CrHpMs8seog7G67ZimTeH71CM2mEKk6z0xNmF9sQlIgbVA7XQZy/SIcvP9r
PekCsiDJFBRkF8I8SMESmWOrIt1QP/9p3J1jPoT4o4xJso2J7p2Yuu2Hd5M0H0W9
MKK4t7bENFyVKi9IM9UAz0pJ1kGxlaSnUzNwI3FhGo8d4ykP+K+g+o73mP4zoMDz
qAq0UpLVqNZDzQjXcIYzZT56g1OA3jARfmHXty1/g4Pfg7tXALOD7yeojDkSYXFL
/ELfmUCXCtiFvQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:37:39 2026 by rpki-client