Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
File: KzX2qYV9e-AmB6RNiVKojKS6bT8.mft (raw, json)
Hash identifier: P1rIli0AtqTkmh/hvDVegwcljDgUCVqW/QEybVtCYdk=
Subject key identifier: 7B:CD:B1:BF:C7:1F:5C:79:D1:1C:20:65:BD:EB:92:02:97:95:5B:39
Authority key identifier: 2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
Certificate issuer: /CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Certificate serial: 01A12C8E270770C7D3FCB930AA831901A191
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
Manifest number: 0288
Signing time: Sun 11 Oct 2026 20:01:15 +0000
Manifest this update: Sun 11 Oct 2026 20:01:15 +0000
Manifest next update: Mon 12 Oct 2026 20:01:15 +0000
Files and hashes: 1: KzX2qYV9e-AmB6RNiVKojKS6bT8.crl (hash: 12L5Rtj6erLZFOehE8YMBLcZk4jRKjc+ZXAe+KlcWCg=)
2: XRhRqov_VqyHRFFYOkd67TDUlfI.roa (hash: ML2iFZdBnrqeYBDgHkNF/6ovrR0UHPTGixgV/99EaNU=)
3: k424Nbk6SvvJjvOfKup0qsQXNRI.roa (hash: a50oRNVhCvCgBUG8ZaNohlcl3wba1rL6P6UcpuYYzJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:8e:27:07:70:c7:d3:fc:b9:30:aa:83:19:01:a1:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Validity
Not Before: Oct 11 20:01:15 2026 GMT
Not After : Oct 12 20:01:15 2026 GMT
Subject: CN=7bcdb1bfc71f5c79d11c2065bdeb920297955b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:49:03:a9:ea:cc:ad:9c:72:09:60:df:50:
a4:35:ec:49:9d:62:f2:04:ab:31:dc:6c:87:96:5d:
d5:54:a0:17:5a:5a:68:1e:fe:4f:90:46:99:de:e2:
69:c1:b3:86:33:7a:5a:cc:14:5c:8b:ec:51:94:e8:
6e:5e:09:cd:40:0b:7d:23:bd:91:ae:80:0c:c0:02:
f5:47:15:0b:b6:de:f5:b3:14:f7:21:20:40:a5:04:
c4:04:11:f8:24:83:3c:a0:44:5c:d7:23:f9:8a:ef:
54:aa:ea:eb:4e:2c:10:71:0a:1a:4a:d7:be:32:9e:
aa:4d:04:90:c7:b9:8d:2b:33:0f:83:42:48:5f:14:
b7:20:3b:1a:33:1b:41:64:bf:a5:7b:2b:a8:55:c3:
4a:8b:c3:13:a4:d0:a3:9c:4a:41:9d:07:7e:12:b1:
78:3f:bb:00:d0:a8:ec:2c:4a:e1:35:6f:b5:14:d9:
e0:dd:7e:b1:f3:83:fa:b3:3d:0a:bc:b1:5e:75:68:
dc:13:ac:67:27:cb:66:df:6c:df:69:d9:bd:26:67:
12:31:9f:b2:5b:ba:3b:b0:31:50:56:6f:ae:0b:71:
91:21:b1:60:c5:04:1c:f2:bd:04:41:6f:56:b3:a7:
e3:ff:58:be:9e:8d:6a:ba:bf:01:8e:22:b3:dc:dc:
f0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CD:B1:BF:C7:1F:5C:79:D1:1C:20:65:BD:EB:92:02:97:95:5B:39
X509v3 Authority Key Identifier:
keyid:2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:7e:0e:33:e6:c3:7e:9f:24:01:89:fa:95:0f:44:be:03:28:
52:91:18:e3:73:b9:f6:87:28:39:4f:71:8e:d4:8e:26:14:2a:
77:10:05:4e:d8:57:58:ee:28:ec:33:1d:41:68:7b:8b:10:36:
90:a8:3c:87:d2:f4:38:1f:8a:cc:0a:ec:07:a8:bf:c5:08:02:
22:51:94:26:cf:64:b1:c2:db:e6:73:75:9a:35:69:74:a4:ae:
dc:d8:80:a6:c4:52:2b:9a:a4:98:6d:f2:f9:e6:ec:ab:60:1e:
be:d1:e3:af:b1:ef:4e:b0:12:da:c0:cb:0c:5b:63:3e:54:1e:
70:d5:a2:94:77:e3:2c:d1:79:48:06:52:c7:cc:ad:f5:1e:1a:
f9:19:99:6a:ec:08:46:a5:f2:58:d8:79:6e:67:2e:5b:95:73:
3e:a7:25:ce:c4:02:06:c2:42:9a:8e:57:1d:68:91:79:a3:d0:
8c:01:2f:dc:ed:c5:1f:0f:06:e5:56:0e:ec:e8:83:2a:54:97:
27:e0:da:79:cb:9d:4e:38:eb:7d:b1:ef:0f:b3:e0:fe:c1:7a:
8c:af:0b:15:e0:d9:b0:1d:0d:86:0e:a3:45:42:c6:a7:56:4c:
28:db:f7:89:38:06:c0:2b:c2:eb:c0:a8:f5:40:1a:78:0a:88:
48:e7:ff:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:48:04 2026 by rpki-client