Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
File: kziECSasc-rVthh5GeiPEAMimco.mft (raw, json)
Hash identifier: RwiIdCj3suh/+otxb1zG/vwB6C7Jw8lTDe/EtS3HirE=
Subject key identifier: 5C:AE:27:07:AC:00:14:B1:B5:7C:46:6C:03:9D:B5:E5:B0:52:A5:A8
Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca
Certificate serial: 01A0BF5541F26B55ECB0343BE9E8D5F7BFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
Manifest number: 0359
Signing time: Sun 20 Sep 2026 15:00:30 +0000
Manifest this update: Sun 20 Sep 2026 15:00:30 +0000
Manifest next update: Mon 21 Sep 2026 15:00:30 +0000
Files and hashes: 1: 1-z0Y3fH_aErOAd2Nag5ZT3JcPH4.roa (hash: ajlsAWqEGjBF2s25AsAbzW/nKPdDq6JxNB0eWlyY3OU=)
2: 6lmykGrjWlxTI-Qm8cv1Wru-ZUM.roa (hash: 3/8y+29k2Z9zB5VeslI5T+W11/MyhEBGlF4ugyZh+nA=)
3: FcXUetsC0-6bv54Z1lmHoqKMdxM.roa (hash: dFkWAsnbwOvbQKILV1fPns+xMo4goiFme2jYhULRvHk=)
4: Y4x7zeztB7lrOx01OBJN1UiLyT0.roa (hash: gs7Dc5as7DJ7oLTov6hgPGgK6t+t5Pe4B5kRBUgM7WI=)
5: _SAMOxgv34T8ZP2BEt3dVFweldA.roa (hash: bU6RDLC/fFMgRKk4b1P2ryi1ytEL97qHkSA7liSJFY0=)
6: kJ0Vy0B72zssXC26u57KGbX2ct8.roa (hash: hSN+a59jsv0SWS/ZOD8c1cKgqSReXutR5ErlmyVzSmA=)
7: kziECSasc-rVthh5GeiPEAMimco.crl (hash: So7jhqF7pqJz6+HX2/22ZQOEUSNNB7oi6l4TZDSBLg0=)
8: v6hmJMW3LdEeiIk2pUs40W0Igc0.asa (hash: G12/XDzxuGPxlLmYdatRM5nZUuVBUTD/yODTrcG9PnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:55:41:f2:6b:55:ec:b0:34:3b:e9:e8:d5:f7:bf:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca
Validity
Not Before: Sep 20 15:00:30 2026 GMT
Not After : Sep 21 15:00:30 2026 GMT
Subject: CN=5cae2707ac0014b1b57c466c039db5e5b052a5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2b:d0:7b:43:bd:7c:e1:50:40:aa:63:6d:43:
89:10:86:cb:1e:bb:ed:1f:c3:db:0e:c7:8e:40:9c:
1f:51:a4:bd:50:5d:d0:43:3a:46:b3:c4:0d:3a:ed:
41:14:d5:b8:70:9b:5f:f3:9c:3d:a5:a8:2b:be:be:
f4:b2:c1:31:07:34:31:4f:f5:8b:a9:75:91:6f:2b:
ee:64:ce:02:b8:97:fd:69:cc:fa:a8:fe:7f:42:66:
2f:cf:4c:57:65:88:d3:63:7e:42:0f:2d:4e:73:8a:
7c:56:fe:d7:ae:15:ea:08:cb:ae:dc:10:1a:98:d7:
7f:cb:d8:78:08:74:ce:d4:35:3a:61:0e:6d:89:0c:
0c:b7:f5:c6:f0:3a:1c:1f:56:dd:98:f7:8a:be:92:
86:42:21:06:38:42:92:10:21:08:57:5f:f2:b6:bc:
b7:43:49:9b:d9:30:71:a7:a9:4a:b2:f2:60:14:f9:
57:92:f9:0a:1f:71:f3:4c:19:41:ec:fc:b0:2e:32:
58:18:8b:18:95:38:9d:bb:93:10:09:b6:57:f9:4e:
29:e7:4a:53:ba:fb:0c:9f:9f:c5:75:b4:98:d8:4b:
55:16:9e:2a:d1:63:f8:36:6d:f8:aa:ef:40:15:9f:
