Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
File: KzX2qYV9e-AmB6RNiVKojKS6bT8.mft (raw, json)
Hash identifier: srsK5QBSOw8QpD/nxAeG+1YoTClVjD114kCJfMKOZqs=
Subject key identifier: BE:B2:61:77:29:D0:62:D4:2C:2D:0F:CD:B5:40:17:E8:5B:31:4F:06
Authority key identifier: 2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
Certificate issuer: /CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Certificate serial: 019D273AD5269ACF0453B07F4785A10F4523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
Manifest number: 73
Signing time: Wed 25 Mar 2026 23:01:00 +0000
Manifest this update: Wed 25 Mar 2026 23:01:00 +0000
Manifest next update: Thu 26 Mar 2026 23:01:00 +0000
Files and hashes: 1: KzX2qYV9e-AmB6RNiVKojKS6bT8.crl (hash: /t4+7a2RQ65stV1g2DAlAhILMetrPOVj5+lboPMPBuk=)
2: XRhRqov_VqyHRFFYOkd67TDUlfI.roa (hash: ML2iFZdBnrqeYBDgHkNF/6ovrR0UHPTGixgV/99EaNU=)
3: k424Nbk6SvvJjvOfKup0qsQXNRI.roa (hash: a50oRNVhCvCgBUG8ZaNohlcl3wba1rL6P6UcpuYYzJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d5:26:9a:cf:04:53:b0:7f:47:85:a1:0f:45:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Validity
Not Before: Mar 25 23:01:00 2026 GMT
Not After : Mar 26 23:01:00 2026 GMT
Subject: CN=beb2617729d062d42c2d0fcdb54017e85b314f06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d8:23:79:c3:a3:f6:25:a3:ad:21:e0:53:36:
a2:fb:47:f0:9e:1f:de:6e:37:a9:7b:95:33:6d:30:
a0:5b:cd:a3:39:66:7b:ea:d4:60:89:b0:3a:78:96:
3e:08:d5:f0:17:9f:b4:f5:af:91:fa:8a:7c:ab:3a:
a0:b9:59:1c:8b:ea:02:5d:c1:1e:d4:67:82:e6:8e:
eb:5f:7f:f9:2f:49:ed:71:05:d4:ab:7d:53:c3:68:
c7:3c:cc:0d:2c:7a:23:24:4a:b7:37:7b:73:00:c6:
0f:ba:16:58:af:53:9b:e9:a7:60:4a:7b:ca:31:91:
a6:b3:7b:f5:27:2d:bf:f2:2e:dd:37:a1:bd:f1:e4:
80:bb:12:00:7f:2b:79:19:32:23:12:a0:be:b6:6a:
07:d2:e7:22:1e:b0:f8:43:1a:b5:bf:b4:e6:6e:ad:
47:70:31:18:46:19:05:36:ab:a5:aa:58:93:98:0f:
84:9d:78:4f:41:38:f1:17:b6:c5:35:a8:41:04:aa:
6f:00:c4:e9:23:6e:6a:99:81:06:00:45:5d:85:d3:
ad:01:7f:be:cc:72:60:e1:0f:f1:d4:e2:7d:11:e7:
97:92:58:18:1e:22:bd:21:15:fa:42:32:73:9f:c7:
2d:5f:80:70:e7:a9:fb:e0:f6:89:c2:2a:28:cb:ef:
db:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B2:61:77:29:D0:62:D4:2C:2D:0F:CD:B5:40:17:E8:5B:31:4F:06
X509v3 Authority Key Identifier:
keyid:2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ac:50:62:0a:48:8d:73:f4:1b:db:3b:8a:73:eb:62:ba:73:
71:65:67:bb:a1:a2:bd:8c:6a:87:bc:f4:27:02:ce:c6:9c:18:
44:03:cf:07:7a:cf:9b:87:81:c2:fd:72:fb:7b:de:1d:26:90:
b6:17:dd:d8:33:9d:fa:08:af:51:dc:67:95:4d:58:4f:e6:91:
b7:5c:e3:7a:86:97:67:82:2c:84:41:24:9a:df:f4:d6:ab:f7:
96:aa:0e:5f:d8:8d:3b:3a:84:c7:c7:10:e5:b5:b1:25:5b:ca:
fd:09:22:e3:a3:a9:2e:f0:d9:06:16:0e:ae:c3:65:07:73:ce:
61:84:0c:7c:32:1e:a5:79:d6:36:68:45:9d:87:75:04:4d:c1:
5b:65:fc:94:f8:d4:ef:1f:d4:f9:34:fc:e8:cc:e8:7a:2d:35:
df:3b:2e:0f:ff:e6:05:2b:53:b3:41:d2:fd:07:62:a6:0d:92:
77:9b:69:2f:dd:a0:0a:87:6d:02:5b:f2:ef:64:03:fe:1e:59:
3e:d8:bb:22:bd:21:a2:b1:c5:25:86:d5:f2:11:38:54:17:bf:
02:85:09:39:69:8b:3c:d0:f7:1b:a9:9a:46:76:ea:fe:58:ec:
49:d5:cc:f2:09:cf:a6:93:60:9c:f8:db:c1:8e:a2:0a:11:2f:
7e:48:9e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:02:59 2026 by rpki-client