Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
File: KzX2qYV9e-AmB6RNiVKojKS6bT8.mft (raw, json)
Hash identifier: c0ah8nhgFjjpvPk/P4spo/uFIXMcESCJgAMXtAxZq6g=
Subject key identifier: D1:19:40:81:34:7D:86:ED:93:4A:8C:DF:79:53:5E:31:C1:F6:F2:10
Authority key identifier: 2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
Certificate issuer: /CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Certificate serial: 019F8F477DFC0261C94DFFED2AB119FC53F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
Manifest number: 01B2
Signing time: Thu 23 Jul 2026 14:00:54 +0000
Manifest this update: Thu 23 Jul 2026 14:00:54 +0000
Manifest next update: Fri 24 Jul 2026 14:00:54 +0000
Files and hashes: 1: KzX2qYV9e-AmB6RNiVKojKS6bT8.crl (hash: ipxmjHTDDOpi6DtaU0QYSmiYbMW5MS7DUpdc0/v9i9s=)
2: XRhRqov_VqyHRFFYOkd67TDUlfI.roa (hash: ML2iFZdBnrqeYBDgHkNF/6ovrR0UHPTGixgV/99EaNU=)
3: k424Nbk6SvvJjvOfKup0qsQXNRI.roa (hash: a50oRNVhCvCgBUG8ZaNohlcl3wba1rL6P6UcpuYYzJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:47:7d:fc:02:61:c9:4d:ff:ed:2a:b1:19:fc:53:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Validity
Not Before: Jul 23 14:00:54 2026 GMT
Not After : Jul 24 14:00:54 2026 GMT
Subject: CN=d1194081347d86ed934a8cdf79535e31c1f6f210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7e:47:31:9b:52:eb:00:d4:ba:25:c4:2b:24:
69:84:cf:ea:7a:3e:06:7b:5b:cf:ae:34:36:96:28:
00:a3:a0:5f:20:8d:de:46:5b:d1:fd:53:19:2a:06:
5b:a2:d9:5a:d2:6a:a2:7b:8b:d8:8d:10:26:14:32:
4c:d3:a7:4e:8d:8a:9d:28:08:c7:55:7a:3a:1e:75:
1d:70:af:a2:dc:1e:8c:77:7d:d6:c2:6b:dc:f3:6d:
d6:1d:b7:1b:14:86:58:22:bb:83:fa:7e:1a:00:5b:
c4:56:b4:b4:34:21:97:02:30:87:d7:11:ae:34:37:
fc:87:b6:e7:09:b3:a9:8b:a3:06:4c:0a:5a:dc:80:
bd:ae:07:8a:ff:dd:05:66:32:90:e0:b9:02:23:87:
87:b6:05:4e:17:20:05:05:ce:c6:39:e9:7b:bb:9a:
9c:d7:a1:71:46:cb:5e:36:4e:39:e3:e8:54:61:46:
71:98:29:0b:b6:73:71:9f:d6:8c:c2:b8:3d:ca:4d:
2d:ba:98:ef:d4:fc:31:9a:ac:02:9e:ac:87:7c:62:
3b:bc:03:6d:bd:7e:32:01:ff:78:83:95:c0:f1:61:
30:5d:17:e4:a3:25:cd:10:30:2b:8d:a0:c9:81:c0:
9a:c4:ec:14:b8:86:21:21:75:32:92:07:6e:1b:f1:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:19:40:81:34:7D:86:ED:93:4A:8C:DF:79:53:5E:31:C1:F6:F2:10
X509v3 Authority Key Identifier:
keyid:2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:bd:c9:b4:37:43:8b:28:4b:08:c1:5b:c1:bf:7f:8b:ae:92:
13:92:88:8b:41:bd:f2:cb:f5:62:8c:ad:ab:7a:ce:7a:fc:c0:
92:f4:20:75:6a:4c:84:9c:4b:8f:c3:de:ca:2b:bf:fe:b6:43:
95:f4:49:35:04:3c:b8:4e:3c:69:1a:40:55:6e:d4:75:3b:64:
e1:7f:63:b2:26:0f:94:70:59:f9:cd:55:06:c4:d6:22:5e:8a:
b4:f6:e4:e5:74:18:55:d0:b1:0a:8e:29:47:f9:7a:f8:82:b8:
fc:aa:14:a0:49:2f:03:98:42:d4:62:8f:93:49:58:ef:e9:17:
c0:9f:2b:b7:68:7b:0b:b2:05:04:0f:78:b6:3c:0e:b2:31:fc:
80:e5:18:fb:6f:80:0d:17:4f:15:9c:53:b5:c3:aa:fe:ca:3e:
c1:25:44:50:98:b2:8a:0e:c1:f0:e5:92:4b:8b:26:8a:38:06:
34:6a:e6:bc:4f:c7:73:0a:ee:e2:9d:af:b1:8b:b9:da:19:37:
45:22:1e:5c:8e:48:84:9f:4f:ee:ca:c6:cd:c1:c5:0c:df:9e:
db:0c:b4:1d:54:58:0d:bb:55:a8:3f:aa:74:aa:30:c1:d8:63:
d8:65:df:a3:37:86:c3:fa:16:da:06:d5:89:2e:c9:67:9d:14:
74:56:7c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:09 2026 by rpki-client