Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier: 2YmzeUitwQHGKNaAikhePdtZVv6UPq1FpX6dW62cfY8=
Subject key identifier: 16:81:88:75:5B:1E:95:52:DB:B6:BA:72:51:2F:39:D1:80:00:17:B8
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 019D97AB2D0D55DF8287F31A7673128B49FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number: 0CC0
Signing time: Thu 16 Apr 2026 19:01:10 +0000
Manifest this update: Thu 16 Apr 2026 19:01:10 +0000
Manifest next update: Fri 17 Apr 2026 19:01:10 +0000
Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: lcf+4WcEM8+qbbZ4lYqoIeVes+z8bgoGK5b5RbM0jZ4=)
2: rpScVUsryyaJ-F5kWegdG7uTvQI.roa (hash: 90JJSR9HRiVyxHT2c148KiZc/jsGWJOiBBV+kTkgs7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:ab:2d:0d:55:df:82:87:f3:1a:76:73:12:8b:49:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Apr 16 19:01:10 2026 GMT
Not After : Apr 17 19:01:10 2026 GMT
Subject: CN=168188755b1e9552dbb6ba72512f39d1800017b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:9e:10:b9:30:ed:2e:c5:ba:12:4e:d4:87:
d0:3d:b7:20:04:94:1f:db:d6:6e:83:44:8a:a9:d8:
d2:6a:4b:ed:26:99:dd:4f:05:67:70:b5:6c:31:e8:
78:83:2e:f8:e8:77:e5:b5:a4:8f:c5:f9:69:1b:7a:
e8:5b:c2:e1:56:84:b9:06:4e:2b:f1:fd:d8:fd:5b:
ac:84:0f:df:2b:84:0f:a3:a3:0b:59:a9:ca:33:12:
16:1c:df:8d:41:2e:80:04:91:21:66:f2:0e:51:05:
47:d8:b1:59:ef:fc:97:c3:c3:6a:98:09:c5:3b:dd:
00:68:8a:14:30:f3:1c:ba:f6:2a:ab:bb:ba:76:65:
ee:5d:38:51:63:70:a2:dd:65:8d:38:c0:53:e2:16:
c6:4b:7c:c5:d3:ca:a3:2f:4d:40:0a:a7:60:85:dc:
aa:35:46:e4:18:ab:18:15:18:52:fb:54:bf:15:04:
05:25:11:67:70:93:a5:9e:61:c9:3c:20:9f:d1:81:
54:03:0c:45:0f:4f:3e:99:84:1f:f5:ed:49:73:65:
0e:96:17:50:83:4b:95:1b:9f:4f:d4:15:29:33:93:
01:8b:31:1f:9a:68:80:f9:44:64:d0:a6:c4:56:ba:
30:f3:da:74:80:63:34:a1:1a:8d:bd:c3:3a:64:df:
04:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:81:88:75:5B:1E:95:52:DB:B6:BA:72:51:2F:39:D1:80:00:17:B8
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8a:79:f0:e7:95:7a:63:0a:e3:4b:a5:53:fe:53:2e:31:6b:
b2:1f:7b:95:2e:03:4c:e8:26:52:80:21:6d:aa:21:73:8a:89:
fe:e1:ca:a5:90:eb:1a:2b:8b:f7:fb:2f:1a:f0:68:01:8d:36:
10:78:eb:f4:d9:00:bd:dc:99:42:2e:c9:f6:57:dd:90:3b:9f:
f0:e2:1e:b0:d3:0e:4f:2c:63:a7:67:3b:1e:48:ec:dc:59:fc:
f5:81:eb:85:86:1e:b9:43:13:32:63:68:a2:df:c5:04:17:aa:
9a:a9:33:5f:20:7e:46:d3:82:fb:92:a9:e9:b9:1f:c8:04:d7:
b0:f7:c8:10:e2:64:db:50:db:7f:08:cc:30:c0:b7:b9:a0:8c:
a9:f5:cf:6d:e2:b8:2b:d4:33:c7:de:5c:e6:11:3c:da:c0:79:
17:67:78:7e:31:20:97:57:72:5c:8a:55:bd:59:50:64:33:44:
a3:77:6f:ba:e4:5b:3d:2d:ed:67:7e:d2:c6:e5:de:56:29:09:
33:d8:63:c7:3f:b3:ed:66:db:d4:4f:2d:24:4e:44:c8:e9:11:
96:7c:ca:97:c4:f5:ab:88:1f:c6:07:86:b6:40:f1:70:22:51:
cb:d0:a6:de:07:8d:48:be:63:12:b8:70:67:93:90:20:55:5f:
b9:75:51:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Xqy0NVd+Ch/MadnMSi0n/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMzI3MTExNzA3Njg5NTBmZGQ5ZjlkZWZlNjUxZjJkNWEx
MzEyYmUwHhcNMjYwNDE2MTkwMTEwWhcNMjYwNDE3MTkwMTEwWjAzMTEwLwYDVQQD
EygxNjgxODg3NTViMWU5NTUyZGJiNmJhNzI1MTJmMzlkMTgwMDAxN2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmueELkw7S7FuhJO1IfQPbcgBJQf
29Zug0SKqdjSakvtJpndTwVncLVsMeh4gy746HfltaSPxflpG3roW8LhVoS5Bk4r
8f3Y/VushA/fK4QPo6MLWanKMxIWHN+NQS6ABJEhZvIOUQVH2LFZ7/yXw8NqmAnF
O90AaIoUMPMcuvYqq7u6dmXuXThRY3Ci3WWNOMBT4hbGS3zF08qjL01ACqdghdyq
NUbkGKsYFRhS+1S/FQQFJRFncJOlnmHJPCCf0YFUAwxFD08+mYQf9e1Jc2UOlhdQ
g0uVG59P1BUpM5MBizEfmmiA+URk0KbEVrow89p0gGM0oRqNvcM6ZN8EKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaBiHVbHpVS27a6clEvOdGAABe4MB8GA1UdIwQY
MBaAFJMycRFwdolQ/dn53v5lHy1aExK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hZmNkNDAtMmE1MC00YzExLWJhNDct
ZTExZmZlYzg5Y2Q0LzEva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hZmNkNDAtMmE1MC00YzExLWJhNDctZTExZmZlYzg5Y2Q0
LzEva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4p58OeV
emMK40ulU/5TLjFrsh97lS4DTOgmUoAhbaohc4qJ/uHKpZDrGiuL9/svGvBoAY02
EHjr9NkAvdyZQi7J9lfdkDuf8OIesNMOTyxjp2c7Hkjs3Fn89YHrhYYeuUMTMmNo
ot/FBBeqmqkzXyB+RtOC+5Kp6bkfyATXsPfIEOJk21DbfwjMMMC3uaCMqfXPbeK4
K9Qzx95c5hE82sB5F2d4fjEgl1dyXIpVvVlQZDNEo3dvuuRbPS3tZ37SxuXeVikJ
M9hjxz+z7Wbb1E8tJE5EyOkRlnzKl8T1q4gfxgeGtkDxcCJRy9Cm3geNSL5jErhw
Z5OQIFVfuXVR6Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:21 2026 by rpki-client