Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
File: kziECSasc-rVthh5GeiPEAMimco.mft (raw, json)
Hash identifier: OHk2P8se/7tAEcNc0jip7lDq+EgGw/FE4RyqFHjVJW4=
Subject key identifier: 97:8C:14:73:92:AD:FD:73:5F:95:F8:C1:0D:48:DB:8B:10:3C:78:71
Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca
Certificate serial: 019EBEED27104855499E42A6C258966E7D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
Manifest number: 024F
Signing time: Sat 13 Jun 2026 03:01:13 +0000
Manifest this update: Sat 13 Jun 2026 03:01:13 +0000
Manifest next update: Sun 14 Jun 2026 03:01:13 +0000
Files and hashes: 1: 1-z0Y3fH_aErOAd2Nag5ZT3JcPH4.roa (hash: ajlsAWqEGjBF2s25AsAbzW/nKPdDq6JxNB0eWlyY3OU=)
2: 6lmykGrjWlxTI-Qm8cv1Wru-ZUM.roa (hash: 3/8y+29k2Z9zB5VeslI5T+W11/MyhEBGlF4ugyZh+nA=)
3: FcXUetsC0-6bv54Z1lmHoqKMdxM.roa (hash: dFkWAsnbwOvbQKILV1fPns+xMo4goiFme2jYhULRvHk=)
4: Y4x7zeztB7lrOx01OBJN1UiLyT0.roa (hash: gs7Dc5as7DJ7oLTov6hgPGgK6t+t5Pe4B5kRBUgM7WI=)
5: _SAMOxgv34T8ZP2BEt3dVFweldA.roa (hash: bU6RDLC/fFMgRKk4b1P2ryi1ytEL97qHkSA7liSJFY0=)
6: kziECSasc-rVthh5GeiPEAMimco.crl (hash: ZTmeZAqXhJXPBwHuNoFouIEQqiqNnN53IuP/fvRijQc=)
7: nKQXbT6FciiHVvddJS0_5sOh1ms.asa (hash: 7BE1jfl/pKiooWczO/8pMkQZmIL4Zuvts1Z6qAFpwl4=)
8: nf63dpM5Md5RBRi4P-HwEK-eN_E.roa (hash: 9d7TgxCegK25CmqdbC1sGXI3mJJK7sBKT2RoRfBWFdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:27:10:48:55:49:9e:42:a6:c2:58:96:6e:7d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca
Validity
Not Before: Jun 13 03:01:13 2026 GMT
Not After : Jun 14 03:01:13 2026 GMT
Subject: CN=978c147392adfd735f95f8c10d48db8b103c7871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:16:0e:3f:af:b3:3a:49:2b:76:a4:70:6d:77:
d1:45:fe:68:06:21:31:49:51:47:bd:b5:f7:79:80:
3f:34:aa:8d:1d:20:9c:27:48:bd:c7:a4:b7:b0:90:
4a:50:d9:95:76:5a:6d:ab:21:7f:d6:81:37:b4:6e:
a1:9f:82:21:9b:13:3e:7a:d7:b0:63:b9:11:56:35:
32:5a:66:9f:5b:05:c7:b3:0f:56:1d:2e:89:1c:f0:
28:e7:4a:19:fc:a3:1d:97:1d:8f:e3:5f:e0:e2:ce:
28:07:1f:f7:e3:83:69:91:91:79:d0:be:de:70:3d:
5f:64:c0:7c:18:63:e2:18:02:be:61:89:57:63:78:
ec:60:89:d6:7d:14:41:78:65:45:10:7a:4f:2f:a5:
a7:02:61:d2:21:43:60:33:2c:9c:03:57:bc:ef:bf:
9e:d7:84:97:1d:63:19:7f:5e:7e:b1:e7:19:cd:d9:
c1:4a:c1:d5:b7:99:8d:16:0f:cd:de:e3:31:b6:73:
48:76:4a:a7:0a:18:88:3e:81:1f:7e:5b:45:e5:a8:
49:2c:7d:22:8e:24:be:15:09:d7:4c:64:20:2f:1a:
c1:8b:cb:b4:00:eb:6b:56:6f:3b:8c:07:6b:dd:e3:
13:85:87:0b:02:b3:ba:ff:32:96:42:22:0b:2d:81:
28:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:8C:14:73:92:AD:FD:73:5F:95:F8:C1:0D:48:DB:8B:10:3C:78:71
X509v3 Authority Key Identifier:
keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:3f:ad:d3:c4:6f:54:c6:04:ae:50:61:e2:e7:a3:1d:53:d5:
48:02:59:ce:8a:4c:62:d9:fe:62:62:a6:a8:fd:6b:e4:88:3f:
81:65:76:46:f9:34:ed:e4:da:19:ac:c7:12:b8:a8:ea:78:6d:
06:d9:18:bd:9c:ad:65:e1:b3:51:fd:3e:f5:7b:8c:51:5d:cd:
f1:3f:61:7e:92:a0:c9:ea:d1:85:8f:ef:5f:02:f8:09:fc:a9:
0b:63:82:c1:b8:e5:d2:5c:af:a6:7f:de:b6:c2:f2:01:04:66:
06:00:12:70:98:88:04:c2:05:02:2b:fd:d8:20:4d:44:b0:8d:
43:f0:da:1b:97:01:ea:30:bd:7c:b3:96:4f:95:0c:23:cf:81:
f1:63:06:5e:b4:0d:5f:3e:4f:5b:3b:cc:de:de:72:90:dd:77:
04:dd:4a:d4:79:57:bc:27:a2:05:98:77:25:4f:2f:d0:64:b1:
40:f2:3f:ed:41:ef:ca:8c:93:47:50:5d:73:29:5e:48:a1:8a:
21:0b:31:a5:c6:f4:aa:0c:e5:dc:dc:60:5c:ae:04:1d:f1:e0:
69:cc:f9:4a:8f:d6:cb:c3:bc:3d:08:2c:32:59:73:52:53:48:
7f:e4:fa:07:11:58:89:69:f7:55:22:cf:cb:34:d0:a6:e0:22:
1f:60:44:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7ScQSFVJnkKmwliWbn1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMzg4NDA5MjZhYzczZWFkNWI2MTg3OTE5ZTg4ZjEwMDMy
Mjk5Y2EwHhcNMjYwNjEzMDMwMTEzWhcNMjYwNjE0MDMwMTEzWjAzMTEwLwYDVQQD
Eyg5NzhjMTQ3MzkyYWRmZDczNWY5NWY4YzEwZDQ4ZGI4YjEwM2M3ODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRYOP6+zOkkrdqRwbXfRRf5oBiEx
SVFHvbX3eYA/NKqNHSCcJ0i9x6S3sJBKUNmVdlptqyF/1oE3tG6hn4IhmxM+etew
Y7kRVjUyWmafWwXHsw9WHS6JHPAo50oZ/KMdlx2P41/g4s4oBx/344NpkZF50L7e
cD1fZMB8GGPiGAK+YYlXY3jsYInWfRRBeGVFEHpPL6WnAmHSIUNgMyycA1e877+e
14SXHWMZf15+secZzdnBSsHVt5mNFg/N3uMxtnNIdkqnChiIPoEffltF5ahJLH0i
jiS+FQnXTGQgLxrBi8u0AOtrVm87jAdr3eMThYcLArO6/zKWQiILLYEoBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJeMFHOSrf1zX5X4wQ1I24sQPHhxMB8GA1UdIwQY
MBaAFJM4hAkmrHPq1bYYeRnojxADIpnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUt
ZWE3YWU3MmJkMzJkLzEva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUtZWE3YWU3MmJkMzJk
LzEva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbD+t08Rv
VMYErlBh4uejHVPVSAJZzopMYtn+YmKmqP1r5Ig/gWV2Rvk07eTaGazHErio6nht
BtkYvZytZeGzUf0+9XuMUV3N8T9hfpKgyerRhY/vXwL4CfypC2OCwbjl0lyvpn/e
tsLyAQRmBgAScJiIBMIFAiv92CBNRLCNQ/DaG5cB6jC9fLOWT5UMI8+B8WMGXrQN
Xz5PWzvM3t5ykN13BN1K1HlXvCeiBZh3JU8v0GSxQPI/7UHvyoyTR1BdcyleSKGK
IQsxpcb0qgzl3NxgXK4EHfHgacz5So/Wy8O8PQgsMllzUlNIf+T6BxFYiWn3VSLP
yzTQpuAiH2BE5w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:58:19 2026 by rpki-client