Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
File: KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft (raw, json)
Hash identifier: gMWmWxEoc/yfLDNHlmLv4/MS410kWPJX3Z2AeQXh/KI=
Subject key identifier: C3:52:43:0D:50:B2:53:4B:D8:34:48:1F:B5:D3:F5:AF:8D:55:54:81
Authority key identifier: 29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
Certificate issuer: /CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Certificate serial: 019D27A8C1147B653BE60FAF3923BC9A67E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 01:01:03 +0000
Manifest this update: Thu 26 Mar 2026 01:01:03 +0000
Manifest next update: Fri 27 Mar 2026 01:01:03 +0000
Files and hashes: 1: D5K8QPUyMYfagYASYwL4lujklys.roa (hash: hyr6M3p6aHhLRaW47SkFIlt8kwLspMP/qCLs3ZNqvMQ=)
2: KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl (hash: j0ijn7Ra4ZjQBBBaK2k/5jmOfkZN8TeC2JeQDEMKlBE=)
3: c4MgsqHgRIS7A8j2sOY1tiFehV8.roa (hash: Rh8SPNOodShlWVhJWX+J1gXICJ+9LsUUZNtxoGFB9Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c1:14:7b:65:3b:e6:0f:af:39:23:bc:9a:67:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Validity
Not Before: Mar 26 01:01:03 2026 GMT
Not After : Mar 27 01:01:03 2026 GMT
Subject: CN=c352430d50b2534bd834481fb5d3f5af8d555481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6a:7c:eb:29:e1:41:ad:a9:0e:93:af:f2:47:
a7:47:d6:82:1c:e2:a0:ce:97:a9:30:03:cb:b0:bf:
e0:05:05:9e:1a:28:1c:28:fe:ba:de:3a:b4:76:eb:
b2:ad:5f:d2:86:4c:12:86:fd:9b:fa:3b:f3:e7:35:
2e:48:35:1c:37:82:b8:33:ed:f1:12:f3:35:bb:ea:
df:ed:25:53:0c:77:fa:70:3a:29:9b:a5:a6:c7:52:
e1:ff:9f:7a:00:ae:6d:ab:43:a4:b4:25:0c:0f:8c:
1d:5a:3f:9d:af:5b:66:bc:47:6b:b5:a0:7d:d5:2b:
90:ed:0a:c5:4c:37:1d:ba:90:c3:4b:d9:ed:b4:43:
4a:25:84:3b:d4:88:fc:7c:ad:89:15:70:3d:bb:bc:
bb:57:bd:7f:45:54:35:20:57:da:2a:a9:87:7a:e6:
c5:ab:76:33:1a:40:f2:be:72:05:23:b1:37:78:23:
8c:9b:40:29:7c:07:99:8e:28:5e:d6:38:d2:ce:1f:
69:38:41:47:ca:ad:f6:cc:fa:03:b1:6c:e8:e5:74:
4e:c3:be:6b:c5:4d:2e:a8:c8:f7:dd:37:7e:a6:64:
c1:ad:b2:d3:a9:27:d6:03:9f:7c:2f:df:14:0e:c9:
ef:ba:01:58:91:be:58:3d:49:82:10:15:95:ea:fd:
7b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:52:43:0D:50:B2:53:4B:D8:34:48:1F:B5:D3:F5:AF:8D:55:54:81
X509v3 Authority Key Identifier:
keyid:29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:cd:69:91:00:5c:c7:c8:61:5c:4c:25:b5:e6:a5:ea:02:a7:
b2:ee:b7:80:c9:85:7c:46:35:d5:c2:f2:b7:44:af:a4:55:ff:
b8:74:52:60:53:a4:d2:a2:85:a6:d1:d0:86:c6:b3:18:ec:74:
ad:36:26:95:c5:ed:3b:84:54:1f:3b:b9:91:31:51:e0:2a:3a:
d0:ce:50:10:ef:7f:37:30:77:08:e1:33:b8:1d:20:83:91:59:
06:4f:0a:e3:bf:13:e0:57:d4:f7:2c:32:96:47:1c:7d:43:dc:
4d:6d:19:62:48:b9:8f:be:25:a8:ab:c2:bf:dc:25:49:a9:f2:
b2:73:aa:48:17:e7:64:83:fc:35:0a:bb:f6:d8:37:4a:74:f1:
40:9e:8c:63:4f:4f:c5:41:62:d8:22:c8:db:4d:f7:f1:81:bd:
17:e4:d7:6b:dd:d3:80:68:45:b6:a4:dd:a8:0a:2f:c8:87:d6:
a4:8a:82:3b:5d:48:2b:81:83:db:57:20:cb:36:86:e5:dc:57:
1b:91:50:45:5d:6d:cb:6e:b8:e6:25:e2:51:00:f7:90:a7:c0:
01:6a:1d:c5:20:e8:05:bb:57:d5:d7:69:dc:3d:79:36:48:f8:
ff:3f:aa:d0:54:1c:58:36:77:a7:90:29:e6:19:a2:9d:60:c1:
ab:06:f3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:32:53 2026 by rpki-client