Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier: AmHIAyyMdOBkgVO5Uo6UySFblYLJgpUQP6Y2oX994So=
Subject key identifier: 76:A4:13:9D:A3:85:91:A4:4D:C7:54:93:51:35:BB:7A:E8:0D:62:AC
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 019F91A3AAFE9ED4BAB08598F41340311B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number: 0DC6
Signing time: Fri 24 Jul 2026 01:00:50 +0000
Manifest this update: Fri 24 Jul 2026 01:00:50 +0000
Manifest next update: Sat 25 Jul 2026 01:00:50 +0000
Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: TAf9yqcrQrezLuIVe41co0KHkNYCdzNMrBr18ZiqmbE=)
2: rpScVUsryyaJ-F5kWegdG7uTvQI.roa (hash: 90JJSR9HRiVyxHT2c148KiZc/jsGWJOiBBV+kTkgs7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:aa:fe:9e:d4:ba:b0:85:98:f4:13:40:31:1b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Jul 24 01:00:50 2026 GMT
Not After : Jul 25 01:00:50 2026 GMT
Subject: CN=76a4139da38591a44dc754935135bb7ae80d62ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:37:f5:d0:c7:00:ae:f2:7c:bc:f2:c6:9e:
98:77:dc:f1:fb:f8:bb:ea:13:5c:db:34:7c:7b:34:
62:ad:09:35:e6:86:3a:6b:b3:c3:8d:18:b8:f0:8e:
ee:a7:55:f9:6d:b5:b4:e4:1a:25:36:4f:ae:79:30:
15:12:3d:a1:42:1a:39:dd:e1:5b:43:31:82:a3:5a:
e6:fd:57:08:57:67:0b:0f:53:da:79:40:f0:42:a8:
3a:5b:a4:77:2a:11:42:2d:e0:f2:ff:a6:49:47:58:
ee:3f:46:a4:cc:4b:b7:14:60:53:f4:6a:50:b6:a4:
13:04:2d:fa:19:32:75:c5:0b:26:85:99:28:ed:38:
10:19:d9:1c:7a:ee:29:1b:fc:bf:88:28:29:26:00:
4a:94:ba:d9:55:be:68:50:a8:5e:9c:2c:fd:f2:46:
0d:5c:b2:08:da:79:7c:96:01:23:e0:37:b5:37:1a:
52:bf:1f:d7:95:78:26:5b:11:72:a9:52:f5:98:ba:
ae:6f:39:81:25:12:10:8f:ab:bb:12:3e:8c:82:df:
06:b0:c6:a7:82:5d:77:af:e6:c2:db:aa:9f:67:09:
11:eb:3a:e7:c2:91:7d:51:01:82:15:bd:83:10:e6:
2c:6f:5f:da:45:0e:44:82:51:85:89:b0:90:9f:66:
99:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A4:13:9D:A3:85:91:A4:4D:C7:54:93:51:35:BB:7A:E8:0D:62:AC
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:0d:51:61:f1:ce:14:8a:77:42:d1:e9:f4:03:4a:e6:92:b1:
02:9b:95:57:33:73:bf:b4:e0:de:46:4f:08:17:56:ef:57:52:
8f:23:5b:8d:7a:f8:a0:9c:4d:4e:74:e6:75:a7:a6:10:6d:a4:
74:50:e7:fe:43:01:3f:de:28:44:4a:44:e9:7b:57:4a:fc:34:
9b:9d:0f:83:6d:b7:37:83:81:fa:e6:cd:d4:6e:7b:cd:1d:98:
c5:5d:15:83:50:25:73:af:0d:44:83:30:ed:c7:f6:5e:18:66:
f3:99:ae:a7:22:ab:e0:f7:4a:4b:45:de:5e:55:11:52:04:a0:
5c:76:c0:91:cd:f1:4f:92:8c:4e:37:6c:04:44:74:98:c2:77:
bc:b0:cb:4e:dc:f5:9b:7a:04:3e:93:59:70:e1:81:5c:73:51:
c4:e1:bf:e4:a7:9d:ab:35:25:cf:71:15:dc:8a:97:27:23:82:
a3:19:ca:8a:7a:8d:fa:01:1a:af:e3:5a:ab:f6:fe:20:47:fb:
0f:c6:97:3f:3f:37:ad:97:4a:a9:3c:7b:6f:1f:8e:0a:c0:df:
d9:d7:38:cf:f9:ac:7b:59:11:28:62:ae:21:cc:a1:26:62:89:
29:60:14:a4:46:2f:74:26:e1:be:9f:7c:5c:22:d2:43:06:b9:
ef:06:90:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro6r+ntS6sIWY9BNAMRs6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMzI3MTExNzA3Njg5NTBmZGQ5ZjlkZWZlNjUxZjJkNWEx
MzEyYmUwHhcNMjYwNzI0MDEwMDUwWhcNMjYwNzI1MDEwMDUwWjAzMTEwLwYDVQQD
Eyg3NmE0MTM5ZGEzODU5MWE0NGRjNzU0OTM1MTM1YmI3YWU4MGQ2MmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqA39dDHAK7yfLzyxp6Yd9zx+/i7
6hNc2zR8ezRirQk15oY6a7PDjRi48I7up1X5bbW05BolNk+ueTAVEj2hQho53eFb
QzGCo1rm/VcIV2cLD1PaeUDwQqg6W6R3KhFCLeDy/6ZJR1juP0akzEu3FGBT9GpQ
tqQTBC36GTJ1xQsmhZko7TgQGdkceu4pG/y/iCgpJgBKlLrZVb5oUKhenCz98kYN
XLII2nl8lgEj4De1NxpSvx/XlXgmWxFyqVL1mLqubzmBJRIQj6u7Ej6Mgt8GsMan
gl13r+bC26qfZwkR6zrnwpF9UQGCFb2DEOYsb1/aRQ5EglGFibCQn2aZ1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHakE52jhZGkTcdUk1E1u3roDWKsMB8GA1UdIwQY
MBaAFJMycRFwdolQ/dn53v5lHy1aExK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hZmNkNDAtMmE1MC00YzExLWJhNDct
ZTExZmZlYzg5Y2Q0LzEva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hZmNkNDAtMmE1MC00YzExLWJhNDctZTExZmZlYzg5Y2Q0
LzEva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASA1RYfHO
FIp3QtHp9ANK5pKxApuVVzNzv7Tg3kZPCBdW71dSjyNbjXr4oJxNTnTmdaemEG2k
dFDn/kMBP94oREpE6XtXSvw0m50Pg223N4OB+ubN1G57zR2YxV0Vg1Alc68NRIMw
7cf2Xhhm85mupyKr4PdKS0XeXlURUgSgXHbAkc3xT5KMTjdsBER0mMJ3vLDLTtz1
m3oEPpNZcOGBXHNRxOG/5KedqzUlz3EV3IqXJyOCoxnKinqN+gEar+Naq/b+IEf7
D8aXPz83rZdKqTx7bx+OCsDf2dc4z/mse1kRKGKuIcyhJmKJKWAUpEYvdCbhvp98
XCLSQwa57waQhw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:22 2026 by rpki-client