Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier: kt1MTEDVPEye1HEmMsyM7ojsv9cmvZSRJKIRQgeZMnM=
Subject key identifier: BB:A9:BC:40:4F:17:87:24:DF:55:D4:2D:79:4F:BD:AB:C8:93:C6:14
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 019E1CEB56B218E863C1A8CE242C40B5CD7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number: 0D05
Signing time: Tue 12 May 2026 16:00:45 +0000
Manifest this update: Tue 12 May 2026 16:00:45 +0000
Manifest next update: Wed 13 May 2026 16:00:45 +0000
Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: 1oBWkxykw8JhoBTk9sDNZH8ENct3HFMC97mXvhk2iUI=)
2: rpScVUsryyaJ-F5kWegdG7uTvQI.roa (hash: 90JJSR9HRiVyxHT2c148KiZc/jsGWJOiBBV+kTkgs7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:56:b2:18:e8:63:c1:a8:ce:24:2c:40:b5:cd:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: May 12 16:00:45 2026 GMT
Not After : May 13 16:00:45 2026 GMT
Subject: CN=bba9bc404f178724df55d42d794fbdabc893c614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:11:a9:f3:82:76:6d:63:ec:7e:d3:94:2c:
d9:bc:99:ce:97:04:bf:1b:e2:e7:ab:6b:40:d9:f4:
d1:e9:db:df:4d:1c:aa:8f:60:e5:cc:1f:54:74:41:
00:a8:3c:d2:16:ee:08:1b:13:fd:ae:e9:90:04:8f:
94:7e:b7:6d:bb:98:f9:ba:84:bd:8c:86:1f:73:dd:
1d:fb:be:64:96:d4:9d:f4:0a:b1:73:d4:f2:92:40:
ea:d3:c0:2e:8d:90:18:bf:30:22:20:39:71:10:47:
ee:0a:87:74:ef:ef:87:2e:af:ec:bc:64:62:27:3d:
a1:e8:9e:29:f8:2e:b4:63:b5:3f:aa:29:30:8e:e8:
67:e8:80:8c:d1:c7:ea:fa:eb:0d:98:8d:ee:65:6f:
48:44:08:0b:10:58:62:fa:da:f7:c3:f6:90:ce:cd:
68:12:0a:39:83:1f:c2:be:d1:4a:c0:82:5b:71:32:
cb:67:5a:67:91:78:ba:5c:ba:ea:be:ed:f7:c2:98:
02:6a:fb:3a:e4:c2:7e:68:90:aa:a4:ce:0e:f5:a6:
45:41:29:7e:d4:80:df:ab:8b:31:98:fb:48:04:43:
c5:51:b2:d8:6c:89:9a:70:d6:a9:e9:5e:2b:58:c9:
3e:7e:8e:16:5a:c0:e3:0a:75:49:4d:a0:aa:99:e8:
5b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A9:BC:40:4F:17:87:24:DF:55:D4:2D:79:4F:BD:AB:C8:93:C6:14
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:b6:01:44:34:13:73:31:73:f7:1e:5d:c6:f6:d9:06:7f:2c:
7b:de:f8:c9:ae:8f:ac:ea:fa:89:c8:95:65:ef:06:c9:12:6f:
23:71:35:02:69:bf:42:ab:3c:d6:fa:36:0a:8e:7f:c6:99:bb:
ee:7e:c2:c1:db:2f:17:93:c5:76:85:b7:0c:8b:19:cd:c3:20:
81:b7:96:b7:af:74:6b:69:89:17:61:46:c9:0b:6e:0e:3a:ed:
d7:03:90:27:39:48:1f:99:3d:2d:26:08:50:de:dd:b2:23:ae:
77:2b:9f:ef:a2:b0:ac:76:5b:8b:8f:44:32:2a:a7:45:2e:71:
18:fe:5f:a6:b7:ff:3d:c5:6f:0e:ab:db:e4:0c:fe:8d:41:8d:
79:98:dc:d5:42:e3:fd:41:6d:49:b2:d4:d7:c8:1a:04:c5:91:
b7:03:99:7e:a4:70:08:70:c4:1f:91:2e:0f:85:6a:9d:91:d5:
7a:3d:86:29:7e:a7:b2:ed:8f:32:72:34:c9:b1:c7:cd:ea:93:
fd:cd:e7:3c:63:87:4b:f4:37:8d:aa:93:cf:62:6e:ed:4d:33:
a2:55:3e:44:32:29:32:a5:42:37:4a:bd:a0:60:72:fe:ea:bc:
d6:92:99:12:b3:9a:13:54:b5:18:4e:4d:0a:e0:c8:36:2f:61:
83:eb:ac:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:29:39 2026 by rpki-client