Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
File: kziECSasc-rVthh5GeiPEAMimco.mft (raw, json)
Hash identifier: mxlXlgnQ5YrR1+9HODDP3Ew741nwuhrm6JGizFvsdOs=
Subject key identifier: 05:DB:6F:3B:0E:D1:19:59:C8:46:C6:14:7F:44:5F:E3:8A:E5:7D:87
Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca
Certificate serial: 01A0CAEBC30EDD20852F001C6674FB2016EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
Manifest number: 035F
Signing time: Tue 22 Sep 2026 21:00:43 +0000
Manifest this update: Tue 22 Sep 2026 21:00:43 +0000
Manifest next update: Wed 23 Sep 2026 21:00:43 +0000
Files and hashes: 1: 1-z0Y3fH_aErOAd2Nag5ZT3JcPH4.roa (hash: ajlsAWqEGjBF2s25AsAbzW/nKPdDq6JxNB0eWlyY3OU=)
2: 6lmykGrjWlxTI-Qm8cv1Wru-ZUM.roa (hash: 3/8y+29k2Z9zB5VeslI5T+W11/MyhEBGlF4ugyZh+nA=)
3: FcXUetsC0-6bv54Z1lmHoqKMdxM.roa (hash: dFkWAsnbwOvbQKILV1fPns+xMo4goiFme2jYhULRvHk=)
4: Y4x7zeztB7lrOx01OBJN1UiLyT0.roa (hash: gs7Dc5as7DJ7oLTov6hgPGgK6t+t5Pe4B5kRBUgM7WI=)
5: _SAMOxgv34T8ZP2BEt3dVFweldA.roa (hash: bU6RDLC/fFMgRKk4b1P2ryi1ytEL97qHkSA7liSJFY0=)
6: kJ0Vy0B72zssXC26u57KGbX2ct8.roa (hash: hSN+a59jsv0SWS/ZOD8c1cKgqSReXutR5ErlmyVzSmA=)
7: kziECSasc-rVthh5GeiPEAMimco.crl (hash: YImtklXh0TbC5DIsBr/62a8Uo5xj2C12slnA5wXCf18=)
8: v6hmJMW3LdEeiIk2pUs40W0Igc0.asa (hash: G12/XDzxuGPxlLmYdatRM5nZUuVBUTD/yODTrcG9PnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:c3:0e:dd:20:85:2f:00:1c:66:74:fb:20:16:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca
Validity
Not Before: Sep 22 21:00:43 2026 GMT
Not After : Sep 23 21:00:43 2026 GMT
Subject: CN=05db6f3b0ed11959c846c6147f445fe38ae57d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:d9:16:4a:df:67:fe:7f:55:bc:3d:0f:f1:
15:78:53:d5:25:7c:e1:63:5f:25:72:ce:52:11:eb:
8b:2c:91:cd:81:d4:f5:52:2e:03:16:be:9a:6b:39:
70:e6:7f:fa:5f:e9:fd:f0:b6:c7:65:1c:e5:6c:23:
ea:0c:d6:e0:de:3a:d4:13:06:ba:b7:82:b1:f4:48:
c9:7f:7f:fa:a2:b9:d0:c7:25:90:41:bd:0e:56:65:
53:d9:4b:97:57:44:e6:f9:0d:92:36:84:83:6c:57:
3b:36:b4:74:07:1c:fa:b3:5e:25:e4:21:4d:f1:83:
a0:25:32:ea:9d:77:08:68:33:29:e1:ee:e2:54:f4:
f3:eb:ba:73:56:91:26:6a:56:7e:c1:6a:b1:72:c4:
e5:52:27:9b:d4:49:79:7b:ad:23:d7:3a:06:c8:64:
54:dd:e9:9a:b5:b3:e0:2f:68:9a:05:1c:47:e0:e9:
60:99:9d:50:59:d4:b9:01:7f:2d:34:70:ac:50:c5:
e5:7a:04:60:cd:1a:94:a9:ad:66:f1:38:a7:f5:99:
e9:39:4c:d2:49:2d:eb:a2:70:48:1c:97:fa:92:41:
bd:bf:5a:42:79:45:28:04:35:b0:08:55:b8:78:37:
3b:b3:b4:c7:5a:2f:29:2a:3e:31:1e:61:d1:59:51:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DB:6F:3B:0E:D1:19:59:C8:46:C6:14:7F:44:5F:E3:8A:E5:7D:87
X509v3 Authority Key Identifier:
keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:c9:f4:98:ed:ff:66:91:c6:e9:b6:83:ae:d2:c0:9a:80:e8:
a7:2d:5e:c5:83:6a:b1:df:ea:37:0b:fb:96:04:68:ae:43:b6:
c0:0f:e7:49:4d:7a:e9:70:30:52:92:6d:67:33:5f:5e:32:07:
f1:43:af:f9:2f:dd:10:d5:68:a2:17:61:df:55:2f:10:6d:db:
5a:0f:dd:82:14:3c:25:40:96:34:c2:b3:47:1c:5d:23:c0:60:
71:51:d6:b4:94:f6:15:bd:98:54:48:3e:87:6d:0a:2f:d4:90:
ce:99:bc:44:78:fc:c1:e1:38:51:7f:d7:7a:a9:b7:00:db:6a:
b2:02:a3:52:a4:f4:50:aa:11:9c:f2:42:54:ba:86:fb:45:f0:
73:f7:f7:ca:72:56:db:33:66:d1:8f:09:64:8a:04:5d:6f:6e:
2d:b7:ac:fa:87:55:8d:05:82:39:61:31:90:2c:59:4f:4b:13:
64:b7:56:e1:46:96:4d:78:c0:b1:9d:40:b7:47:51:2a:e3:9d:
43:d2:cd:56:5d:4b:4e:67:00:97:03:4b:bd:17:de:02:cc:a1:
e3:db:f9:c3:7e:87:33:95:02:ae:9d:2d:28:cf:8f:1f:99:de:
4d:0c:29:8c:e8:77:fd:26:2d:e6:55:38:8e:2d:3c:04:5f:8a:
b4:21:ca:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:22:21 2026 by rpki-client