Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
File: Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft (raw, json)
Hash identifier: +zJrD390Y2WkvdimPFIBBhP+U/gV9p4Mz9Hxn99cQCw=
Subject key identifier: DA:90:66:39:08:ED:F9:9E:DF:E3:D7:31:E2:73:49:A8:27:2E:E5:1C
Authority key identifier: 2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
Certificate issuer: /CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Certificate serial: 019F9437422AFFADEC2D4CBDDC2FCA7F0F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
Manifest number: 05BB
Signing time: Fri 24 Jul 2026 13:01:17 +0000
Manifest this update: Fri 24 Jul 2026 13:01:17 +0000
Manifest next update: Sat 25 Jul 2026 13:01:17 +0000
Files and hashes: 1: Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl (hash: VF7fU3tFBgwQGCwB+jvy+HyYB2sybYZEXgdEth4rUI0=)
2: bHxNQUrJC8Eh62QodMXQrjbnmgg.roa (hash: 1d3ZqMZQAbRLtC6TZNo/vpwZQcPk90gTwtcmQgBCgII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:42:2a:ff:ad:ec:2d:4c:bd:dc:2f:ca:7f:0f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Validity
Not Before: Jul 24 13:01:17 2026 GMT
Not After : Jul 25 13:01:17 2026 GMT
Subject: CN=da90663908edf99edfe3d731e27349a8272ee51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d0:d1:f1:4c:0c:17:c1:19:68:b4:0c:bb:98:
37:f6:b3:fc:ca:57:9a:ab:4b:7b:fc:37:eb:aa:8e:
64:72:a8:7c:ee:5c:ef:89:37:9b:be:8d:47:8c:df:
ba:b1:ae:a1:97:4a:fb:86:8d:92:d4:f2:b5:82:5b:
eb:09:3e:60:fd:d7:c2:df:3d:8f:3f:f2:e8:7d:bc:
46:d6:45:d1:d5:bb:39:fd:f3:a0:7d:71:84:d4:23:
d7:df:2d:c3:68:08:3c:51:29:43:e0:87:d7:10:2b:
2e:87:4f:94:1f:81:22:a2:43:63:e3:09:16:b6:7e:
30:5f:62:18:25:e1:21:20:60:30:c2:20:d9:3d:44:
37:8d:3d:71:ec:60:96:c1:a6:1a:b4:79:8c:70:39:
9e:d2:e6:ae:c1:31:cf:0d:ac:c2:7a:9c:23:e1:64:
bc:b0:2f:0a:e4:43:66:92:b4:18:8f:b2:3b:a1:97:
64:fa:49:7f:1b:75:fc:ea:9a:a0:2a:a5:00:94:91:
a3:52:d7:fb:7b:ba:b5:9c:15:64:99:03:ec:83:b2:
81:21:c0:d8:4a:2e:a9:22:46:e6:c7:b1:38:b1:b7:
23:01:df:8e:e5:7e:72:b4:5b:e0:57:16:a4:dc:55:
2c:f0:05:d3:da:3c:5c:5b:2e:8a:b4:8d:08:c2:12:
a4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:90:66:39:08:ED:F9:9E:DF:E3:D7:31:E2:73:49:A8:27:2E:E5:1C
X509v3 Authority Key Identifier:
keyid:2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:63:dc:b0:12:c8:5d:ae:79:46:88:39:52:86:5e:86:97:2e:
0d:d3:5d:88:e7:40:cd:97:03:f3:ea:08:4d:8d:b1:b9:58:ea:
6f:f6:15:37:69:28:a4:c4:a4:e9:b3:1c:90:c1:d6:c8:d4:5a:
d1:97:67:a0:3b:50:69:49:77:ca:0f:8b:7e:70:0c:a8:16:b2:
67:7e:af:94:5a:ad:f6:48:af:de:2b:9c:f9:d3:02:0c:0a:83:
2f:73:c6:81:d3:91:e3:9f:3c:bf:32:33:53:ec:87:ba:4d:d2:
a2:48:03:53:e5:53:7c:fe:b7:0d:d4:8e:54:8a:9c:43:94:80:
74:56:9c:46:c4:33:97:09:72:89:a8:d5:a1:46:0f:e2:7d:48:
0d:c0:f4:6b:e3:cd:c2:41:af:e1:74:ef:51:fa:63:c0:d5:d2:
25:fe:dc:38:92:08:11:a6:a1:5c:68:d1:27:65:cc:71:f5:3d:
2f:35:d0:ee:61:0c:d7:34:42:1c:51:ca:c0:cd:42:b9:5f:ac:
4d:44:10:ff:49:0c:da:f4:ed:30:62:e5:36:f4:0c:df:56:bc:
86:5a:0b:9b:cd:5a:c9:50:77:db:65:fb:db:76:f3:f7:7d:36:
8d:59:b7:52:ee:9f:63:0f:7c:93:fc:66:44:c4:8c:1f:a6:f7:
82:0f:90:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UN0Iq/63sLUy93C/Kfw8ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiM2Y2ZmE5ZjAzNzc2NWU3NGJkZjJhYzgyY2NiYWJjN2U0
ZmM4ZWQwHhcNMjYwNzI0MTMwMTE3WhcNMjYwNzI1MTMwMTE3WjAzMTEwLwYDVQQD
EyhkYTkwNjYzOTA4ZWRmOTllZGZlM2Q3MzFlMjczNDlhODI3MmVlNTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdDR8UwMF8EZaLQMu5g39rP8ylea
q0t7/Dfrqo5kcqh87lzviTebvo1HjN+6sa6hl0r7ho2S1PK1glvrCT5g/dfC3z2P
P/LofbxG1kXR1bs5/fOgfXGE1CPX3y3DaAg8USlD4IfXECsuh0+UH4EiokNj4wkW
tn4wX2IYJeEhIGAwwiDZPUQ3jT1x7GCWwaYatHmMcDme0uauwTHPDazCepwj4WS8
sC8K5ENmkrQYj7I7oZdk+kl/G3X86pqgKqUAlJGjUtf7e7q1nBVkmQPsg7KBIcDY
Si6pIkbmx7E4sbcjAd+O5X5ytFvgVxak3FUs8AXT2jxcWy6KtI0IwhKksQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqQZjkI7fme3+PXMeJzSagnLuUcMB8GA1UdIwQY
MBaAFCs/b6nwN3ZedL3yrILMurx+T8jtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jNTRmNDItOTEyZi00YjgxLThiMDAt
NWMwMGZjZDczNjE5LzEvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jNTRmNDItOTEyZi00YjgxLThiMDAtNWMwMGZjZDczNjE5
LzEvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGPcsBLI
Xa55Rog5UoZehpcuDdNdiOdAzZcD8+oITY2xuVjqb/YVN2kopMSk6bMckMHWyNRa
0ZdnoDtQaUl3yg+LfnAMqBayZ36vlFqt9kiv3iuc+dMCDAqDL3PGgdOR4588vzIz
U+yHuk3SokgDU+VTfP63DdSOVIqcQ5SAdFacRsQzlwlyiajVoUYP4n1IDcD0a+PN
wkGv4XTvUfpjwNXSJf7cOJIIEaahXGjRJ2XMcfU9LzXQ7mEM1zRCHFHKwM1CuV+s
TUQQ/0kM2vTtMGLlNvQM31a8hloLm81ayVB322X723bz9302jVm3Uu6fYw98k/xm
RMSMH6b3gg+Qwg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:32 2026 by rpki-client