Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: tc/ap/AoQzeBZYTpVD9hSXPb6Jrc5kAiJoUg1V5bcCA=
Subject key identifier: A0:96:09:B2:F5:8A:6D:E6:05:CF:D3:49:82:BF:92:8E:86:5E:FE:E0
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 019D2A045606FF3E07464BC6F1AB323CFE79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 188F
Signing time: Thu 26 Mar 2026 12:00:20 +0000
Manifest this update: Thu 26 Mar 2026 12:00:20 +0000
Manifest next update: Fri 27 Mar 2026 12:00:20 +0000
Files and hashes: 1: FVFRIPh6vjxNZF9GmdKTzMvxW20.roa (hash: RxEPmyeQKw2S/n6YHyV1FFH2RRQ1FPtU6WCYyBI+QSs=)
2: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: JbXepLX6Ke7NLfiKISMe3wposKpcWkXgDMko7mPuzck=)
3: Ll4El4EPvQjU1m3_NGW31BoMNbs.roa (hash: aAbsXcXAi1Px9rBqFebnRpJI/7J+UKhx99NtmpOY4GQ=)
4: MlnC-jaRpZnIrgB8_eQnTAbVGTA.roa (hash: LraAiuo62bJSCi7FsjMWIePU6+pRqpeuBTDorfg6wzo=)
5: WVi_ybIpobHkUBuINJ5UAOJnWNI.roa (hash: 3fbJIuP8QMGU6Mp39Y5b/MTPHVVyptacQbOnxd8jif8=)
6: YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa (hash: gnWGWFdrNvGan6Zj654ovvMYwlS3b9SdtQbQJSYqz8w=)
7: cKL1r39FOEn9-Io6QM2GHDGad7Y.roa (hash: IVOj6G/Kxw/gIVSF+sBn1ShNhJ2a3NRvKy7Xif0pwjk=)
8: clfdiMu1i07BMzYCaMwkqCSWESQ.roa (hash: nPTdJ+2EENVzerbY85J3Hj4LaW3YuLFq8ExfSo1tXKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:56:06:ff:3e:07:46:4b:c6:f1:ab:32:3c:fe:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Mar 26 12:00:20 2026 GMT
Not After : Mar 27 12:00:20 2026 GMT
Subject: CN=a09609b2f58a6de605cfd34982bf928e865efee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e4:46:5f:7d:30:2b:44:6a:f9:58:eb:18:f9:
41:db:8d:f2:d9:6a:9d:88:3d:82:50:cf:a6:d9:6f:
05:42:63:f5:a7:1a:d2:66:1a:d9:2c:7a:c9:fc:f1:
fa:94:d7:01:99:95:9b:f6:27:2e:8f:77:fa:f0:1f:
2d:56:46:db:79:51:e9:4e:4e:51:a0:91:a7:c9:b7:
69:ac:65:b0:59:19:3c:0a:75:78:5a:62:8b:ae:25:
0d:8a:48:15:e6:e4:23:a6:53:19:0f:d1:99:17:c9:
f5:f3:e8:7c:f3:d9:96:6f:0a:47:11:0d:ac:c1:b0:
ac:87:70:59:ad:2e:ac:47:dc:ae:e3:29:af:4b:a2:
36:ad:1f:e4:8b:e5:d4:24:03:df:60:44:ef:9d:d2:
c5:0e:1f:99:7b:e2:c6:33:a6:25:b3:b9:da:bb:08:
c5:0d:ba:fd:ab:78:fa:7c:8d:12:9a:c4:e4:e7:90:
18:42:06:3d:ee:12:97:03:34:e7:2d:12:6b:47:08:
c8:a6:17:fd:aa:97:7c:6d:eb:d9:77:cc:d0:88:89:
bb:48:86:cc:82:83:ea:1e:54:2b:bc:a5:02:97:3d:
96:1a:b2:dc:90:a7:eb:78:79:18:ae:36:56:13:85:
