Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
File: KzX2qYV9e-AmB6RNiVKojKS6bT8.mft (raw, json)
Hash identifier: PZT8rJ/c/rY+GRTROMQyn1KXMc7/rCSSVjLbgt3SOdE=
Subject key identifier: 91:3A:DB:0C:33:F1:1A:3F:F3:7F:80:04:BB:F9:40:B3:4F:DB:6F:F4
Authority key identifier: 2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
Certificate issuer: /CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Certificate serial: 01A128B187757B550E34A445191E5CDE02AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
Manifest number: 0286
Signing time: Sun 11 Oct 2026 02:01:25 +0000
Manifest this update: Sun 11 Oct 2026 02:01:25 +0000
Manifest next update: Mon 12 Oct 2026 02:01:25 +0000
Files and hashes: 1: KzX2qYV9e-AmB6RNiVKojKS6bT8.crl (hash: XMt+29DH/96m0cC4+/uo4ym7EiMC7aDVOj5B5s6NR9Q=)
2: XRhRqov_VqyHRFFYOkd67TDUlfI.roa (hash: ML2iFZdBnrqeYBDgHkNF/6ovrR0UHPTGixgV/99EaNU=)
3: k424Nbk6SvvJjvOfKup0qsQXNRI.roa (hash: a50oRNVhCvCgBUG8ZaNohlcl3wba1rL6P6UcpuYYzJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:b1:87:75:7b:55:0e:34:a4:45:19:1e:5c:de:02:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Validity
Not Before: Oct 11 02:01:25 2026 GMT
Not After : Oct 12 02:01:25 2026 GMT
Subject: CN=913adb0c33f11a3ff37f8004bbf940b34fdb6ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5b:5b:88:0d:7c:a0:98:a4:3f:e6:ec:ee:e0:
0f:19:41:bd:92:68:41:e9:32:1f:60:7a:91:43:1a:
46:64:a5:1f:12:f2:6e:e3:29:d0:37:a8:2f:c1:77:
32:80:f9:98:a2:63:60:c7:8c:69:1b:e3:72:39:6d:
53:7a:95:1a:50:8f:85:6d:88:6d:c2:e8:af:94:7c:
1c:3e:e4:17:73:d7:81:5b:f5:a1:ee:7f:be:a6:6b:
89:2f:b3:ba:ce:3e:47:bb:c5:ba:0b:2f:ba:10:eb:
5c:7a:29:6f:5d:b0:8e:3d:44:ab:6d:ab:54:a1:d5:
21:37:5a:32:6f:a6:af:6b:ad:ad:ef:98:db:4f:f8:
48:6f:a6:70:ad:b9:d9:f2:d1:14:fa:fc:33:2a:92:
be:0f:96:de:e5:ff:8f:d9:f4:44:39:4f:1d:59:24:
62:8c:dd:28:ab:33:d2:4f:e6:27:57:16:93:b2:8a:
b2:24:a5:5a:15:01:e3:8d:71:79:78:48:c1:16:b4:
51:b3:2f:ef:c0:1d:31:b5:43:92:54:bf:7c:10:d9:
94:e3:45:fc:0a:d8:d2:4a:21:26:86:f3:2c:45:74:
e7:8b:23:21:f3:89:ca:0d:7c:0c:21:05:a4:43:a8:
27:aa:76:79:f4:e8:e4:39:63:34:ee:0a:c9:de:a0:
b8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3A:DB:0C:33:F1:1A:3F:F3:7F:80:04:BB:F9:40:B3:4F:DB:6F:F4
X509v3 Authority Key Identifier:
keyid:2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7c:7d:d1:93:63:91:cb:f5:c5:e0:e9:20:02:26:f1:1f:ec:
12:00:46:44:cd:50:7c:cf:eb:7d:0f:3f:49:a1:6e:74:58:d8:
88:d9:42:2e:07:dc:a4:aa:10:6a:4b:4c:0b:8f:7b:6e:c0:34:
e2:de:be:5f:e0:25:21:90:ff:64:4d:01:37:0b:8a:6f:da:8d:
4d:ad:70:37:f7:13:70:aa:7b:b5:ae:c6:ed:a2:01:ba:47:1b:
fc:e1:7f:de:b6:ba:a4:86:49:0e:4c:f1:6f:53:fb:c5:96:c9:
f9:58:98:66:23:3b:1e:12:b0:2c:37:23:9a:6c:ef:43:ed:fd:
79:03:f0:85:14:c9:3a:4a:19:df:60:dc:cb:7f:ab:08:1f:3b:
e7:fc:f2:92:62:65:b5:20:29:2e:4e:c6:a9:30:fc:00:99:72:
cd:38:f1:19:e4:b2:b6:a9:50:96:dc:57:de:55:86:c1:b0:ba:
f8:43:22:f0:86:24:e3:67:88:5d:62:60:7e:2e:55:6a:62:e8:
4d:84:11:25:f5:57:46:f2:e7:39:92:0c:dc:f4:16:b1:99:04:
37:3c:fc:06:70:eb:a5:88:44:02:b7:ca:f6:5e:d8:93:4c:88:
c8:ba:11:3f:dd:35:9d:76:a3:8f:27:c5:8e:ba:d7:c5:01:b3:
81:76:f5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:54:16 2026 by rpki-client