Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
File: KiZGBSRa8gGcKTw3KPal4lXYnyU.mft (raw, json)
Hash identifier: 9Tox10TBPzhfh+WOCSdrYtlffZFe2HpmfEXRNbAzVK8=
Subject key identifier: EC:C1:82:B9:ED:51:2C:70:82:3D:92:65:AD:BC:DF:A1:33:05:DB:8C
Authority key identifier: 2A:26:46:05:24:5A:F2:01:9C:29:3C:37:28:F6:A5:E2:55:D8:9F:25
Certificate issuer: /CN=2a264605245af2019c293c3728f6a5e255d89f25
Certificate serial: 019D26CD47EE1E0D84ECD570CC0CC79F30DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 21:01:20 +0000
Manifest this update: Wed 25 Mar 2026 21:01:20 +0000
Manifest next update: Thu 26 Mar 2026 21:01:20 +0000
Files and hashes: 1: HW8ZIhhcPhh15vZgFSbdJKeL4Yc.roa (hash: g734+bSruGFqjTipdMTU96t/sfziWiMIxaocaSfN2Ps=)
2: KiZGBSRa8gGcKTw3KPal4lXYnyU.crl (hash: QghxKrxeUTohK/kZaufWfs0B3+B5A+7e3PSk/vXfA6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:47:ee:1e:0d:84:ec:d5:70:cc:0c:c7:9f:30:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a264605245af2019c293c3728f6a5e255d89f25
Validity
Not Before: Mar 25 21:01:20 2026 GMT
Not After : Mar 26 21:01:20 2026 GMT
Subject: CN=ecc182b9ed512c70823d9265adbcdfa13305db8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:13:03:38:3c:ca:f9:ee:ee:fb:95:a3:73:d3:
34:30:4e:46:d2:40:82:78:bb:8b:3d:5e:04:40:e6:
2f:2f:0b:28:c1:44:8c:15:3b:73:8c:69:44:08:89:
9b:b9:f5:27:d5:e3:06:5b:f3:be:be:81:14:01:fe:
08:d3:fd:96:cb:bf:f7:13:ba:e0:ee:32:4a:c9:9e:
8e:ad:ed:e7:8b:86:4c:cc:14:8f:4e:fd:1f:9b:3f:
66:05:e5:84:bb:83:44:9a:bf:40:27:1d:19:b4:3f:
c3:35:31:4a:b3:ff:1b:07:d1:71:37:4a:d0:d5:7f:
5c:86:d4:58:0e:02:5a:94:f6:49:f4:04:3f:79:5a:
ef:f5:4e:21:4a:48:5e:41:1f:ff:42:0f:91:80:61:
5c:bb:2d:d7:19:e8:4e:8d:66:29:7b:3c:e9:41:97:
af:01:e8:a4:45:f2:39:a0:c5:6d:d7:be:cc:ea:08:
54:4b:51:20:8b:25:8a:10:bc:f0:33:06:1b:a7:07:
2f:39:34:f6:6d:8d:05:c8:2b:55:c1:1f:92:c0:15:
65:a0:d6:a2:47:f8:d7:78:a7:cf:20:f9:57:6f:59:
55:e3:ac:ac:07:3f:7d:28:d7:c7:b9:a5:41:24:0e:
db:de:f0:b7:48:f6:76:fb:a3:be:22:47:45:58:eb:
85:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C1:82:B9:ED:51:2C:70:82:3D:92:65:AD:BC:DF:A1:33:05:DB:8C
X509v3 Authority Key Identifier:
keyid:2A:26:46:05:24:5A:F2:01:9C:29:3C:37:28:F6:A5:E2:55:D8:9F:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KiZGBSRa8gGcKTw3KPal4lXYnyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2d11bb-5e2e-4085-a34b-359b64d709b9/1/KiZGBSRa8gGcKTw3KPal4lXYnyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:78:2d:43:f8:3c:6b:0f:e8:9b:9e:99:8e:86:8b:27:6a:d8:
25:07:bc:53:58:eb:30:00:b8:29:d2:98:4e:67:70:3d:5c:fe:
f3:27:b3:5c:02:a5:4a:8c:37:9e:9c:c3:1c:79:63:fa:51:2c:
ee:d0:06:85:ed:12:19:df:e2:76:f2:29:c7:52:67:d5:98:8a:
1e:76:c9:57:8a:23:fd:27:b3:15:ae:bb:7b:78:c8:ad:3e:a8:
e4:0b:09:4e:cc:32:5f:d2:fd:9d:26:08:02:2c:8b:43:50:44:
f7:19:17:46:a0:71:89:eb:9d:c7:54:01:29:af:72:10:77:93:
ed:49:95:10:d3:4f:3d:34:cb:9d:40:72:44:e6:d9:d2:9a:c1:
2e:2d:03:39:65:25:28:00:b5:ed:25:dc:38:1d:0a:10:e9:0e:
3f:81:ec:31:28:68:15:0f:76:1a:32:84:88:77:d3:63:e5:e1:
a0:40:0f:5f:0c:3a:4e:9a:e8:f0:bf:82:fb:cf:f3:35:8e:00:
f1:9d:ac:ca:df:6f:a2:38:7c:94:7f:36:34:69:71:6a:24:d7:
1a:0e:67:c0:af:70:34:6b:a8:0e:2a:d3:35:93:43:53:15:35:
80:89:0e:74:34:6d:64:d8:2d:99:7b:21:3a:a4:70:51:0b:87:
c4:6d:dd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:21 2026 by rpki-client