Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
File: kziECSasc-rVthh5GeiPEAMimco.mft (raw, json)
Hash identifier: Wi0MUK/02kkKRtXK3qO0fxzqRHu1K2gryXAa7isE6k0=
Subject key identifier: C1:94:89:99:89:B3:FD:11:C9:9F:B0:FD:42:5B:BB:CE:9D:2F:F0:90
Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca
Certificate serial: 01A1DB3856D1B0624F35B6B5FB7629CEC268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
Manifest number: 03EC
Signing time: Sat 14 Nov 2026 18:01:04 +0000
Manifest this update: Sat 14 Nov 2026 18:01:04 +0000
Manifest next update: Sun 15 Nov 2026 18:01:04 +0000
Files and hashes: 1: 1-z0Y3fH_aErOAd2Nag5ZT3JcPH4.roa (hash: ajlsAWqEGjBF2s25AsAbzW/nKPdDq6JxNB0eWlyY3OU=)
2: 6lmykGrjWlxTI-Qm8cv1Wru-ZUM.roa (hash: 3/8y+29k2Z9zB5VeslI5T+W11/MyhEBGlF4ugyZh+nA=)
3: FcXUetsC0-6bv54Z1lmHoqKMdxM.roa (hash: dFkWAsnbwOvbQKILV1fPns+xMo4goiFme2jYhULRvHk=)
4: Y4x7zeztB7lrOx01OBJN1UiLyT0.roa (hash: gs7Dc5as7DJ7oLTov6hgPGgK6t+t5Pe4B5kRBUgM7WI=)
5: _SAMOxgv34T8ZP2BEt3dVFweldA.roa (hash: bU6RDLC/fFMgRKk4b1P2ryi1ytEL97qHkSA7liSJFY0=)
6: kJ0Vy0B72zssXC26u57KGbX2ct8.roa (hash: hSN+a59jsv0SWS/ZOD8c1cKgqSReXutR5ErlmyVzSmA=)
7: kziECSasc-rVthh5GeiPEAMimco.crl (hash: 7N1WcNRcXpVd3hDgbLjohLaz5auq8bxT1Nu5innBrk8=)
8: v6hmJMW3LdEeiIk2pUs40W0Igc0.asa (hash: G12/XDzxuGPxlLmYdatRM5nZUuVBUTD/yODTrcG9PnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:38:56:d1:b0:62:4f:35:b6:b5:fb:76:29:ce:c2:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca
Validity
Not Before: Nov 14 18:01:04 2026 GMT
Not After : Nov 15 18:01:04 2026 GMT
Subject: CN=c194899989b3fd11c99fb0fd425bbbce9d2ff090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:0f:a2:dc:20:8d:bc:b7:c8:d9:80:94:c4:
b2:21:fe:d5:ba:23:58:d9:39:e5:eb:53:71:4b:d3:
ce:54:1d:96:01:6b:22:9d:74:1b:74:e9:03:a8:c0:
60:e1:1f:7d:a0:c9:ca:d8:14:7c:ae:36:5f:00:f0:
05:94:28:9b:0d:c6:cc:18:c0:8b:df:c7:e9:3a:c9:
79:8e:8e:2b:3e:45:28:18:58:51:04:15:23:ef:f1:
8b:8e:c4:87:f2:16:df:db:eb:2d:1f:9b:06:25:ee:
ad:c2:00:1f:b2:a5:52:5d:91:29:49:b8:3f:84:a2:
ce:05:fc:ca:09:1c:ba:6a:84:ce:a1:20:aa:51:4c:
33:75:71:69:f7:e2:ad:f0:cd:fe:4f:5f:eb:74:40:
b0:fc:30:15:dc:2c:9e:f0:3e:0c:da:ed:79:2d:a5:
0c:58:b8:af:ad:f7:80:56:cd:98:c5:40:54:e2:f3:
3b:8a:90:76:ba:3c:a1:e5:1d:f7:cd:50:28:62:7f:
3f:ee:da:74:2b:64:fa:8c:f8:e2:3f:8a:43:6f:b6:
d9:35:07:c6:64:5c:e0:61:16:c2:21:f1:5b:a4:4c:
39:75:d5:63:29:9d:6d:89:e2:f6:46:ce:4f:4e:f7:
43:f5:b0:2b:da:cb:89:74:02:ce:7a:ff:19:91:77:
bf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:94:89:99:89:B3:FD:11:C9:9F:B0:FD:42:5B:BB:CE:9D:2F:F0:90
X509v3 Authority Key Identifier:
keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9a:fe:6e:5a:15:62:8d:1c:68:5b:ff:09:b4:16:3d:3b:08:
eb:08:da:af:d7:0e:8b:c3:05:33:34:56:21:af:90:d8:d0:aa:
ba:1f:21:08:11:09:93:85:c5:bc:f4:57:52:71:bb:39:5b:49:
fc:ab:df:2f:a0:0f:bf:61:e1:6b:86:d7:92:45:8c:f5:ce:9d:
bb:05:2b:96:24:a2:50:2e:91:53:92:65:4b:cb:26:1b:e9:95:
80:a8:47:2e:d9:6a:ff:ef:75:4e:6c:1e:48:d4:d5:7e:03:73:
a5:f0:aa:24:07:1e:0a:44:51:bd:8d:70:8e:b6:b0:55:86:73:
12:07:5d:b5:4f:9f:00:18:24:3c:77:57:4c:1e:c2:f5:8c:36:
e3:19:17:21:32:43:5b:38:6e:62:a5:08:55:81:09:3a:49:0f:
dc:a4:9a:97:42:53:e4:68:1d:0f:4f:5c:f1:a9:9e:71:94:f0:
53:e1:61:db:86:ec:d0:ea:c2:c9:ac:c6:0c:f6:ad:91:07:5e:
02:2e:de:63:29:c5:86:e3:c4:59:34:7b:f8:4c:86:90:f2:0a:
a2:22:5e:e4:7a:f3:ec:03:6d:e5:de:f2:67:92:41:09:e7:41:
cc:78:79:05:64:4e:ee:3a:aa:ff:4e:79:6a:d1:3a:bc:4b:42:
87:cb:c3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:23:32 2026 by rpki-client