Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: nBzW4k6cYhnTJsd25HTMILW5bHc+2JluttZSC3gIbBg=
Subject key identifier: 22:09:BF:74:4B:BB:78:FF:A4:F2:20:98:C9:E8:0E:E6:A6:E3:63:A3
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 01A0D49491D7062230855421B3DB129690AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 1A75
Signing time: Thu 24 Sep 2026 18:01:41 +0000
Manifest this update: Thu 24 Sep 2026 18:01:41 +0000
Manifest next update: Fri 25 Sep 2026 18:01:41 +0000
Files and hashes: 1: FVFRIPh6vjxNZF9GmdKTzMvxW20.roa (hash: RxEPmyeQKw2S/n6YHyV1FFH2RRQ1FPtU6WCYyBI+QSs=)
2: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: IaRvRvnnjsageCBKDfhsgkVFJIob8puaZhtk/HIWMEw=)
3: Ll4El4EPvQjU1m3_NGW31BoMNbs.roa (hash: aAbsXcXAi1Px9rBqFebnRpJI/7J+UKhx99NtmpOY4GQ=)
4: MlnC-jaRpZnIrgB8_eQnTAbVGTA.roa (hash: LraAiuo62bJSCi7FsjMWIePU6+pRqpeuBTDorfg6wzo=)
5: WVi_ybIpobHkUBuINJ5UAOJnWNI.roa (hash: 3fbJIuP8QMGU6Mp39Y5b/MTPHVVyptacQbOnxd8jif8=)
6: YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa (hash: gnWGWFdrNvGan6Zj654ovvMYwlS3b9SdtQbQJSYqz8w=)
7: cKL1r39FOEn9-Io6QM2GHDGad7Y.roa (hash: IVOj6G/Kxw/gIVSF+sBn1ShNhJ2a3NRvKy7Xif0pwjk=)
8: clfdiMu1i07BMzYCaMwkqCSWESQ.roa (hash: nPTdJ+2EENVzerbY85J3Hj4LaW3YuLFq8ExfSo1tXKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:91:d7:06:22:30:85:54:21:b3:db:12:96:90:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Sep 24 18:01:41 2026 GMT
Not After : Sep 25 18:01:41 2026 GMT
Subject: CN=2209bf744bbb78ffa4f22098c9e80ee6a6e363a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e1:5b:07:bd:fa:27:4c:07:db:2c:28:e2:ff:
13:57:a0:3a:4f:fa:a5:f2:a3:5b:7a:ab:0e:bf:84:
96:1e:d2:ea:4b:a6:12:a1:93:e6:81:f1:8d:f1:bd:
e6:35:b7:f7:a8:d0:95:e8:89:2c:05:60:a0:17:fe:
bc:87:d6:a1:88:2c:dd:e3:63:1f:2d:a0:dc:1c:b8:
70:78:65:3e:08:e4:30:8e:b0:03:44:ac:c2:da:c3:
e1:74:78:1d:e4:13:29:0d:4c:de:88:1f:2a:08:66:
41:67:13:36:5d:84:e6:42:6d:ec:34:db:15:d3:9d:
f5:02:b3:0f:eb:3c:12:db:4b:96:e4:c5:d8:e6:46:
bb:04:9b:99:a5:06:37:c0:52:1c:28:bd:60:98:40:
f0:0d:28:37:02:f0:94:f7:56:67:65:69:c7:92:6b:
4a:62:6e:dc:40:a7:b6:63:74:2c:c5:86:08:8b:31:
19:f8:c0:85:be:28:97:bf:b8:28:f0:d2:27:56:6d:
27:79:9f:0e:1e:38:db:b3:e4:73:92:66:2e:11:c5:
9b:37:96:ab:d4:42:ba:85:6d:63:d6:c6:d5:93:31:
e7:2d:10:0d:aa:1d:67:3b:0d:88:a5:f3:26:a7:2e:
c7:c2:d8:ae:b6:03:1f:9f:8d:ac:52:74:4d:58:1f:
b9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:09:BF:74:4B:BB:78:FF:A4:F2:20:98:C9:E8:0E:E6:A6:E3:63:A3
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:33:77:ac:cb:26:79:62:f6:65:5d:a4:e4:17:af:2a:15:9a:
6f:a4:f4:8f:b0:f0:1a:73:a6:41:9e:af:28:46:42:5d:b0:a7:
0a:81:71:4d:07:b7:2d:e3:96:c0:1c:b8:50:07:b7:91:24:d2:
77:73:c0:74:97:38:c5:82:5a:c5:6a:e7:dc:87:bd:e9:2f:8f:
af:8f:8b:a7:1d:a7:5a:e9:fb:32:04:89:a3:80:57:82:22:9c:
29:5b:3b:0a:c2:ed:e2:bf:53:aa:36:43:84:7e:bc:87:e4:f9:
97:b7:04:77:b5:96:ce:08:e1:94:c3:09:c2:ca:97:36:65:4a:
65:41:5a:1c:c0:76:b8:44:5f:c5:27:95:ac:54:77:25:6f:ef:
c2:20:f5:f4:42:f3:49:be:59:c1:be:71:22:59:17:31:9c:e1:
e0:7f:f5:35:a7:6d:67:0a:e5:f2:06:fa:15:3e:10:ce:5a:1f:
9a:10:af:76:b8:aa:7e:dc:7b:bc:10:08:ff:f0:50:e7:68:11:
12:10:82:c3:ac:a2:9d:62:1c:7e:d9:a5:83:58:db:9a:95:06:
c9:66:93:db:81:f2:49:cc:1f:94:90:08:51:db:68:56:84:51:
7e:95:7e:87:36:15:7b:13:e4:6c:fa:e2:43:89:d6:a4:67:3f:
61:b0:dd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:05:27 2026 by rpki-client