Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier: ds8BWGemmtmpUEclQDfJhRRWmAvoV5V8Xc4AYofqFt0=
Subject key identifier: 66:89:3B:0B:E2:23:BF:FA:A0:91:B2:DB:1F:28:A2:C9:B6:3B:0D:18
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 01A0CC6C932312BA7DC9840EE92C2805BEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number: 0E69
Signing time: Wed 23 Sep 2026 04:01:02 +0000
Manifest this update: Wed 23 Sep 2026 04:01:02 +0000
Manifest next update: Thu 24 Sep 2026 04:01:02 +0000
Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: lCiBQ89xPw+KW6c8wz6CM40XV4HObca1HrX0YzSC2eo=)
2: rpScVUsryyaJ-F5kWegdG7uTvQI.roa (hash: 90JJSR9HRiVyxHT2c148KiZc/jsGWJOiBBV+kTkgs7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:93:23:12:ba:7d:c9:84:0e:e9:2c:28:05:be:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Sep 23 04:01:02 2026 GMT
Not After : Sep 24 04:01:02 2026 GMT
Subject: CN=66893b0be223bffaa091b2db1f28a2c9b63b0d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:79:b5:1a:15:6d:b7:93:a2:59:21:e0:ba:4a:
15:c2:0c:35:5e:a1:56:87:5e:79:3c:91:11:12:87:
ec:ac:ae:11:60:5f:ea:11:9d:76:8e:aa:2b:fd:e9:
ec:f6:b1:fd:16:4c:fb:d6:6c:79:f1:f1:bd:aa:a2:
29:19:09:79:4f:d5:f9:fc:c0:91:f2:20:74:f9:66:
6a:78:94:9c:c4:c5:76:d3:bf:1e:be:88:45:50:51:
19:7b:0d:2a:81:c0:ee:9b:41:31:b3:91:32:06:e7:
d0:dd:ec:d6:99:87:df:36:57:e5:84:d1:82:bd:23:
8c:6f:0e:93:b1:32:b3:58:5d:d4:68:03:46:84:df:
83:52:fb:a7:53:a0:a4:16:44:b2:7f:99:30:26:0a:
6e:b5:7b:19:27:70:1c:25:18:5c:53:f5:42:6c:32:
4b:1c:a3:21:95:aa:97:61:ab:ab:57:5c:99:dd:31:
26:4d:53:1d:36:21:90:b5:16:df:aa:35:f4:3c:09:
f9:5a:2a:ce:0e:49:ce:26:05:23:ac:89:c8:c7:c4:
31:57:0c:2c:a9:16:af:4d:0b:da:4f:7a:12:83:25:
aa:bd:54:b7:e2:3e:e4:a7:6c:48:17:37:11:bb:c1:
16:cc:a4:97:4f:63:c5:80:2b:99:a0:0b:05:ac:9f:
73:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:89:3B:0B:E2:23:BF:FA:A0:91:B2:DB:1F:28:A2:C9:B6:3B:0D:18
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1e:10:e1:fa:53:48:2c:e4:9f:81:dd:61:49:37:fd:09:7b:
0a:b6:dc:ea:e9:ad:06:ed:77:e5:8f:9f:8c:1e:ea:e8:55:6f:
54:4f:86:ef:31:06:1d:d9:d9:6b:51:04:04:a2:0a:66:57:a0:
13:79:74:2f:01:ef:a4:5a:67:8f:4c:c8:85:a2:3d:17:ea:a0:
47:6a:52:8d:af:f6:74:9d:41:47:4d:4b:ef:f0:50:49:17:2c:
85:38:82:44:54:b0:c5:1f:b6:30:70:b4:e7:2d:33:a8:ed:47:
c8:3f:c4:60:98:ea:38:f1:9a:95:4f:24:c9:4a:f3:03:bb:ea:
ff:3b:7e:fc:19:00:96:ee:58:c2:11:78:3f:52:de:48:08:8a:
2a:ae:fb:cb:3a:3b:d8:0c:58:07:f5:3a:67:64:75:c9:85:db:
7c:48:29:fe:75:81:e9:8c:65:ff:24:b7:94:57:7f:5a:60:3d:
80:ff:fd:55:4a:20:bb:38:b9:28:b1:a9:40:07:61:c0:fc:53:
28:8c:1c:9b:43:8b:93:c3:1f:a1:10:97:1f:b1:6d:96:36:51:
a3:c7:7c:ed:a3:02:a1:03:36:f5:54:c6:b7:76:54:b8:12:c2:
ac:23:07:4e:7b:aa:97:fe:00:14:e5:6f:4e:18:8d:bc:f3:ce:
8b:13:7e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:33:01 2026 by rpki-client