Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
File: Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft (raw, json)
Hash identifier: ATLOt7VeTiBWMtLfYm/mmOdcwWc4QHrsB8PGZc33BVI=
Subject key identifier: 45:75:35:FB:91:88:58:3A:41:46:45:06:7E:5D:F3:98:A0:3C:87:22
Authority key identifier: 2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
Certificate issuer: /CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Certificate serial: 019ED507ADBFD89B8B910ADFD56F5E20B55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
Manifest number: 0558
Signing time: Wed 17 Jun 2026 10:01:50 +0000
Manifest this update: Wed 17 Jun 2026 10:01:50 +0000
Manifest next update: Thu 18 Jun 2026 10:01:50 +0000
Files and hashes: 1: Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl (hash: uMUUGX2HCGJ1BZKsqXIYuW8e7uUA7M+ivi91NYZhMQk=)
2: bHxNQUrJC8Eh62QodMXQrjbnmgg.roa (hash: 1d3ZqMZQAbRLtC6TZNo/vpwZQcPk90gTwtcmQgBCgII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:07:ad:bf:d8:9b:8b:91:0a:df:d5:6f:5e:20:b5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Validity
Not Before: Jun 17 10:01:50 2026 GMT
Not After : Jun 18 10:01:50 2026 GMT
Subject: CN=457535fb9188583a414645067e5df398a03c8722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4d:57:aa:9f:a2:e3:af:41:59:99:80:df:8d:
84:ff:c6:9d:91:40:8c:2c:7c:19:30:d6:5f:3a:cd:
36:13:2c:da:f8:69:26:b1:ad:f1:97:ef:ab:a6:64:
ca:13:a2:fd:5a:dd:d6:4e:4b:2f:ae:b9:bd:65:9c:
12:da:e0:c5:66:d5:56:88:75:c7:3e:b8:66:00:e0:
c3:3b:93:4f:26:89:93:8e:3a:64:cd:0e:48:c8:37:
69:66:66:66:3a:ad:53:d3:1c:0a:2f:11:65:4b:4d:
92:b4:43:ff:5b:67:b6:18:b3:d1:08:3a:49:5c:ce:
8e:cd:f3:9e:0f:05:fa:66:13:45:96:55:f6:e6:1d:
04:19:84:a8:fa:84:22:5b:b3:ad:68:e1:6a:a0:c0:
17:27:52:7d:e6:6f:4f:2b:06:19:59:bf:bc:81:f9:
9b:93:41:77:3a:2b:fd:c9:3a:2a:f0:e3:68:35:2f:
36:51:4f:0b:56:56:3b:e1:81:66:f5:01:23:4e:15:
a6:32:dd:bd:94:cf:a5:a8:29:fa:70:68:82:c4:12:
05:b1:cd:99:c7:2c:b3:69:50:a5:6b:03:cf:5b:12:
bb:3b:c3:0c:67:59:8a:90:24:82:31:51:46:54:30:
12:9d:23:b3:23:d7:55:93:f2:7e:c3:a3:6e:54:93:
df:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:75:35:FB:91:88:58:3A:41:46:45:06:7E:5D:F3:98:A0:3C:87:22
X509v3 Authority Key Identifier:
keyid:2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:54:be:c9:18:52:1a:01:d4:4f:4e:58:ae:51:1b:75:3c:9b:
34:ba:f8:ef:10:73:1c:37:69:d7:73:17:2a:c7:e4:25:88:3c:
c1:fe:55:87:97:7d:41:50:e3:dd:99:77:fe:8a:0b:ba:9a:49:
81:43:6e:2d:4d:bd:0e:d7:e8:54:58:d1:67:b4:32:b1:57:2f:
45:0e:74:bc:27:1e:b2:76:a2:f4:09:da:69:43:a0:fd:93:ac:
40:d7:bd:57:40:f0:d6:c4:9d:3b:87:d1:b0:fb:74:2f:6d:84:
9f:00:7a:e5:20:24:17:b8:1f:f5:36:1a:0d:0f:0d:e6:36:55:
a2:bf:ce:84:8e:e2:0c:c4:48:67:2b:4d:8d:57:10:c1:40:00:
39:b1:8e:0e:29:cf:ff:7f:21:8c:88:07:25:d2:d8:d7:41:60:
85:ac:ff:a9:60:68:22:b4:f2:87:27:c8:e0:7f:47:97:7f:71:
8a:ab:0f:7e:ce:46:94:b3:33:b6:e7:95:de:cb:18:6b:4b:66:
32:e9:7b:fd:59:04:8f:86:d0:5b:10:d8:07:82:63:ea:c7:17:
47:61:99:d9:c4:b7:dd:ec:ee:65:29:be:a0:10:ae:86:80:78:
dc:84:2c:e4:9b:6c:e0:56:53:be:6c:97:c3:7a:e9:bf:85:04:
8c:c2:d6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:05:16 2026 by rpki-client