Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
File: Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft (raw, json)
Hash identifier: 1ZBhjmqrTXOKHJMy9Efzdu3RYEtChibXPpGJfYXz6l0=
Subject key identifier: 70:39:33:23:9C:71:98:7B:E5:1A:69:D5:1A:71:04:99:01:23:7C:B7
Authority key identifier: 2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
Certificate issuer: /CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Certificate serial: 019CAAC6CA75307D629B7D2B3173884BB322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
Manifest number: 0439
Signing time: Sun 01 Mar 2026 19:01:20 +0000
Manifest this update: Sun 01 Mar 2026 19:01:20 +0000
Manifest next update: Mon 02 Mar 2026 19:01:20 +0000
Files and hashes: 1: Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl (hash: G46p8AA2Tsy2ld2ei8y5o3u7l2I91PpwBXLLbdj2YGk=)
2: bHxNQUrJC8Eh62QodMXQrjbnmgg.roa (hash: 1d3ZqMZQAbRLtC6TZNo/vpwZQcPk90gTwtcmQgBCgII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:ca:75:30:7d:62:9b:7d:2b:31:73:88:4b:b3:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Validity
Not Before: Mar 1 19:01:20 2026 GMT
Not After : Mar 2 19:01:20 2026 GMT
Subject: CN=703933239c71987be51a69d51a71049901237cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:1a:19:97:10:a6:d2:af:3f:c7:a8:0f:c6:
bb:9a:c9:26:8e:72:ff:ff:68:61:67:81:ff:51:82:
95:5d:f2:53:ce:da:5d:02:d2:b0:6a:f3:c4:f1:3a:
9a:38:9d:6e:ad:78:f3:3c:0f:83:b7:1b:0f:02:b9:
98:c4:3a:de:24:dc:69:4b:60:f8:cd:44:c4:85:41:
2e:f5:c7:9a:2e:6c:60:77:1c:a1:22:37:97:ad:cb:
11:55:a2:0d:7e:ca:b4:4e:e1:ba:7a:6c:b3:56:87:
3f:af:ab:65:a2:0c:dc:60:c9:18:0e:9c:19:0a:e5:
ff:5b:7e:7f:e9:35:fc:ec:b4:87:d8:0a:79:84:12:
83:db:e7:aa:60:e0:7b:6f:19:8a:6a:ad:9f:2c:44:
aa:69:4b:71:63:59:87:d5:f2:ff:a1:f1:cd:42:23:
3b:10:ec:8a:0f:0a:ed:06:1b:40:f4:71:63:51:c4:
f9:43:9a:c3:99:5f:11:bc:4a:b8:cf:9a:91:c3:44:
b9:53:4a:b0:67:f8:74:77:36:8b:32:0a:14:e8:18:
f9:73:bd:bc:67:b8:00:ee:79:92:e5:c0:83:ab:0d:
f4:ae:b8:a3:d8:3c:b7:5f:e9:be:df:16:c8:aa:2f:
41:ef:66:74:56:8f:9c:49:37:1b:d4:66:af:4a:57:
4d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:39:33:23:9C:71:98:7B:E5:1A:69:D5:1A:71:04:99:01:23:7C:B7
X509v3 Authority Key Identifier:
keyid:2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:28:83:04:90:99:8d:fd:ed:50:24:4c:0a:5a:f0:f3:4e:8a:
be:29:35:88:b8:de:92:dc:a6:99:ce:63:98:b7:99:09:43:54:
77:bb:04:4f:79:d1:82:12:27:0b:b6:7b:4a:b6:54:5a:81:36:
b1:c5:d4:c1:5c:ef:0e:7a:e6:d9:fe:2b:13:50:b6:d6:b0:13:
86:23:1a:4e:a4:23:5c:dd:3a:9c:41:a6:f3:ae:ae:d1:15:52:
da:f7:de:62:be:ea:02:5b:de:e7:38:36:25:01:ea:6d:3f:8d:
1f:e3:a0:65:bc:05:70:3d:bf:65:50:97:c3:ce:eb:c9:6e:33:
81:de:22:a4:1d:9b:c7:f1:a7:6d:a8:82:11:dd:39:67:35:49:
dc:a8:3b:f3:51:2e:4a:b3:df:85:37:49:12:b8:72:fb:91:b5:
3c:dc:be:2b:67:34:6f:ba:0d:49:26:39:30:5d:dc:82:80:53:
ae:e7:1c:df:64:29:4b:32:fc:7f:d9:1e:04:1f:a3:ed:64:d8:
c7:b6:0d:b2:a2:1a:9a:fa:05:db:bf:6c:29:db:cf:42:4a:ac:
c4:8d:a1:d9:22:16:bd:18:8d:c9:a0:22:b5:f4:d4:54:d8:8f:
35:de:b8:4c:fc:44:82:14:46:40:1b:11:75:50:6b:2f:38:fb:
81:89:60:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:08:18 2026 by rpki-client