Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
File: 2KzzS-KwTHzO8iIejR_LbKu0FZE.mft (raw, json)
Hash identifier: LhFaNHcn0OcuoWtcQfEtkoyTeh93/3AaNz9zqO4FCI4=
Subject key identifier: 19:95:B5:33:5E:EA:38:AA:97:37:7B:C1:85:B4:B0:86:3D:14:DA:94
Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Certificate serial: 01A0DF4F3AA22AA9EDEE27F1B15D591F08EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 20:01:46 +0000
Manifest this update: Sat 26 Sep 2026 20:01:46 +0000
Manifest next update: Sun 27 Sep 2026 20:01:46 +0000
Files and hashes: 1: 1VZy0G-wHQ_TX2BXwKD4dH12AVw.roa (hash: mifTRRl6FrcrdgjIAd+uxzGUQnWJ54FTfDl9SZZKo7c=)
2: 2KzzS-KwTHzO8iIejR_LbKu0FZE.crl (hash: io8n9xxIYbJco2pvm3anypplFPZJZ5Y50+yHPm/wziI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4f:3a:a2:2a:a9:ed:ee:27:f1:b1:5d:59:1f:08:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Validity
Not Before: Sep 26 20:01:46 2026 GMT
Not After : Sep 27 20:01:46 2026 GMT
Subject: CN=1995b5335eea38aa97377bc185b4b0863d14da94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:e3:5b:98:11:6f:60:14:48:d1:23:24:68:
f5:37:90:86:1f:47:d2:c1:1f:f9:6f:b1:42:47:11:
1d:83:cd:22:71:f1:e2:03:79:2a:0f:46:c2:eb:a9:
d2:58:45:ea:f9:53:60:84:26:96:ed:55:b7:fd:4b:
05:ea:b8:ce:2d:e0:2c:2c:d9:13:a8:ec:4e:91:48:
7c:e2:9b:80:28:4e:44:85:1c:ed:99:bf:25:61:b4:
11:18:de:e9:62:9a:76:47:97:58:10:10:16:fd:64:
9e:ff:9b:30:6a:70:84:f3:8d:21:ce:fb:f0:7c:97:
e5:64:04:75:9d:97:34:ac:ce:ed:e4:5a:6f:8f:94:
82:1a:48:fb:b6:f5:ff:6e:d8:df:ff:57:40:a1:c5:
da:36:de:1a:d0:d8:c5:5c:00:9c:1f:37:32:73:c2:
55:66:02:1a:36:f2:60:56:71:4b:31:9f:a8:74:45:
d4:b9:72:a6:df:06:69:31:56:67:e6:e2:d0:15:69:
1d:7d:a6:6d:17:fe:b3:7f:ae:18:16:d1:4e:09:25:
4c:10:0b:5e:5d:9f:ea:18:8f:4e:d5:d1:02:81:d8:
fa:d6:5f:53:54:c9:01:a1:3a:42:d3:fa:00:f6:18:
15:a7:41:82:3e:1e:3a:de:c3:6c:d8:57:8a:d5:16:
08:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:95:B5:33:5E:EA:38:AA:97:37:7B:C1:85:B4:B0:86:3D:14:DA:94
X509v3 Authority Key Identifier:
keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:80:74:49:b2:75:a4:9d:b6:59:b0:79:9d:ec:1b:11:69:7c:
38:f5:e1:57:3b:d4:8a:65:44:80:d1:66:10:c7:1e:20:56:36:
1a:03:4f:9e:9d:0f:8b:a9:cb:c2:7e:9d:64:a3:7c:37:9c:21:
61:5e:79:2c:56:1a:e6:25:8e:bb:79:14:4e:41:11:ec:8b:0b:
c0:18:57:47:2b:59:e0:16:d1:bd:17:3e:86:22:51:08:37:0f:
96:0f:ef:fe:a8:de:40:e2:94:04:40:29:d3:1f:45:10:e9:fd:
33:9d:c5:7b:10:21:6d:2f:05:1d:b2:dd:7d:8b:da:9f:9e:32:
5a:fc:c9:b7:12:c9:20:b9:fe:50:95:d0:fa:a8:53:12:0d:fe:
51:6e:d6:40:c4:29:83:27:d4:71:47:80:72:d9:65:63:ad:e5:
1a:b2:23:a5:7d:cc:89:36:9d:4b:94:1d:67:c8:32:e6:5f:0a:
86:ec:ca:e3:4a:14:1b:50:d0:82:4d:c8:0f:79:df:6c:2b:ce:
f7:b1:2f:a9:fa:62:d9:77:aa:6a:e8:d0:8e:70:ba:6b:9b:af:
74:ae:cb:73:0b:e8:21:29:48:a9:63:62:53:22:ec:8c:2d:71:
d5:e9:42:56:d3:42:d9:4e:29:5a:ad:30:05:21:63:a8:fa:f3:
5f:9d:9a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:52:21 2026 by rpki-client