75:64:04:bd:2f:80:22:a3:e8:c6:51:27:34:65:25:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:96:09:B2:F5:8A:6D:E6:05:CF:D3:49:82:BF:92:8E:86:5E:FE:E0
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ee:8c:ef:71:96:df:c7:ed:14:ad:a2:79:f5:96:2d:77:5c:
bd:d1:7e:bf:99:24:5b:e7:24:97:61:d9:57:fe:0f:a6:71:37:
f8:57:cf:b7:4f:45:34:5f:6d:71:1f:c5:1f:03:63:e4:71:4f:
d6:87:e0:15:86:10:fc:d2:f4:5d:4a:f5:5c:a2:af:04:cd:d0:
d0:10:7f:fb:ce:18:07:82:39:ad:ee:f3:05:2b:e6:dd:f4:f1:
9a:57:00:7a:87:2d:f6:25:db:a7:4f:4e:e4:0c:42:c1:9b:0e:
31:e1:74:0a:21:03:27:14:51:00:3d:01:ba:a9:fd:13:f7:48:
1f:33:59:6d:8d:8a:7c:e5:4d:1c:3c:9f:d5:6a:2d:58:cf:79:
17:32:a6:7e:bc:6e:53:70:88:1c:1c:c1:7a:37:aa:d7:ee:68:
12:9a:25:47:ba:86:21:b4:19:64:1c:29:57:38:3e:91:ef:3c:
61:6a:e2:a5:a5:13:e4:51:b0:cf:70:e8:82:36:6f:78:74:b7:
e1:4a:94:60:1c:a9:aa:85:4f:ef:e1:1a:f4:ad:73:9b:35:d0:
9b:44:e5:73:ac:69:a4:1b:a5:cc:8c:57:be:b8:0e:93:6c:a5:
0c:08:e8:1a:90:4b:52:37:9e:ba:e3:65:a8:2c:1c:49:7d:9d:
8c:d8:7a:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBFYG/z4HRkvG8asyPP55MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzY0ZGMyMWNiNWZkNGQwYmNiMDJjYzJiNDNmZDc1MWZk
OTFlMWUwHhcNMjYwMzI2MTIwMDIwWhcNMjYwMzI3MTIwMDIwWjAzMTEwLwYDVQQD
EyhhMDk2MDliMmY1OGE2ZGU2MDVjZmQzNDk4MmJmOTI4ZTg2NWVmZWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleRGX30wK0Rq+VjrGPlB243y2Wqd
iD2CUM+m2W8FQmP1pxrSZhrZLHrJ/PH6lNcBmZWb9icuj3f68B8tVkbbeVHpTk5R
oJGnybdprGWwWRk8CnV4WmKLriUNikgV5uQjplMZD9GZF8n18+h889mWbwpHEQ2s
wbCsh3BZrS6sR9yu4ymvS6I2rR/ki+XUJAPfYETvndLFDh+Ze+LGM6Yls7nauwjF
Dbr9q3j6fI0SmsTk55AYQgY97hKXAzTnLRJrRwjIphf9qpd8bevZd8zQiIm7SIbM
goPqHlQrvKUClz2WGrLckKfreHkYrjZWE4V1ZAS9L4Aio+jGUSc0ZSWNdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCWCbL1im3mBc/TSYK/ko6GXv7gMB8GA1UdIwQY
MBaAFCrGTcIctf1NC8sCzCtD/XUf2R4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAt
MDk3YzNjMWMyNTQwLzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAtMDk3YzNjMWMyNTQw
LzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO+6M73GW
38ftFK2iefWWLXdcvdF+v5kkW+ckl2HZV/4PpnE3+FfPt09FNF9tcR/FHwNj5HFP
1ofgFYYQ/NL0XUr1XKKvBM3Q0BB/+84YB4I5re7zBSvm3fTxmlcAeoct9iXbp09O
5AxCwZsOMeF0CiEDJxRRAD0Buqn9E/dIHzNZbY2KfOVNHDyf1WotWM95FzKmfrxu
U3CIHBzBejeq1+5oEpolR7qGIbQZZBwpVzg+ke88YWripaUT5FGwz3DogjZveHS3
4UqUYBypqoVP7+Ea9K1zmzXQm0Tlc6xppBulzIxXvrgOk2ylDAjoGpBLUjeeuuNl
qCwcSX2djNh6ow==
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:00 2026 by rpki-client