Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: 2aW3g01gW7SOVmYUMxsq0ZgwD5tbvHTaYj0GZBd/PVw=
Subject key identifier: 1A:FD:85:22:69:15:40:1E:64:69:5A:28:69:8A:97:3E:A2:F2:D6:6D
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 01A1DE0257918E1951BEA44A067261294F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 1AFF
Signing time: Sun 15 Nov 2026 07:00:57 +0000
Manifest this update: Sun 15 Nov 2026 07:00:57 +0000
Manifest next update: Mon 16 Nov 2026 07:00:57 +0000
Files and hashes: 1: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: hCwruUfHSMwyBiE9n8maSC8tcsjX1D4Cg/8RPwQG+MQ=)
2: Ll4El4EPvQjU1m3_NGW31BoMNbs.roa (hash: aAbsXcXAi1Px9rBqFebnRpJI/7J+UKhx99NtmpOY4GQ=)
3: MlnC-jaRpZnIrgB8_eQnTAbVGTA.roa (hash: LraAiuo62bJSCi7FsjMWIePU6+pRqpeuBTDorfg6wzo=)
4: WVi_ybIpobHkUBuINJ5UAOJnWNI.roa (hash: 3fbJIuP8QMGU6Mp39Y5b/MTPHVVyptacQbOnxd8jif8=)
5: YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa (hash: gnWGWFdrNvGan6Zj654ovvMYwlS3b9SdtQbQJSYqz8w=)
6: cKL1r39FOEn9-Io6QM2GHDGad7Y.roa (hash: IVOj6G/Kxw/gIVSF+sBn1ShNhJ2a3NRvKy7Xif0pwjk=)
7: clfdiMu1i07BMzYCaMwkqCSWESQ.roa (hash: nPTdJ+2EENVzerbY85J3Hj4LaW3YuLFq8ExfSo1tXKU=)
8: l0hkPBiKEWtDrLzWt9rzeYLhYdk.roa (hash: LTxCKcgSLvCmIp5fk5kJlSt7sEk0QGEUSZibVkJctUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:57:91:8e:19:51:be:a4:4a:06:72:61:29:4f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Nov 15 07:00:57 2026 GMT
Not After : Nov 16 07:00:57 2026 GMT
Subject: CN=1afd85226915401e64695a28698a973ea2f2d66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:30:6d:71:9f:9d:f0:3e:0a:16:18:ea:65:d6:
db:29:93:ce:f6:29:ca:5d:9e:59:03:78:24:55:73:
32:eb:b5:8f:fa:94:80:a0:d6:95:22:3b:59:87:24:
4a:84:f7:ea:32:fc:30:88:1c:30:67:e0:b2:0a:16:
d8:8e:78:cf:22:34:61:fb:28:e7:d5:19:75:cd:6a:
e9:4d:b7:46:d9:8d:d8:9a:9e:83:a6:85:c3:ed:83:
a6:e2:75:be:e1:48:a2:03:8a:18:e3:47:dc:c6:9b:
99:f9:65:60:e8:00:24:07:4f:9f:61:4c:cf:47:ee:
60:1a:f8:d6:03:11:ad:88:12:39:a7:00:bb:00:09:
07:76:a5:e4:1a:80:ab:f3:7a:49:63:38:3e:60:ef:
c8:48:7c:24:5a:08:eb:45:c2:52:f7:d4:42:a7:75:
f0:a0:af:03:fc:df:87:7c:0d:64:59:ad:b8:12:f3:
4c:28:f7:a7:ad:59:19:14:93:91:dd:df:16:60:69:
d9:69:f9:14:df:ee:8a:1d:ed:7c:1f:c1:83:77:80:
6d:c6:37:25:35:21:73:1d:37:54:03:fb:5b:2e:3c:
e2:ce:fc:f9:2a:e8:63:dd:37:65:1b:88:7d:0b:bc:
e8:83:a5:7f:e3:c7:69:d1:c2:04:62:31:ed:7a:40:
7e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FD:85:22:69:15:40:1E:64:69:5A:28:69:8A:97:3E:A2:F2:D6:6D
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c7:d8:54:a0:ea:f0:b8:3a:f6:12:85:ce:be:fb:41:6a:e7:
83:c0:d5:ac:0b:62:63:97:9a:dc:28:64:b4:06:50:22:79:82:
f5:bb:20:0f:cf:72:d0:d4:a6:e8:15:6a:f8:c0:f8:db:86:b7:
ac:db:82:05:86:79:bb:ed:66:b5:a2:3d:19:ab:2b:a9:d5:49:
f4:58:34:2c:08:8c:1c:92:fb:c9:5d:b0:aa:a7:7d:88:72:60:
3d:5c:2f:0b:02:91:db:86:80:65:c2:61:52:2c:67:c9:2f:36:
2f:c9:8a:c6:bc:42:3d:b0:0d:c1:97:02:ec:0c:6d:f1:73:c2:
df:bb:09:bc:00:9b:d5:fa:be:27:e5:59:39:87:83:54:3a:55:
ab:9d:64:a2:9f:00:74:6d:f7:1c:53:cc:16:05:56:1c:2a:54:
ac:3f:62:11:fd:ce:82:36:51:d8:83:30:8a:e3:cb:56:30:6e:
75:07:2f:f5:f3:39:84:31:5b:fb:77:82:8b:15:e1:f8:47:b2:
8f:da:a5:35:06:e8:1b:f4:74:ea:b2:c5:7c:ce:cd:63:90:cd:
41:f4:19:25:b5:2f:4d:b4:42:60:db:49:77:d8:e3:90:96:f8:
d1:0b:57:0e:16:74:76:60:3b:2a:44:a3:6e:43:06:43:6b:c8:
d7:93:d3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:16:14 2026 by rpki-client