Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
File: kziECSasc-rVthh5GeiPEAMimco.mft (raw, json)
Hash identifier: P5xR23/IICcTdfG2XX/XjY368LhRYL+fJ9lzo3QGzFg=
Subject key identifier: 8C:4F:C6:26:90:87:16:54:37:0A:DE:83:57:CA:78:23:74:79:47:A0
Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca
Certificate serial: 019D9B50A22ABB85CDAADD7A5270641752F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
Manifest number: 01B8
Signing time: Fri 17 Apr 2026 12:00:45 +0000
Manifest this update: Fri 17 Apr 2026 12:00:45 +0000
Manifest next update: Sat 18 Apr 2026 12:00:45 +0000
Files and hashes: 1: 1-z0Y3fH_aErOAd2Nag5ZT3JcPH4.roa (hash: ajlsAWqEGjBF2s25AsAbzW/nKPdDq6JxNB0eWlyY3OU=)
2: 6lmykGrjWlxTI-Qm8cv1Wru-ZUM.roa (hash: 3/8y+29k2Z9zB5VeslI5T+W11/MyhEBGlF4ugyZh+nA=)
3: FcXUetsC0-6bv54Z1lmHoqKMdxM.roa (hash: dFkWAsnbwOvbQKILV1fPns+xMo4goiFme2jYhULRvHk=)
4: Y4x7zeztB7lrOx01OBJN1UiLyT0.roa (hash: gs7Dc5as7DJ7oLTov6hgPGgK6t+t5Pe4B5kRBUgM7WI=)
5: _SAMOxgv34T8ZP2BEt3dVFweldA.roa (hash: bU6RDLC/fFMgRKk4b1P2ryi1ytEL97qHkSA7liSJFY0=)
6: kziECSasc-rVthh5GeiPEAMimco.crl (hash: BDj56ApnQpp553N9SNQRPDRLkI47au7DuyYKt9svyeY=)
7: nKQXbT6FciiHVvddJS0_5sOh1ms.asa (hash: 7BE1jfl/pKiooWczO/8pMkQZmIL4Zuvts1Z6qAFpwl4=)
8: nf63dpM5Md5RBRi4P-HwEK-eN_E.roa (hash: 9d7TgxCegK25CmqdbC1sGXI3mJJK7sBKT2RoRfBWFdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:a2:2a:bb:85:cd:aa:dd:7a:52:70:64:17:52:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca
Validity
Not Before: Apr 17 12:00:45 2026 GMT
Not After : Apr 18 12:00:45 2026 GMT
Subject: CN=8c4fc62690871654370ade8357ca7823747947a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:03:ff:8d:fe:a3:fd:83:08:fa:dc:b6:98:5f:
5e:03:2d:ea:62:3d:7b:40:71:6c:7d:ea:37:72:17:
05:78:f2:97:24:cb:0e:24:b6:f9:7f:fd:b2:51:b5:
4f:4c:aa:8d:40:1e:40:62:0b:96:33:4b:0d:af:b9:
bc:04:f1:44:54:b6:02:bf:7c:34:d7:b2:b0:f4:7f:
88:70:66:e0:66:ed:cc:35:93:71:46:2a:29:37:7b:
bc:68:4f:d9:26:84:9c:81:a6:be:05:59:4d:b2:bc:
89:7b:49:e1:0f:0c:42:73:9b:3a:16:37:9f:7a:76:
e9:0e:3d:b9:15:c7:7d:fb:c0:f4:b9:3d:a9:35:35:
4c:f1:99:76:b7:a8:4a:a3:23:c8:92:33:9c:e7:b4:
7e:86:05:31:b0:6d:8d:bf:ae:5e:fe:4e:fd:04:40:
fb:bc:e0:ee:84:61:d7:58:f1:c8:b5:53:b7:a9:1d:
79:e2:ef:68:1c:7d:5b:7a:11:a8:c7:87:dd:83:5c:
b5:13:b5:c2:4d:25:b4:be:12:79:fd:d7:0a:fe:43:
4b:f1:cc:67:18:d4:63:82:9b:05:7a:03:d9:15:53:
4a:ae:59:87:65:ae:1b:e8:6c:c7:fc:30:04:8f:8a:
d7:4c:5b:de:b6:c2:b3:0c:f0:58:df:05:a3:89:de:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4F:C6:26:90:87:16:54:37:0A:DE:83:57:CA:78:23:74:79:47:A0
X509v3 Authority Key Identifier:
keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e7:79:09:d5:59:7e:89:47:ec:6c:d4:87:30:97:b4:0d:da:
00:76:44:25:7f:3f:27:3b:f4:e2:16:d0:bc:cc:cb:fa:2d:9e:
25:ce:e1:e4:f7:4e:0e:17:49:c8:06:02:19:41:79:d6:94:c7:
06:04:9e:16:88:2d:ed:93:f1:64:39:4b:de:ca:e4:cd:fc:99:
70:d9:83:e7:f4:a4:b3:59:8b:62:ae:60:ed:54:01:49:c3:71:
da:7f:cb:22:de:a5:24:a9:60:b1:99:14:e2:35:59:d1:8e:9b:
b2:e0:66:ac:ac:84:38:8a:8d:5f:86:8f:6c:2d:21:a6:76:50:
04:b8:db:77:d8:c9:4e:53:46:2f:db:41:d1:93:1a:08:bf:a7:
30:09:f7:26:33:70:0e:b9:19:eb:61:08:4a:bb:fe:2f:eb:c5:
c7:43:d2:5b:84:a2:95:b2:63:49:01:54:0a:25:0a:3e:d1:3d:
58:de:37:d8:68:49:88:b0:f5:c7:7a:fc:1f:b7:61:11:24:0f:
55:5b:42:9e:c2:12:e2:9a:11:46:7c:a1:e9:9d:7b:4a:69:67:
e5:16:a9:8d:83:7f:f1:bf:fd:5e:2c:88:c6:75:39:19:95:d4:
71:77:a4:97:12:c6:41:21:10:68:46:dc:76:9a:5f:cd:79:23:
0e:c0:1d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:10:33 2026 by rpki-client