Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
File: kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft (raw, json)
Hash identifier: 2T22T+iojEj7QEhbXBpXlp8thTXrI42H/ZieVOUZ3Hk=
Subject key identifier: 1D:81:BB:AF:B9:8B:66:34:7C:14:7C:E0:AE:2E:17:8B:B0:71:1D:36
Authority key identifier: 91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
Certificate issuer: /CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Certificate serial: 019D26281835F20E3D07A0E00C8928ABEBB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 18:00:54 +0000
Manifest this update: Wed 25 Mar 2026 18:00:54 +0000
Manifest next update: Thu 26 Mar 2026 18:00:54 +0000
Files and hashes: 1: kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl (hash: mYozT6RFxlxV3SgsvjeLuD2oDbL3twvt0+pz5a1R8rE=)
2: tkclVERCXkY2GXQMN0O1KswMjIk.roa (hash: UFtbEmcPRmzUr4HkpsgJMfjtRHHdZhSje6jPNyYykIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:18:35:f2:0e:3d:07:a0:e0:0c:89:28:ab:eb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Validity
Not Before: Mar 25 18:00:54 2026 GMT
Not After : Mar 26 18:00:54 2026 GMT
Subject: CN=1d81bbafb98b66347c147ce0ae2e178bb0711d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:65:93:c4:33:53:75:2f:45:2a:36:af:db:
87:24:a4:65:86:5f:63:db:a3:94:3c:66:aa:a5:af:
13:10:9b:d6:1f:d7:cb:c9:fd:62:82:50:ca:98:4e:
43:8b:21:1c:e4:4c:6c:d2:0f:aa:bb:24:9a:c6:c0:
db:c6:80:69:73:39:6b:33:81:ea:77:5a:8a:1d:08:
26:e0:73:91:d5:db:d1:dd:9d:bc:b0:78:e9:60:e6:
a5:75:cd:5d:b3:ce:00:d5:93:05:6d:dd:1b:76:fa:
64:61:d4:07:3c:16:cc:3b:89:51:e5:cb:19:66:a4:
eb:a1:aa:43:05:01:ba:9a:a1:a5:0f:ba:85:21:ee:
24:88:0b:cc:87:10:ee:85:b3:cb:8e:96:ac:ab:bf:
12:d5:72:e2:33:b0:cf:47:0b:d1:14:8b:f0:c1:a4:
63:dd:b0:04:4f:11:ba:0d:6f:12:ea:12:6b:4a:ea:
c1:1b:4e:78:c7:0a:a8:2f:6e:3c:6f:68:83:74:73:
4b:96:26:98:4a:83:8a:82:4f:c1:ec:ca:6d:d8:0d:
d7:f4:2d:66:bb:08:a4:10:33:2e:f3:4a:2f:79:21:
e1:f4:c2:29:ed:02:ce:7e:2a:5d:6e:24:27:e1:3b:
58:57:87:c0:bf:20:64:88:79:91:3d:9c:55:29:a3:
c4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:81:BB:AF:B9:8B:66:34:7C:14:7C:E0:AE:2E:17:8B:B0:71:1D:36
X509v3 Authority Key Identifier:
keyid:91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8a:b4:d1:f6:11:d9:a2:ae:a4:78:f9:37:46:15:2d:b1:4f:
68:dd:88:40:e9:2b:4b:5a:96:37:34:fa:da:8b:84:fe:2e:a7:
f9:16:7c:4d:cf:8f:d4:31:56:bf:6d:ee:89:cc:a8:d6:ad:48:
01:8e:20:09:53:63:f1:bc:fd:8a:3d:c4:d6:f9:73:d5:48:0f:
a8:3f:97:03:7d:1d:ff:50:62:2e:4a:1e:4d:5f:68:27:00:95:
6c:16:fb:44:eb:55:8a:c6:f2:82:73:89:fb:58:16:62:74:9b:
32:f0:03:0e:c4:1b:80:4b:a8:98:64:1e:5b:0e:f6:bc:e5:11:
1e:d4:af:00:0b:93:1d:da:31:2f:27:06:49:b5:6d:30:f1:40:
83:b9:c6:4f:05:a8:01:f2:35:7c:ea:27:22:44:60:b2:f8:17:
b4:55:de:e1:56:ad:53:b2:4a:df:51:62:79:2b:60:8c:07:91:
54:2e:6a:4e:c5:9e:c1:92:d9:ff:69:31:41:2a:86:63:50:61:
96:bd:54:70:88:70:3c:e1:64:ac:95:09:39:e4:2b:35:9f:61:
4d:fe:88:ca:f7:f4:d1:fd:59:fe:59:8d:df:b4:8a:fc:7c:5d:
c3:8c:a4:ac:de:ff:2a:df:cc:a3:6f:50:0f:93:6e:f3:c6:73:
6d:fe:bb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:56 2026 by rpki-client