Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier: Nx3roeIqvgVJYOMiWY09vcbvTTrQMhBKTeBDWQ9dyzs=
Subject key identifier: FF:60:57:36:1E:16:56:34:18:71:D3:4B:D9:06:16:1A:B4:B5:CC:BB
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 019EC111B233438FCB23FE151CAC1DE00BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number: 0D5A
Signing time: Sat 13 Jun 2026 13:00:22 +0000
Manifest this update: Sat 13 Jun 2026 13:00:22 +0000
Manifest next update: Sun 14 Jun 2026 13:00:22 +0000
Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: xlXgl6aUY7mB4LuN/u+1BStaeFn+3X2BfBA1JYNTN8o=)
2: rpScVUsryyaJ-F5kWegdG7uTvQI.roa (hash: 90JJSR9HRiVyxHT2c148KiZc/jsGWJOiBBV+kTkgs7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:b2:33:43:8f:cb:23:fe:15:1c:ac:1d:e0:0b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Jun 13 13:00:22 2026 GMT
Not After : Jun 14 13:00:22 2026 GMT
Subject: CN=ff6057361e1656341871d34bd906161ab4b5ccbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:d9:8d:06:aa:61:58:ab:0d:7b:5a:8a:c6:
ee:24:c7:49:1f:ee:1b:e0:b4:63:df:40:2c:46:3a:
a8:73:b6:95:c2:0e:3f:33:c8:fb:a5:b5:b9:76:0e:
2a:22:17:cd:fa:a4:36:1f:5c:6e:5a:e2:dc:f9:a8:
e7:ef:2e:c7:50:7e:e7:37:97:59:5c:86:a7:92:98:
fc:c6:6b:65:b5:b3:d8:5e:f9:89:57:b4:92:bf:32:
34:23:ba:f7:f1:95:e4:fa:f5:60:39:9a:09:d4:92:
65:4f:71:11:b7:15:57:86:af:fb:26:36:6f:7e:61:
dc:0e:60:50:aa:e4:43:e1:39:2e:59:86:78:83:90:
51:b7:6c:f1:1c:96:83:5b:9d:9e:f2:de:bf:78:a5:
d4:fa:91:dd:89:bb:94:81:b3:ed:bf:9c:b2:82:70:
17:e0:1c:a9:dd:23:29:61:7b:3b:47:22:f0:24:78:
9d:8e:04:cf:2e:8a:90:f6:5a:4b:65:06:f5:c7:6d:
f2:2d:a2:dc:14:41:bf:b9:6f:d8:35:79:50:e4:51:
e5:ad:e1:51:3f:29:e4:e3:38:51:a5:7b:0b:84:2f:
aa:c1:1c:5f:4f:82:06:ad:57:89:6b:72:76:e2:04:
e6:4c:61:19:8c:eb:6b:fb:5f:72:0a:47:09:b6:06:
d3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:60:57:36:1E:16:56:34:18:71:D3:4B:D9:06:16:1A:B4:B5:CC:BB
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:97:78:6d:97:21:cb:91:b6:9f:76:37:4e:3e:85:10:bb:9c:
98:a4:0c:5f:6c:be:70:da:a3:80:f5:3e:8c:31:79:91:c3:1b:
72:b4:ee:43:46:16:8b:d2:af:08:8b:3b:42:f6:5f:6b:90:40:
28:9e:9c:63:af:92:a6:35:de:df:fc:e6:1e:52:3e:43:df:b7:
8a:96:67:c0:06:79:36:6c:6f:08:77:53:7b:8c:60:47:06:92:
20:a5:e0:ad:78:a1:0b:2f:18:2e:ee:08:9f:f2:21:77:de:30:
30:cf:96:74:49:5b:d8:19:47:87:cc:96:b0:fb:5d:b5:d0:82:
31:02:1d:b6:fa:73:06:e1:73:e6:44:e9:56:ae:ac:35:76:5c:
48:89:0d:e7:1e:87:e1:93:fd:8d:31:b9:ea:d6:bc:97:cc:4a:
9e:06:1a:4c:f8:d2:be:76:cd:55:90:f8:f7:4e:ec:46:1f:1b:
68:23:b9:dc:bc:7c:0c:bb:99:c2:e4:ba:c6:e1:83:da:fe:99:
fb:74:92:83:5f:5c:3c:e8:c3:cd:58:84:89:f0:4e:1e:d9:9b:
e6:8a:83:d8:10:f7:e0:31:80:7a:00:1d:68:84:8c:89:61:9c:
5a:73:3e:3c:1e:51:d3:6c:b2:2b:18:08:3c:16:c7:11:89:9c:
82:31:23:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEbIzQ4/LI/4VHKwd4Au0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMzI3MTExNzA3Njg5NTBmZGQ5ZjlkZWZlNjUxZjJkNWEx
MzEyYmUwHhcNMjYwNjEzMTMwMDIyWhcNMjYwNjE0MTMwMDIyWjAzMTEwLwYDVQQD
EyhmZjYwNTczNjFlMTY1NjM0MTg3MWQzNGJkOTA2MTYxYWI0YjVjY2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb/ZjQaqYVirDXtaisbuJMdJH+4b
4LRj30AsRjqoc7aVwg4/M8j7pbW5dg4qIhfN+qQ2H1xuWuLc+ajn7y7HUH7nN5dZ
XIankpj8xmtltbPYXvmJV7SSvzI0I7r38ZXk+vVgOZoJ1JJlT3ERtxVXhq/7JjZv
fmHcDmBQquRD4TkuWYZ4g5BRt2zxHJaDW52e8t6/eKXU+pHdibuUgbPtv5yygnAX
4Byp3SMpYXs7RyLwJHidjgTPLoqQ9lpLZQb1x23yLaLcFEG/uW/YNXlQ5FHlreFR
Pynk4zhRpXsLhC+qwRxfT4IGrVeJa3J24gTmTGEZjOtr+19yCkcJtgbTbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9gVzYeFlY0GHHTS9kGFhq0tcy7MB8GA1UdIwQY
MBaAFJMycRFwdolQ/dn53v5lHy1aExK+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hZmNkNDAtMmE1MC00YzExLWJhNDct
ZTExZmZlYzg5Y2Q0LzEva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hZmNkNDAtMmE1MC00YzExLWJhNDctZTExZmZlYzg5Y2Q0
LzEva3pKeEVYQjJpVkQ5MmZuZV9tVWZMVm9URXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkJd4bZch
y5G2n3Y3Tj6FELucmKQMX2y+cNqjgPU+jDF5kcMbcrTuQ0YWi9KvCIs7QvZfa5BA
KJ6cY6+SpjXe3/zmHlI+Q9+3ipZnwAZ5NmxvCHdTe4xgRwaSIKXgrXihCy8YLu4I
n/Ihd94wMM+WdElb2BlHh8yWsPtdtdCCMQIdtvpzBuFz5kTpVq6sNXZcSIkN5x6H
4ZP9jTG56ta8l8xKngYaTPjSvnbNVZD4907sRh8baCO53Lx8DLuZwuS6xuGD2v6Z
+3SSg19cPOjDzViEifBOHtmb5oqD2BD34DGAegAdaISMiWGcWnM+PB5R02yyKxgI
PBbHEYmcgjEjDA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:48 2026 by rpki-client