Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
File: Kz1duQDggbIT6h8HHsXAA0em_ZU.mft (raw, json)
Hash identifier: TOF7b1T9UufLIglENAWcMZDjbkfTIZ+8sh/pJS0p4cg=
Subject key identifier: A3:5D:60:65:D9:4E:65:37:CD:B3:C9:AB:71:BA:BD:C7:52:52:D3:DB
Authority key identifier: 2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
Certificate issuer: /CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Certificate serial: 019D26CCD94419A993A83B3D730A2ED2D91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
Manifest number: 175E
Signing time: Wed 25 Mar 2026 21:00:52 +0000
Manifest this update: Wed 25 Mar 2026 21:00:52 +0000
Manifest next update: Thu 26 Mar 2026 21:00:52 +0000
Files and hashes: 1: 177yt0zK6JzmvvIHI-e1Wf5DIA4.roa (hash: HO5W4ujo8pIHLkEdVtcK0IvV5MW361b1xltzeVOXvoA=)
2: Kz1duQDggbIT6h8HHsXAA0em_ZU.crl (hash: bfaypsx/X/34bFtZQf9mhCzEfq4M9h2B6daLMF9NCS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:d9:44:19:a9:93:a8:3b:3d:73:0a:2e:d2:d9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3d5db900e081b213ea1f071ec5c00347a6fd95
Validity
Not Before: Mar 25 21:00:52 2026 GMT
Not After : Mar 26 21:00:52 2026 GMT
Subject: CN=a35d6065d94e6537cdb3c9ab71babdc75252d3db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:a0:a6:b0:cc:4e:aa:b4:69:ef:a7:ea:f0:
94:2f:82:0b:4c:ed:ea:a0:4b:8a:1e:9e:ac:36:aa:
7d:93:af:17:0f:57:f2:66:21:51:ea:cb:d8:34:33:
69:9b:3f:3b:62:1a:ca:01:52:6f:43:0c:38:c7:8a:
58:06:50:08:58:32:8b:16:f9:67:e4:d4:ae:f9:5a:
1a:5a:07:e9:5c:d1:04:ff:41:ee:45:f9:32:78:27:
60:58:7b:4e:41:26:72:90:25:3c:6f:c6:cd:5a:99:
d9:85:8f:60:24:c0:f6:24:53:f7:bb:59:f8:e4:90:
18:7e:00:3c:c1:d7:2e:e9:9b:b9:24:9b:99:75:4e:
48:d3:5f:6b:dc:99:4d:04:e1:af:60:f7:98:b0:4e:
7a:39:c9:bb:86:62:3c:6a:d8:06:11:77:f2:e1:6a:
fc:3d:f4:ca:b0:1d:ef:0e:68:be:36:93:e3:da:70:
da:09:09:82:6b:53:1e:bb:d2:0c:4e:9a:b7:58:1a:
69:15:58:a1:23:59:12:99:3e:4c:f9:84:67:9c:38:
d9:0f:31:24:a3:f7:9d:b7:87:5e:2d:b3:c8:b1:df:
cb:70:1a:2c:66:84:98:ec:0c:74:b6:16:1c:f8:60:
96:4e:68:92:5e:8e:7a:2d:3a:0a:26:38:d2:a5:05:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5D:60:65:D9:4E:65:37:CD:B3:C9:AB:71:BA:BD:C7:52:52:D3:DB
X509v3 Authority Key Identifier:
keyid:2B:3D:5D:B9:00:E0:81:B2:13:EA:1F:07:1E:C5:C0:03:47:A6:FD:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz1duQDggbIT6h8HHsXAA0em_ZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/65f8e2-f4ed-424d-9b91-47dd0c04b550/1/Kz1duQDggbIT6h8HHsXAA0em_ZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:0a:84:8a:86:64:78:bf:fc:e3:5d:3b:de:e5:e8:91:e7:01:
57:00:ed:2f:e8:70:36:a0:3f:6e:71:19:fa:fb:53:ae:38:15:
af:e1:f2:3e:54:77:2c:c2:f1:9d:89:7d:30:c9:f2:1d:eb:32:
0c:ec:07:98:c4:52:c2:1b:88:30:c5:13:79:5f:70:ad:24:e1:
e1:89:54:19:b0:fe:a4:29:47:b8:c6:d4:56:aa:f7:bb:a9:6c:
a5:56:66:a9:27:35:93:42:35:bc:b6:c2:a5:ea:01:2e:14:36:
4b:62:fb:77:8c:ca:42:c4:c5:64:cc:ea:f1:da:93:8c:27:7e:
55:ba:fb:fd:0d:eb:25:df:d9:a6:7a:c2:90:e4:11:56:80:78:
c4:c7:66:64:28:25:02:17:ee:a9:37:09:18:bb:35:5e:48:10:
26:13:39:d6:a3:22:df:55:83:ea:57:63:95:8a:17:96:0f:d1:
01:40:ec:e4:c8:32:94:67:8f:db:f3:f4:65:49:8d:15:0d:d8:
dd:fb:2d:f7:41:4a:42:6b:9e:5a:20:53:9a:bf:9c:46:21:52:
24:55:ba:27:3b:40:06:94:47:b0:c8:c5:ff:b4:a9:87:bf:ab:
c9:b6:d7:91:68:09:41:74:d0:39:b2:bb:83:ca:f0:92:bc:e0:
03:ae:b5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:56 2026 by rpki-client