Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/kZ0SeaWG-mmYusKeSnYtacZHkT8.mft
File: kZ0SeaWG-mmYusKeSnYtacZHkT8.mft (raw, json)
Hash identifier: WH9JiB89lkxTQpIn254dRlzpmXI8D+w23Uc7w9HQNH8=
Subject key identifier: 12:AF:65:21:74:DE:61:2C:69:63:B7:8D:58:5B:FD:EE:17:1C:FA:A3
Authority key identifier: 91:9D:12:79:A5:86:FA:69:98:BA:C2:9E:4A:76:2D:69:C6:47:91:3F
Certificate issuer: /CN=919d1279a586fa6998bac29e4a762d69c647913f
Certificate serial: 01A0C4B2DD5095FCB5E4FD1FA2E623A133C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZ0SeaWG-mmYusKeSnYtacZHkT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/kZ0SeaWG-mmYusKeSnYtacZHkT8.mft
Manifest number: 35
Signing time: Mon 21 Sep 2026 16:00:51 +0000
Manifest this update: Mon 21 Sep 2026 16:00:51 +0000
Manifest next update: Tue 22 Sep 2026 16:00:51 +0000
Files and hashes: 1: dzp90agq2vvBJsLkpxE0l28RmS0.roa (hash: TkQPgCCuKHshtjm85sZCsOI0GrifQVYAf/Ejb921RBY=)
2: kZ0SeaWG-mmYusKeSnYtacZHkT8.crl (hash: /N5YmpTEBPXj/6sKz0P9tvCFi1pTGDq2VzG6qZnY9nA=)
3: xkBQpCnwkBAtC9kCslaBf5jSxLU.asa (hash: Lq702Ll5x4p2hwewp6EOD4YKMzeRL1L0nQ70x58rhyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/kZ0SeaWG-mmYusKeSnYtacZHkT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/kZ0SeaWG-mmYusKeSnYtacZHkT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kZ0SeaWG-mmYusKeSnYtacZHkT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:dd:50:95:fc:b5:e4:fd:1f:a2:e6:23:a1:33:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=919d1279a586fa6998bac29e4a762d69c647913f
Validity
Not Before: Sep 21 16:00:51 2026 GMT
Not After : Sep 22 16:00:51 2026 GMT
Subject: CN=12af652174de612c6963b78d585bfdee171cfaa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:a7:71:07:b2:27:ed:e3:fd:3f:1a:c5:ca:
71:d9:ce:21:43:9e:4a:61:e3:7e:d6:f2:70:3e:36:
6d:c8:9a:23:1a:e4:07:cd:05:e8:1e:33:02:50:c7:
4b:7d:b7:2a:24:0e:83:ec:b3:1e:aa:3a:1a:9a:d5:
7e:2c:c3:c2:37:ed:5c:51:ac:17:f8:a2:63:3d:8a:
25:cd:08:ec:3b:f9:1e:c3:ac:70:be:81:5d:68:e9:
15:f2:f1:f9:cc:03:f1:8f:5f:90:7d:d8:06:e2:e9:
3c:41:94:5e:5d:f2:6c:61:07:96:b2:99:7b:ac:9a:
63:a3:3a:da:2d:e2:cf:dc:b9:ea:c9:02:67:f4:3b:
fe:08:57:fc:db:2f:dc:5d:89:16:4a:3a:23:48:58:
c9:15:d6:6d:ab:d9:d6:bf:0f:1d:dc:25:a6:3e:85:
a8:a9:1e:be:55:08:84:3c:b0:2e:6e:b5:ac:f5:3c:
75:9a:17:7f:08:50:4a:96:cf:e2:9c:cc:51:13:81:
7b:75:77:e0:c4:d9:ba:f8:58:b2:e9:31:03:00:2d:
35:c9:00:35:73:94:63:23:c3:bb:de:73:aa:d4:c4:
c0:80:de:73:05:a5:cb:86:d4:9a:bd:69:56:c7:c0:
fe:bb:61:47:99:0a:9e:3f:e7:a4:56:f1:34:85:5b:
43:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AF:65:21:74:DE:61:2C:69:63:B7:8D:58:5B:FD:EE:17:1C:FA:A3
X509v3 Authority Key Identifier:
keyid:91:9D:12:79:A5:86:FA:69:98:BA:C2:9E:4A:76:2D:69:C6:47:91:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZ0SeaWG-mmYusKeSnYtacZHkT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/kZ0SeaWG-mmYusKeSnYtacZHkT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/46ebbf-89a2-4a26-a74c-d9e75231d0bf/1/kZ0SeaWG-mmYusKeSnYtacZHkT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1d:de:0e:6d:0c:d7:e3:1e:f0:c8:54:78:86:58:ac:d3:11:
6a:4b:2c:f2:b2:f2:18:47:f2:86:70:08:8f:b0:9c:84:e4:16:
e6:c9:92:9c:8d:86:59:17:d0:e7:ea:92:af:1d:6c:72:67:cc:
c3:97:97:c5:fd:94:29:02:e8:b6:e6:a9:0a:83:fc:c4:9d:e9:
4c:06:cf:d5:c7:de:27:fd:2a:e5:2a:8e:14:d5:af:be:8c:59:
27:7b:d5:a6:52:b8:4f:90:f3:9e:40:06:bf:33:19:f0:fd:48:
70:a5:6d:71:98:af:c7:9a:3d:12:62:0f:e9:a6:1e:fe:ca:80:
2c:5c:2a:81:26:af:6e:16:5d:f1:48:3f:33:20:08:d2:08:d3:
4c:9a:e2:d7:56:8f:e9:1f:1d:78:3e:21:d6:5e:5f:d8:8f:c2:
11:eb:1c:41:2e:eb:34:6a:21:5d:79:1a:7e:53:25:3e:42:11:
a8:49:ef:17:1d:6a:40:9a:a1:86:01:c8:10:07:29:53:59:18:
dc:00:d3:39:37:28:19:96:ce:ba:8d:b7:a7:d6:cc:0f:0a:fc:
af:0d:9d:65:2d:14:3a:5a:22:65:15:12:b9:9a:49:58:c9:7d:
c8:fc:75:e3:7c:13:c3:cd:3b:a3:99:ae:db:4a:da:50:16:67:
4c:7d:8b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:52:38 2026 by rpki-client