Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier: 3Jyk5RhJVqYghzZyAcqjTln31t84yOidul7iqI6/348=
Subject key identifier: 5F:12:96:B0:44:82:A4:75:9C:7C:DE:06:8A:DA:D2:D1:3A:BA:72:F6
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 01A0DDCE0435A517BE979F2EFD28D29D53F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number: 0E72
Signing time: Sat 26 Sep 2026 13:01:01 +0000
Manifest this update: Sat 26 Sep 2026 13:01:01 +0000
Manifest next update: Sun 27 Sep 2026 13:01:01 +0000
Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: /1oLfrDp4xFqGHQ8/qWi/3MufReGsul1FvjlTjqy+WY=)
2: rpScVUsryyaJ-F5kWegdG7uTvQI.roa (hash: 90JJSR9HRiVyxHT2c148KiZc/jsGWJOiBBV+kTkgs7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:ce:04:35:a5:17:be:97:9f:2e:fd:28:d2:9d:53:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Sep 26 13:01:01 2026 GMT
Not After : Sep 27 13:01:01 2026 GMT
Subject: CN=5f1296b04482a4759c7cde068adad2d13aba72f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:6a:3b:60:98:45:08:60:83:a0:a5:e8:90:
cd:40:ff:f5:3e:60:7d:03:dd:0a:a9:8c:c0:58:b2:
f1:00:54:cb:23:d4:5e:f9:f7:f4:91:5d:4d:ed:d6:
80:29:7c:65:98:f2:c3:09:de:5d:4e:aa:0e:7c:6f:
95:7e:63:2d:ab:55:07:05:bd:17:ea:83:ef:15:f2:
2a:af:a4:de:5d:35:9a:2b:52:d5:f4:c7:56:14:92:
51:35:30:2b:63:dd:ab:38:c7:3d:5c:99:27:04:72:
3e:70:41:d8:54:be:4c:e5:c7:41:d4:3d:8a:0e:56:
50:f4:96:d1:35:72:9b:43:c8:5d:38:d9:fe:72:5f:
ad:49:a3:3d:5c:57:bd:67:73:0f:43:ef:bb:55:6f:
cd:d6:c5:49:cd:90:c4:6b:74:72:ac:5e:85:11:d9:
45:4a:c0:a2:5f:b4:b0:e4:5a:38:ab:53:2a:e8:74:
e7:b7:6f:a0:73:10:ca:a2:4f:1b:da:b1:a7:8a:7c:
2e:82:00:27:2d:36:c2:d1:03:a6:66:fc:07:ae:ba:
b8:9a:17:1c:cf:99:1b:79:51:4a:7e:48:90:13:07:
78:e2:de:f5:75:3f:10:1a:74:21:4e:63:6b:31:7c:
68:0c:26:a7:ee:af:f3:9c:01:cb:f9:20:1b:c2:55:
f0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:12:96:B0:44:82:A4:75:9C:7C:DE:06:8A:DA:D2:D1:3A:BA:72:F6
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:49:e7:84:94:33:71:40:fa:e1:11:13:47:25:bf:f7:ba:c5:
93:b9:41:71:52:d8:a0:4d:2d:1a:24:f6:58:49:4b:c9:64:69:
68:5c:24:65:19:11:14:b9:12:92:6e:56:92:c4:c0:0a:c7:67:
5e:b4:ad:7c:7c:99:f4:00:34:2e:36:51:5c:55:e9:65:c9:17:
e6:97:22:6b:5e:a9:bd:3d:69:ba:f8:15:0f:c0:0a:2a:22:20:
4d:c8:e2:7c:7c:7d:ec:db:b0:f8:63:32:ad:3f:55:b2:16:27:
19:21:12:c8:c6:84:03:31:7f:f7:5c:9a:f3:f3:1b:78:f6:68:
95:1a:c4:b2:7d:0c:07:20:29:8c:db:23:b1:76:f7:7e:af:26:
26:90:9c:59:9a:e9:d5:e2:32:8d:17:09:24:d4:f6:09:c9:8d:
5e:36:17:ef:a2:5c:78:1e:e6:5d:c6:c1:32:25:49:f5:21:2e:
b2:da:94:78:c5:7d:12:e1:08:cd:de:bf:97:29:7d:93:a9:69:
2a:ab:e9:3d:fe:12:df:38:01:4b:67:e0:47:4e:2b:61:32:eb:
18:ed:7a:c6:d6:2d:4e:28:f6:5e:c1:da:ec:81:8b:04:53:6b:
2c:1c:14:fd:f1:93:42:c7:fa:a7:57:56:70:97:8b:70:27:cb:
19:3b:33:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:39:30 2026 by rpki-client