Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: eW0ywJoH9vQSZp+qi5F9EkvQFqppGIyyWuX/3PP9fcQ=
Subject key identifier: 4A:42:6F:F2:EE:46:EE:C8:05:49:EF:35:D0:B6:EE:16:0E:C6:B0:D4
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 019E1D597A5D02AAC9775283C7D3D4EEB07E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 190D
Signing time: Tue 12 May 2026 18:01:03 +0000
Manifest this update: Tue 12 May 2026 18:01:03 +0000
Manifest next update: Wed 13 May 2026 18:01:03 +0000
Files and hashes: 1: FVFRIPh6vjxNZF9GmdKTzMvxW20.roa (hash: RxEPmyeQKw2S/n6YHyV1FFH2RRQ1FPtU6WCYyBI+QSs=)
2: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: sEHw1am+a7rnYtf3niBWj2xatCEc1AKatZDzuvPPrYI=)
3: Ll4El4EPvQjU1m3_NGW31BoMNbs.roa (hash: aAbsXcXAi1Px9rBqFebnRpJI/7J+UKhx99NtmpOY4GQ=)
4: MlnC-jaRpZnIrgB8_eQnTAbVGTA.roa (hash: LraAiuo62bJSCi7FsjMWIePU6+pRqpeuBTDorfg6wzo=)
5: WVi_ybIpobHkUBuINJ5UAOJnWNI.roa (hash: 3fbJIuP8QMGU6Mp39Y5b/MTPHVVyptacQbOnxd8jif8=)
6: YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa (hash: gnWGWFdrNvGan6Zj654ovvMYwlS3b9SdtQbQJSYqz8w=)
7: cKL1r39FOEn9-Io6QM2GHDGad7Y.roa (hash: IVOj6G/Kxw/gIVSF+sBn1ShNhJ2a3NRvKy7Xif0pwjk=)
8: clfdiMu1i07BMzYCaMwkqCSWESQ.roa (hash: nPTdJ+2EENVzerbY85J3Hj4LaW3YuLFq8ExfSo1tXKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:7a:5d:02:aa:c9:77:52:83:c7:d3:d4:ee:b0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: May 12 18:01:03 2026 GMT
Not After : May 13 18:01:03 2026 GMT
Subject: CN=4a426ff2ee46eec80549ef35d0b6ee160ec6b0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ad:6a:c9:d0:11:71:5c:48:c7:79:2d:84:58:
7d:03:e0:5b:0c:11:e7:cb:48:b7:86:05:ab:69:9c:
36:55:9d:58:1c:33:e6:ae:15:20:52:c3:cb:f4:a8:
cb:e1:42:30:98:64:80:17:5b:cd:dc:f5:44:29:8f:
0f:d2:ba:60:89:28:7e:77:e3:09:51:d2:b2:74:eb:
30:66:38:72:3a:72:4c:d0:18:9f:8b:67:7d:a6:6b:
63:cd:d6:64:cb:71:ba:4a:56:8b:57:1c:db:d0:6e:
f9:b5:9f:45:70:fa:2a:cd:51:b2:40:14:a7:94:bf:
61:1a:46:78:88:78:14:40:5a:ba:0b:ad:46:2c:8b:
1a:30:c8:bb:6f:8b:58:3a:45:94:f2:82:50:ca:dc:
ae:3b:cb:4d:44:e7:d1:85:88:bc:52:fe:4c:b7:d5:
94:e2:6d:c8:fe:b8:3a:86:6d:d8:7b:3d:09:13:70:
28:91:ca:23:a1:cb:52:37:86:d8:f8:6d:5b:d1:4b:
02:16:4f:3f:16:ec:42:57:49:0d:a9:51:30:c9:23:
48:37:27:ac:72:19:0d:a5:ae:79:70:c6:d4:16:4d:
c5:12:c8:f7:9f:0b:12:b4:e6:2b:1c:e4:b3:9e:bf:
34:74:22:6b:b4:66:e8:4b:3a:8f:8d:9c:e9:ca:04:
93:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:42:6F:F2:EE:46:EE:C8:05:49:EF:35:D0:B6:EE:16:0E:C6:B0:D4
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:ad:b3:c3:7c:69:9d:b3:c2:14:52:88:eb:4a:3f:93:40:a0:
03:62:51:0a:12:f3:a1:0c:ef:10:2f:4d:d0:8c:d3:73:27:a3:
66:da:8d:31:cc:19:44:d1:9a:68:c4:30:a4:23:3d:7d:90:85:
0f:32:42:e4:c7:fa:4c:15:0e:6a:bc:4b:ab:b7:81:23:d5:1a:
45:c0:4e:91:ad:c8:e6:0e:75:43:82:41:a9:96:19:57:e4:8c:
61:9f:37:b5:22:e3:14:04:40:4b:b9:e7:d6:90:7f:0b:0a:f7:
6e:e6:d2:77:98:0e:dd:e8:50:66:d7:8c:ab:7b:98:b9:ed:83:
70:45:34:e2:68:4c:d1:24:ea:8d:78:70:87:a1:50:84:95:64:
1b:73:fb:4c:d8:30:db:d5:df:d0:34:2b:69:27:6f:cc:77:1e:
10:d8:d4:e6:ec:cf:f8:4e:e2:1c:33:9a:3a:e4:b8:8c:f8:8a:
1a:ff:12:8c:33:56:b9:cb:c2:a0:6a:a5:76:41:10:93:21:ba:
b2:56:08:bf:71:77:a1:e3:95:42:5a:a9:f6:0c:a4:ab:c4:98:
39:f7:6e:33:a7:0a:e3:db:cd:f8:81:b9:b0:a9:bd:9a:8a:75:
45:c3:82:2d:86:3d:f1:e4:08:d2:16:90:5a:bb:6e:dc:55:9f:
9d:f2:34:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:48 2026 by rpki-client