2f:81:0a:1f:cb:90:e3:18:a2:8f:3c:d9:7e:9a:9c:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AE:27:07:AC:00:14:B1:B5:7C:46:6C:03:9D:B5:E5:B0:52:A5:A8
X509v3 Authority Key Identifier:
keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bb:cf:a2:cb:fc:59:c5:3b:8b:57:24:a3:5a:e3:31:31:1b:
6b:f4:3c:63:67:f0:55:cb:34:14:0d:11:08:3b:73:22:50:0e:
b9:d3:32:8f:95:34:79:55:bd:b7:93:7c:f8:be:5d:4e:7e:4d:
c8:f1:ed:d3:b9:3d:d7:7b:57:e8:7d:54:bd:2c:58:78:d7:6e:
72:40:a5:fc:1d:28:ef:cd:46:8e:b1:70:d0:a8:f0:b9:56:7d:
c9:f5:59:40:55:cb:1b:65:8a:d1:89:72:0a:29:ea:3b:9b:99:
c9:da:0b:dc:df:4b:ca:1a:4a:09:66:b7:93:90:2a:a6:7b:4f:
a4:d5:92:87:3f:ad:75:5c:7a:51:9b:32:38:1f:79:a0:ef:6a:
4a:98:a7:c4:5a:dd:23:25:b6:ab:a9:3e:80:86:a0:69:e9:69:
de:f5:10:6f:69:2f:8a:1b:f6:bc:9a:4a:60:7b:2f:4f:b7:ea:
66:f2:cb:f7:f9:94:64:37:35:ab:72:b6:c9:e4:fa:c9:b0:54:
dc:66:fc:03:23:7d:97:90:20:a9:28:d1:d6:06:88:62:1b:4e:
60:a6:d7:7d:3c:7f:7b:b9:e7:32:a2:ed:5c:71:1d:0b:38:f0:
21:b2:af:a2:35:7e:87:65:9b:16:8f:e1:01:d7:b9:cf:40:7e:
19:e8:62:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/VUHya1XssDQ76ejV97/NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMzg4NDA5MjZhYzczZWFkNWI2MTg3OTE5ZTg4ZjEwMDMy
Mjk5Y2EwHhcNMjYwOTIwMTUwMDMwWhcNMjYwOTIxMTUwMDMwWjAzMTEwLwYDVQQD
Eyg1Y2FlMjcwN2FjMDAxNGIxYjU3YzQ2NmMwMzlkYjVlNWIwNTJhNWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyvQe0O9fOFQQKpjbUOJEIbLHrvt
H8PbDseOQJwfUaS9UF3QQzpGs8QNOu1BFNW4cJtf85w9pagrvr70ssExBzQxT/WL
qXWRbyvuZM4CuJf9acz6qP5/QmYvz0xXZYjTY35CDy1Oc4p8Vv7XrhXqCMuu3BAa
mNd/y9h4CHTO1DU6YQ5tiQwMt/XG8DocH1bdmPeKvpKGQiEGOEKSECEIV1/ytry3
Q0mb2TBxp6lKsvJgFPlXkvkKH3HzTBlB7PywLjJYGIsYlTidu5MQCbZX+U4p50pT
uvsMn5/FdbSY2EtVFp4q0WP4Nm34qu9AFZ8vgQofy5DjGKKPPNl+mpzT4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyuJwesABSxtXxGbAOdteWwUqWoMB8GA1UdIwQY
MBaAFJM4hAkmrHPq1bYYeRnojxADIpnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUt
ZWE3YWU3MmJkMzJkLzEva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUtZWE3YWU3MmJkMzJk
LzEva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrvPosv8
WcU7i1cko1rjMTEba/Q8Y2fwVcs0FA0RCDtzIlAOudMyj5U0eVW9t5N8+L5dTn5N
yPHt07k913tX6H1UvSxYeNduckCl/B0o781GjrFw0KjwuVZ9yfVZQFXLG2WK0Yly
CinqO5uZydoL3N9LyhpKCWa3k5AqpntPpNWShz+tdVx6UZsyOB95oO9qSpinxFrd
IyW2q6k+gIagaelp3vUQb2kvihv2vJpKYHsvT7fqZvLL9/mUZDc1q3K2yeT6ybBU
3Gb8AyN9l5AgqSjR1gaIYhtOYKbXfTx/e7nnMqLtXHEdCzjwIbKvojV+h2WbFo/h
Ade5z0B+Gehi+A==
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:21:46 2026 by rpki-client