Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
File: KzX2qYV9e-AmB6RNiVKojKS6bT8.mft (raw, json)
Hash identifier: stbZlA9Mbx7DASxnJ2pPickAbaMoXQB9Hueoovy5cP8=
Subject key identifier: 93:EE:EC:60:BD:F1:55:27:D3:EA:9D:A6:F7:B2:B3:AF:5D:5B:08:64
Authority key identifier: 2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
Certificate issuer: /CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Certificate serial: 019D9B198E56645C920EE22C82CF94B5B762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
Manifest number: AF
Signing time: Fri 17 Apr 2026 11:00:36 +0000
Manifest this update: Fri 17 Apr 2026 11:00:36 +0000
Manifest next update: Sat 18 Apr 2026 11:00:36 +0000
Files and hashes: 1: KzX2qYV9e-AmB6RNiVKojKS6bT8.crl (hash: PrJ4KF0tTeKShVM/e96MIWGI8uJKrWdTuip/JU1eJcc=)
2: XRhRqov_VqyHRFFYOkd67TDUlfI.roa (hash: ML2iFZdBnrqeYBDgHkNF/6ovrR0UHPTGixgV/99EaNU=)
3: k424Nbk6SvvJjvOfKup0qsQXNRI.roa (hash: a50oRNVhCvCgBUG8ZaNohlcl3wba1rL6P6UcpuYYzJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:8e:56:64:5c:92:0e:e2:2c:82:cf:94:b5:b7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Validity
Not Before: Apr 17 11:00:36 2026 GMT
Not After : Apr 18 11:00:36 2026 GMT
Subject: CN=93eeec60bdf15527d3ea9da6f7b2b3af5d5b0864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:71:44:60:7a:50:2a:7d:3a:a2:b0:33:db:1e:
9d:a5:52:88:58:ab:89:90:49:56:bb:51:ac:a0:57:
ec:6b:e9:43:18:a8:fe:68:ac:7f:26:ad:11:22:72:
b3:21:8a:91:41:dc:29:67:ef:9d:1e:89:a3:c6:13:
1f:37:9d:0b:82:28:40:9c:8d:e7:99:2b:74:ea:1c:
73:40:a4:aa:d3:cb:84:5d:ae:3e:ef:d1:82:c2:4b:
44:21:53:33:8c:aa:51:62:36:a5:a4:68:b9:d9:b5:
0d:bb:54:0b:a2:7e:93:65:2d:6b:0a:e2:59:77:d4:
ce:e0:1b:df:44:8f:92:4a:5f:dc:11:ac:02:bd:c1:
c4:60:0c:8f:f5:f9:a2:80:db:79:9c:f6:d0:f1:d6:
0c:6c:7a:6f:cf:3f:d0:8f:7c:19:49:a0:53:6e:be:
fc:4e:65:92:fb:47:d2:3b:cc:03:8c:2e:16:eb:1a:
ed:ed:6a:01:84:13:bb:15:76:44:02:20:90:25:f8:
7b:1c:5c:53:e5:0a:09:c0:2d:06:1c:7f:e0:bd:4e:
53:a2:4e:32:6e:e4:22:7f:58:ae:aa:d9:1a:84:bc:
c8:26:21:4f:22:d3:5f:51:73:24:06:61:0f:c9:10:
63:97:08:1b:26:b4:cb:e3:fa:21:b0:3b:03:74:7d:
ee:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EE:EC:60:BD:F1:55:27:D3:EA:9D:A6:F7:B2:B3:AF:5D:5B:08:64
X509v3 Authority Key Identifier:
keyid:2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ed:fd:97:bb:9e:79:f8:3a:65:68:6e:fb:35:de:4b:07:1a:
72:24:4b:43:a4:50:7c:71:a6:3d:c9:ec:79:17:5c:53:1a:37:
43:a4:3d:e1:08:61:4a:d9:06:f9:9a:9d:e8:7a:43:f7:a9:f1:
3e:fd:e2:39:b3:4e:d7:bd:40:da:8e:d7:1f:55:65:55:a1:7f:
10:d0:02:be:4d:94:af:81:e1:95:b0:6c:e8:c7:81:d9:20:7d:
10:09:20:f3:47:e5:01:51:43:e8:9e:93:3c:bd:79:ea:f3:43:
b9:fb:a7:41:ae:f3:93:b3:2a:e7:26:cc:8e:3e:e0:84:da:f6:
12:b0:38:20:71:f8:24:8d:b2:5c:33:41:14:e5:1d:2e:fc:c6:
6b:75:5b:63:94:64:63:25:6e:6c:5c:99:9f:66:1d:c0:d8:83:
2e:8c:5c:cc:7c:31:fd:a8:64:63:bb:60:f8:6e:e4:91:72:62:
1f:34:82:27:95:00:76:96:39:5e:11:d8:39:f7:38:c1:67:95:
4b:7e:7a:0a:0a:50:10:c8:a3:92:83:41:b8:9f:a8:08:73:72:
66:a7:e8:43:b8:ba:28:dc:96:1a:58:07:b5:49:08:38:42:88:
57:e5:e2:bc:fe:70:bd:f6:c7:3c:ce:d6:53:52:d0:01:50:e7:
b7:e6:1c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:27:38 2026 by rpki-client