Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier: uWD88/Bm3B3bxgxN5ZNpqBPLqAZwATc2HiPiSpjuo2o=
Subject key identifier: 6C:5C:22:16:F6:B9:BE:DC:43:BB:75:BF:70:1A:DB:EC:52:4A:09:F0
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 01A1DEA7A05B756E76443174F06B8DDDEDA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number: 0EF7
Signing time: Sun 15 Nov 2026 10:01:29 +0000
Manifest this update: Sun 15 Nov 2026 10:01:29 +0000
Manifest next update: Mon 16 Nov 2026 10:01:29 +0000
Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: Ijt6k0ryOX9RUlWZUSm7iO/pevsM0ZwLLelC4+PzP84=)
2: rpScVUsryyaJ-F5kWegdG7uTvQI.roa (hash: 90JJSR9HRiVyxHT2c148KiZc/jsGWJOiBBV+kTkgs7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:a0:5b:75:6e:76:44:31:74:f0:6b:8d:dd:ed:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Nov 15 10:01:29 2026 GMT
Not After : Nov 16 10:01:29 2026 GMT
Subject: CN=6c5c2216f6b9bedc43bb75bf701adbec524a09f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:08:9e:cf:e3:d4:55:02:b6:8d:74:b4:17:78:
cb:6e:16:d3:2c:c6:55:22:c1:00:f4:75:c1:21:18:
c4:e8:be:46:e6:b7:1d:f1:2b:89:5c:7f:dc:ad:97:
c7:5b:3e:9e:c6:4a:fe:10:46:05:bb:02:66:11:2b:
68:93:02:5d:74:f8:ae:d1:fb:5c:7f:69:dc:48:e8:
53:a0:9f:86:f5:c5:1e:29:a7:aa:35:30:1b:8c:23:
47:14:ba:c4:98:ce:ac:4f:8d:86:31:b1:7d:4f:ca:
11:20:c3:4d:19:96:65:47:a8:7e:e5:bb:4b:f8:88:
ae:8c:a4:38:8f:f4:26:bc:76:05:33:e9:9a:29:53:
1d:a5:ed:21:46:1a:b9:cb:ce:ab:57:ec:95:5b:37:
fd:bf:ad:73:1e:61:49:b6:58:91:29:13:a9:18:b8:
24:99:f3:a6:cf:9a:cd:e6:fe:21:94:64:d5:84:87:
47:11:57:36:b8:a9:e1:8a:2d:8b:53:55:4c:a2:a6:
6f:51:c5:47:07:f8:d7:5c:22:e2:97:c6:5f:25:2e:
49:09:4e:c1:d9:7d:d8:df:d6:58:60:59:d6:73:72:
e2:5d:92:f5:e4:eb:1a:39:0c:a8:e7:e9:45:2c:b8:
24:d1:ab:65:d2:a1:69:2e:e9:98:e8:9b:68:31:90:
ce:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5C:22:16:F6:B9:BE:DC:43:BB:75:BF:70:1A:DB:EC:52:4A:09:F0
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:4d:3c:85:97:ad:17:ca:57:7a:90:c2:82:8d:36:6b:b3:71:
3b:1d:d9:4d:71:4c:6c:62:85:36:ae:18:55:68:fe:e9:76:6e:
d4:6f:21:99:0d:35:c9:a5:89:cd:d0:43:8d:84:0f:ce:66:38:
9a:82:4c:62:f2:50:4b:f4:88:4d:42:99:bd:74:00:aa:b7:45:
95:79:15:c6:45:fa:bb:84:57:de:ee:2e:ee:b0:a3:de:c3:cd:
d1:ae:b9:68:5c:b7:3e:c1:9b:75:25:1b:cb:1c:3e:8a:ce:40:
b3:3f:7e:c8:96:91:0d:32:14:7d:9f:ff:8f:fc:e2:cb:62:82:
0c:89:ac:0f:a6:07:55:f6:e4:17:98:c4:e7:fe:32:ce:ef:24:
b2:ea:74:c7:2c:6b:61:85:54:9d:e4:e8:9c:b8:34:26:c1:75:
8b:50:fe:90:5c:15:0b:a5:5e:4b:c6:4f:d4:46:83:f7:b8:09:
fc:6a:99:e5:74:6c:d4:c3:98:ec:f2:4a:9c:dc:d7:46:0d:d4:
1f:eb:bd:62:9b:ea:14:18:2c:f2:f1:07:2a:de:66:7e:88:c9:
46:46:6c:6f:d7:f9:a0:fd:52:51:03:78:2c:d7:59:f3:63:ca:
53:c4:dd:4c:bf:08:e9:3a:02:73:e6:5d:72:ff:1b:94:94:20:
f4:98:91:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:15:46 2026 by rpki-client