Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
File: KzX2qYV9e-AmB6RNiVKojKS6bT8.mft (raw, json)
Hash identifier: c665W5aAj6Go23DuWZcZaniczpNYdJKPakTvsiqL+6M=
Subject key identifier: EC:A8:88:C5:EB:0F:73:DD:3E:E8:31:55:2A:E2:78:21:08:00:23:E7
Authority key identifier: 2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
Certificate issuer: /CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Certificate serial: 019E205A77282EFF75C6394ECA2BE7322C17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
Manifest number: F4
Signing time: Wed 13 May 2026 08:01:00 +0000
Manifest this update: Wed 13 May 2026 08:01:00 +0000
Manifest next update: Thu 14 May 2026 08:01:00 +0000
Files and hashes: 1: KzX2qYV9e-AmB6RNiVKojKS6bT8.crl (hash: 3EgD52lANzTJkqaJfmS+jWmRColG+SqCuvL3sDVFXdM=)
2: XRhRqov_VqyHRFFYOkd67TDUlfI.roa (hash: ML2iFZdBnrqeYBDgHkNF/6ovrR0UHPTGixgV/99EaNU=)
3: k424Nbk6SvvJjvOfKup0qsQXNRI.roa (hash: a50oRNVhCvCgBUG8ZaNohlcl3wba1rL6P6UcpuYYzJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:77:28:2e:ff:75:c6:39:4e:ca:2b:e7:32:2c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Validity
Not Before: May 13 08:01:00 2026 GMT
Not After : May 14 08:01:00 2026 GMT
Subject: CN=eca888c5eb0f73dd3ee831552ae27821080023e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:57:d4:a6:51:7c:8c:0e:fa:aa:a6:07:85:
01:ae:9c:1c:56:31:ee:14:4c:54:0b:6e:cb:47:f2:
8f:d8:cd:09:fd:5d:bd:36:84:b4:bd:2e:98:8f:be:
8d:17:44:28:43:57:45:b9:53:85:4b:2d:2c:c4:37:
28:e2:67:81:e5:40:54:32:0e:98:df:ca:45:33:8c:
9a:1e:2b:ee:43:1f:08:e6:0b:0c:47:fc:ce:0e:6a:
eb:4c:bc:b5:ee:c9:55:ee:42:97:a6:44:11:89:2f:
46:10:6f:b3:92:4c:19:d4:31:4d:a6:1f:c1:d6:89:
12:99:7e:f6:28:80:4c:46:39:07:91:90:d6:0c:46:
a6:2b:e5:88:6f:eb:d4:3d:2a:03:23:76:be:28:6c:
68:e0:5c:ab:2f:75:6b:ee:86:c7:79:b0:46:13:d6:
6f:74:90:25:54:28:05:82:92:a5:4f:8b:a3:02:a5:
06:30:c4:3c:7a:6a:f5:53:18:6b:c4:2e:42:e0:df:
c3:b7:61:55:d3:16:8f:47:bf:39:5e:49:2d:88:38:
92:35:65:e5:0c:7a:c0:1f:57:2d:10:08:86:e1:3e:
0d:99:a6:48:18:e7:5b:da:18:6a:d3:4d:27:48:18:
32:50:5f:52:10:35:20:e7:b5:95:0b:5a:35:37:a6:
41:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A8:88:C5:EB:0F:73:DD:3E:E8:31:55:2A:E2:78:21:08:00:23:E7
X509v3 Authority Key Identifier:
keyid:2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a3:31:23:82:bc:ed:08:da:d0:4c:5e:d1:64:6d:b0:f4:31:
b4:a8:21:c8:12:72:ff:e1:c5:e1:7d:72:d5:f7:d7:aa:7b:c1:
24:00:3b:2e:33:19:b2:49:6b:b7:55:e3:e1:2a:2b:6e:6a:3f:
92:f0:77:24:30:42:48:1d:49:b4:ad:b2:ba:63:28:6f:8c:a6:
10:de:6e:1a:d9:96:98:94:0d:61:d5:92:2d:2a:8f:d4:15:7a:
ea:62:46:e2:da:c1:3e:3c:0c:72:23:d3:78:02:65:ae:6c:65:
16:2d:12:77:78:4e:46:98:67:c5:26:76:ab:c9:28:1d:e5:a3:
63:97:f1:68:8b:85:72:8e:50:74:d1:9b:1e:e3:a9:0c:7b:88:
00:31:de:bf:ae:38:8d:16:a8:08:8a:b3:f0:e5:0e:7f:69:68:
b5:7a:d0:f1:26:3e:5a:7a:03:35:1e:c8:29:2c:4c:b6:47:c6:
dc:9a:4a:a6:58:0c:43:8a:aa:86:88:90:3f:93:83:bf:21:72:
9f:b1:6d:2f:5d:1a:c4:ed:98:90:dc:0c:f8:2f:ad:ed:87:25:
99:ae:71:1a:cc:18:05:c9:81:ae:ae:ff:fe:98:98:bd:bf:9e:
ce:78:87:85:71:75:81:54:2b:0f:1d:d4:c0:be:84:af:1f:89:
47:2e:24:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:51:55 2026 by rpki-client