Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
File: KZWUToTcN7pqQtaLseK5pEIehKQ.mft (raw, json)
Hash identifier: kUs86eYrA38ZjpEuYdmhxOS4/B84C1ckPgJe5UmvTOk=
Subject key identifier: 53:01:DF:39:25:77:74:52:BC:5C:1F:B1:25:1D:3A:90:80:76:22:B1
Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Certificate serial: 01A10813E0BFA4345E5F86D0EEEBBF4FD02C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
Manifest number: 1A88
Signing time: Sun 04 Oct 2026 18:01:22 +0000
Manifest this update: Sun 04 Oct 2026 18:01:22 +0000
Manifest next update: Mon 05 Oct 2026 18:01:22 +0000
Files and hashes: 1: KZWUToTcN7pqQtaLseK5pEIehKQ.crl (hash: V3fn/rOxmJaTntVMM7KX8zYL22OA3upvVKW+BOoNEpw=)
2: REMIC3qlblupLlRlDy8YWtuHeGs.roa (hash: Jx2qxwn04q0eIKP0O31CsM6H6HSDWevmv7hr0SA1D6o=)
3: jqkc2v-EDfDqyX3RgGBk8W5KdEw.roa (hash: J6Uk//qcGJOT6wNTUI4e5Z8Vod7CmZ9RrMaWF9PPJeM=)
4: rrH1j10hPF7JqcYJAD3BPexcKzg.roa (hash: +IMZpUPrslETwFxcXPRLWmZpXfSU9RCOH9gP9Q/CH5w=)
5: y-cUmsyd1f2Nqa9AjFf-HrgBRvY.roa (hash: K08tIX67yafvJ07B2O/CtxAn2jeh7RiwSsp1rC6qb3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:13:e0:bf:a4:34:5e:5f:86:d0:ee:eb:bf:4f:d0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Validity
Not Before: Oct 4 18:01:22 2026 GMT
Not After : Oct 5 18:01:22 2026 GMT
Subject: CN=5301df3925777452bc5c1fb1251d3a90807622b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:3d:46:f5:99:94:5f:b8:8a:c3:65:87:78:
ef:62:34:21:d9:f9:60:f8:55:a6:25:c6:57:fb:8e:
b0:e0:e5:2e:84:b2:4b:3e:87:e9:c7:6a:e3:08:02:
34:34:80:f9:a2:a0:64:e2:8f:2d:60:fb:58:4c:26:
cd:fc:db:bd:b4:07:8c:91:dd:13:4d:36:2a:17:26:
c0:e3:e0:92:be:b2:f3:b0:92:1b:77:5b:62:9a:91:
a0:2e:68:b8:ea:92:c4:f6:21:9b:00:d4:05:06:90:
46:78:a1:c6:14:54:7a:0c:9a:d9:81:36:6b:f1:f9:
95:f2:4c:a6:30:b4:93:6b:f7:f1:17:06:76:f6:7b:
7f:d3:e0:cf:24:6d:e8:cb:65:8c:14:a6:8f:53:e7:
38:6f:05:83:3e:93:18:a1:76:a4:13:4c:b9:90:5b:
a6:41:4a:b3:23:ff:bb:a8:d6:55:06:36:03:74:d1:
e9:9c:b8:8f:9f:21:6d:2a:70:6a:8f:e6:cc:6c:71:
69:af:5e:cd:25:24:1d:56:2f:a9:d4:50:08:c3:4c:
3a:1b:5b:99:08:53:b0:7b:5f:b7:bf:f2:2b:e5:93:
68:ca:81:ca:94:11:76:60:f2:37:9f:6b:68:18:60:
67:e4:cd:c5:2e:7f:8a:52:1a:3a:1b:41:4b:43:b8:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:01:DF:39:25:77:74:52:BC:5C:1F:B1:25:1D:3A:90:80:76:22:B1
X509v3 Authority Key Identifier:
keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ea:46:8c:11:43:7b:7b:69:a8:40:12:89:34:92:54:91:8e:
64:d9:05:dd:aa:79:be:a6:7c:84:66:a2:91:15:10:8e:12:de:
21:a7:f0:e6:c4:60:5d:ea:92:02:04:f2:ef:f1:ad:49:d2:0b:
9f:9e:a5:fe:6a:bf:f2:1c:fe:c2:e3:af:3e:c2:68:bd:ce:01:
69:cb:cf:ed:70:38:fd:d7:83:0f:ec:40:da:c1:96:ab:02:fe:
1b:ff:c3:61:d6:49:46:06:f1:d7:71:b0:69:b4:91:79:1e:fd:
42:7c:fb:90:3d:1e:b5:ee:d2:52:2f:16:0c:c3:8c:50:df:d9:
ac:34:07:41:06:0b:f2:9e:85:d3:96:b4:ae:02:8a:b2:53:81:
d7:ba:d1:e8:46:e8:55:84:88:bb:bf:c3:f4:7c:51:4b:e9:e5:
51:53:1b:86:13:e1:ec:6d:6b:da:7f:ce:e4:3a:14:54:f0:f4:
6b:f1:56:da:06:93:f1:67:04:5d:a3:64:95:e4:05:2f:b8:15:
bf:ae:dd:ea:e2:6a:e6:72:12:17:ca:88:27:8e:e0:77:4b:8d:
08:ce:3d:89:0f:8e:80:ba:3f:33:90:e6:83:02:c8:01:02:76:
01:55:23:6a:c3:08:5e:7c:73:a0:2b:50:21:b2:fc:e0:0a:6a:
9c:58:85:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:10:42 2026 by rpki-client