Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
File: kziECSasc-rVthh5GeiPEAMimco.mft (raw, json)
Hash identifier: PwP9/yip48b0CXxvuRXrEgC5MHef9D+jNbLB+zBoT6c=
Subject key identifier: 62:27:17:70:27:EA:B6:F8:DA:0F:17:5A:BA:5E:EE:2C:2D:D4:17:D3
Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca
Certificate serial: 019F8E34CB0B7ACBEF6771455448F9C7DFAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
Manifest number: 02BB
Signing time: Thu 23 Jul 2026 09:00:52 +0000
Manifest this update: Thu 23 Jul 2026 09:00:52 +0000
Manifest next update: Fri 24 Jul 2026 09:00:52 +0000
Files and hashes: 1: 1-z0Y3fH_aErOAd2Nag5ZT3JcPH4.roa (hash: ajlsAWqEGjBF2s25AsAbzW/nKPdDq6JxNB0eWlyY3OU=)
2: 6lmykGrjWlxTI-Qm8cv1Wru-ZUM.roa (hash: 3/8y+29k2Z9zB5VeslI5T+W11/MyhEBGlF4ugyZh+nA=)
3: FcXUetsC0-6bv54Z1lmHoqKMdxM.roa (hash: dFkWAsnbwOvbQKILV1fPns+xMo4goiFme2jYhULRvHk=)
4: Y4x7zeztB7lrOx01OBJN1UiLyT0.roa (hash: gs7Dc5as7DJ7oLTov6hgPGgK6t+t5Pe4B5kRBUgM7WI=)
5: _SAMOxgv34T8ZP2BEt3dVFweldA.roa (hash: bU6RDLC/fFMgRKk4b1P2ryi1ytEL97qHkSA7liSJFY0=)
6: kJ0Vy0B72zssXC26u57KGbX2ct8.roa (hash: hSN+a59jsv0SWS/ZOD8c1cKgqSReXutR5ErlmyVzSmA=)
7: kziECSasc-rVthh5GeiPEAMimco.crl (hash: pfe5cUX8p/WwmzBw/jGEqzmJZSION11ChzCcNj64nmY=)
8: v6hmJMW3LdEeiIk2pUs40W0Igc0.asa (hash: G12/XDzxuGPxlLmYdatRM5nZUuVBUTD/yODTrcG9PnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:34:cb:0b:7a:cb:ef:67:71:45:54:48:f9:c7:df:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca
Validity
Not Before: Jul 23 09:00:52 2026 GMT
Not After : Jul 24 09:00:52 2026 GMT
Subject: CN=6227177027eab6f8da0f175aba5eee2c2dd417d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:0f:e1:6a:65:1e:01:47:44:78:e2:7d:92:
1c:d4:79:e1:c4:34:dc:03:1d:19:d0:5a:16:d2:c0:
50:d1:97:a9:80:6d:cf:4c:13:c8:4c:d4:08:71:b1:
32:1a:03:79:ff:57:d4:13:76:72:ee:2a:02:4b:66:
41:78:1c:72:e6:8c:11:9e:aa:77:02:fd:fc:39:4e:
cd:e8:8a:2e:99:6a:c1:ce:e9:51:9e:4e:59:d9:f2:
d3:84:1d:c5:75:f6:60:d3:d9:1b:89:6a:23:f0:3a:
b0:00:23:fc:23:28:93:b6:bc:ad:7f:98:fe:b4:d2:
ac:cc:98:ce:c0:4b:9c:73:96:09:eb:4e:17:c5:49:
c2:ec:58:dc:66:2b:13:98:b4:38:d2:62:22:d7:60:
ec:1c:94:7c:e4:6f:58:7e:e8:70:4b:f6:84:71:ea:
4b:d7:b3:11:a0:8a:30:aa:d3:eb:ee:15:27:d2:10:
af:d5:fd:6e:26:8a:7a:28:e5:a2:79:95:40:e4:a7:
1a:16:81:af:d7:db:45:0a:2a:18:a0:fe:c2:5f:67:
49:ae:4e:8e:cb:ae:31:a5:5d:d0:a4:b8:df:9d:e5:
ac:ae:10:de:53:03:1a:f7:86:c4:c3:46:3d:81:8b:
03:26:57:bd:07:33:d8:07:7a:d9:c2:ef:eb:d5:26:
e9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:27:17:70:27:EA:B6:F8:DA:0F:17:5A:BA:5E:EE:2C:2D:D4:17:D3
X509v3 Authority Key Identifier:
keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:39:91:94:94:c8:fe:f7:b0:47:1a:d3:2b:23:0d:94:4d:89:
a7:25:24:9a:ef:08:f5:66:0a:0b:98:87:47:ad:e1:76:0d:7d:
81:4f:66:3a:15:72:e1:12:bd:81:3d:ea:3c:83:af:f6:2b:9e:
51:f9:05:58:4e:5a:f9:e6:9f:82:c7:b8:7d:2c:42:b1:03:c2:
2f:cf:a6:cf:59:23:1a:50:30:a2:c2:f1:ef:23:6c:d3:bf:1f:
04:2c:f1:01:62:ba:b4:b1:9f:bf:f1:20:7a:1c:7c:71:96:7c:
f4:4b:81:0e:71:74:bd:83:14:b9:33:8f:b7:bf:2b:03:d2:d5:
4c:d3:77:c7:f2:74:df:db:23:58:5a:8c:21:1c:4e:6a:a5:ad:
2f:ae:6b:67:fa:8a:ae:dc:3e:dc:a9:67:ae:92:19:e6:dc:be:
72:fc:5d:40:a4:88:16:d7:cf:f6:17:81:b3:6f:58:8c:5a:8a:
60:28:09:93:41:1b:dd:36:c7:b0:bb:d2:e5:0d:44:08:8f:f4:
9d:53:fc:6d:88:9b:0a:0f:7b:35:0e:70:e5:c0:43:b3:49:b5:
75:17:f7:00:8e:53:a2:d2:d3:ea:5f:f9:0b:14:ac:eb:e9:eb:
d7:6d:68:2e:24:2e:c8:86:8c:33:c2:43:0b:17:65:9e:70:6f:
b6:71:1d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:00 2026 by rpki-client