Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
File: KzX2qYV9e-AmB6RNiVKojKS6bT8.mft (raw, json)
Hash identifier: jcyqvwvEc2ACZcJ42jKO7D7cPynpsdX60gIaO/Ve+2c=
Subject key identifier: B3:49:66:10:D4:72:F7:1D:2B:27:30:2A:CD:D9:8C:0A:90:95:65:CA
Authority key identifier: 2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
Certificate issuer: /CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Certificate serial: 019CAD905F57C06640CB7BCC33B3C5B334AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
Manifest number: 34
Signing time: Mon 02 Mar 2026 08:00:45 +0000
Manifest this update: Mon 02 Mar 2026 08:00:45 +0000
Manifest next update: Tue 03 Mar 2026 08:00:45 +0000
Files and hashes: 1: KzX2qYV9e-AmB6RNiVKojKS6bT8.crl (hash: NO68IsMeu45x64JfNLUBMSXj5U5BZPA3Eib9AnnX/kE=)
2: XRhRqov_VqyHRFFYOkd67TDUlfI.roa (hash: ML2iFZdBnrqeYBDgHkNF/6ovrR0UHPTGixgV/99EaNU=)
3: k424Nbk6SvvJjvOfKup0qsQXNRI.roa (hash: a50oRNVhCvCgBUG8ZaNohlcl3wba1rL6P6UcpuYYzJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:5f:57:c0:66:40:cb:7b:cc:33:b3:c5:b3:34:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Validity
Not Before: Mar 2 08:00:45 2026 GMT
Not After : Mar 3 08:00:45 2026 GMT
Subject: CN=b3496610d472f71d2b27302acdd98c0a909565ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d9:c2:d1:47:68:f4:37:48:0a:79:0d:7a:6b:
6c:24:2b:4b:65:68:82:87:07:c1:40:6d:94:12:41:
98:a2:08:b4:2f:26:27:8c:32:87:e7:aa:fd:f0:fd:
c8:d8:ac:0f:a5:43:1f:19:ba:bf:9c:8d:f8:7f:a8:
c8:a4:08:4b:e9:2c:37:bf:c4:8d:73:68:15:4e:22:
02:64:d1:2b:ba:c7:9f:96:3f:b6:aa:cb:a7:52:f5:
dc:8d:9c:60:37:e0:41:ed:7e:c9:d5:7b:f1:d1:73:
3f:c4:8d:76:0d:77:df:38:cc:5b:3e:eb:11:9a:0e:
1b:9e:2c:43:b7:28:c4:64:ea:9e:b5:e9:26:33:39:
4f:d8:52:02:10:7b:07:ee:88:f5:8a:4d:6c:5b:6b:
ef:1f:74:2c:c1:ff:c8:d5:c7:02:3d:d6:48:ee:f5:
c3:4b:18:72:1d:01:02:0d:37:45:ce:48:d4:81:45:
4f:b9:1b:b3:d8:19:ca:ac:70:96:4a:fc:fb:d9:f0:
14:e8:ee:62:5b:02:3b:e2:de:79:25:b6:56:95:a9:
23:b9:0f:86:bc:e1:20:65:87:a8:d3:d9:6a:90:40:
7b:cb:62:c1:c5:b7:23:5c:ca:a0:8e:8f:57:a2:53:
38:ad:6e:20:5f:c6:ae:62:53:6f:88:7b:02:8c:e8:
c8:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:49:66:10:D4:72:F7:1D:2B:27:30:2A:CD:D9:8C:0A:90:95:65:CA
X509v3 Authority Key Identifier:
keyid:2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:fa:81:f2:9d:b2:73:50:e7:8f:f5:c0:3b:c3:dc:0e:d4:c0:
a8:85:4e:ee:d4:f4:8d:8a:eb:4c:f6:8e:25:cb:d4:1b:7a:64:
c0:ae:da:69:9d:60:70:6c:12:4f:13:98:8e:04:bc:de:67:0f:
bc:dc:b8:a2:08:4b:4c:29:c7:19:67:66:ac:12:a0:a1:58:67:
d5:49:ef:08:e6:65:c5:4e:04:66:11:b0:74:10:a0:16:a1:8d:
94:48:a4:38:10:fb:b1:79:a3:63:69:9a:0d:52:ed:66:12:c3:
19:b6:57:88:ec:07:7c:55:c6:2a:5b:52:cb:35:a6:a0:8f:0d:
f7:85:99:5e:10:b7:21:69:2a:e2:3e:53:11:21:6e:d9:af:89:
d4:c7:9c:c9:6a:34:c3:0f:18:d9:0a:f7:fd:80:b8:d7:22:a4:
23:b7:a0:22:80:e4:d2:f0:fd:82:78:d8:ab:b5:b4:e8:d4:42:
12:d2:a6:7c:b5:fa:18:45:84:eb:d7:4b:d8:a4:67:d9:94:55:
ff:d2:77:c6:c5:ca:7c:4d:11:ab:f3:99:2f:f7:88:bf:96:9c:
02:13:3c:e1:88:94:0d:6c:f4:d5:7e:1c:c6:b4:05:e1:17:b0:
30:73:b6:af:bf:20:61:c3:67:db:2f:f8:86:78:1d:fb:7d:b0:
50:04:64:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:06:20 2026 by rpki-client