Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
File: kziECSasc-rVthh5GeiPEAMimco.mft (raw, json)
Hash identifier: rvx0rShG9viRFORdCa+SBgDeEnDQD2N8cdJux+azIS4=
Subject key identifier: 53:D8:50:37:32:F1:DE:54:D7:4D:DD:D4:F8:B7:7D:74:E9:92:6D:24
Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca
Certificate serial: 019CA9EBA1EE9FB77C229028CACDE03BC4E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
Manifest number: 013B
Signing time: Sun 01 Mar 2026 15:01:57 +0000
Manifest this update: Sun 01 Mar 2026 15:01:57 +0000
Manifest next update: Mon 02 Mar 2026 15:01:57 +0000
Files and hashes: 1: 1-z0Y3fH_aErOAd2Nag5ZT3JcPH4.roa (hash: ajlsAWqEGjBF2s25AsAbzW/nKPdDq6JxNB0eWlyY3OU=)
2: 6lmykGrjWlxTI-Qm8cv1Wru-ZUM.roa (hash: 3/8y+29k2Z9zB5VeslI5T+W11/MyhEBGlF4ugyZh+nA=)
3: FcXUetsC0-6bv54Z1lmHoqKMdxM.roa (hash: dFkWAsnbwOvbQKILV1fPns+xMo4goiFme2jYhULRvHk=)
4: Y4x7zeztB7lrOx01OBJN1UiLyT0.roa (hash: gs7Dc5as7DJ7oLTov6hgPGgK6t+t5Pe4B5kRBUgM7WI=)
5: _SAMOxgv34T8ZP2BEt3dVFweldA.roa (hash: bU6RDLC/fFMgRKk4b1P2ryi1ytEL97qHkSA7liSJFY0=)
6: kziECSasc-rVthh5GeiPEAMimco.crl (hash: CTORsOcaFJENsUNhX3Ri36JQmdZamt1alYEEJNndq7s=)
7: nKQXbT6FciiHVvddJS0_5sOh1ms.asa (hash: 7BE1jfl/pKiooWczO/8pMkQZmIL4Zuvts1Z6qAFpwl4=)
8: nf63dpM5Md5RBRi4P-HwEK-eN_E.roa (hash: 9d7TgxCegK25CmqdbC1sGXI3mJJK7sBKT2RoRfBWFdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:a1:ee:9f:b7:7c:22:90:28:ca:cd:e0:3b:c4:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca
Validity
Not Before: Mar 1 15:01:57 2026 GMT
Not After : Mar 2 15:01:57 2026 GMT
Subject: CN=53d8503732f1de54d74dddd4f8b77d74e9926d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:2b:aa:10:fe:43:ff:9b:c9:b0:72:56:f0:
fd:c4:80:30:55:c2:8e:3b:7d:55:c6:ba:95:5b:2d:
8c:f4:5f:9c:bd:72:cb:0a:f4:cb:a6:76:6b:2d:9a:
38:30:d5:70:26:5e:f7:7f:44:67:25:19:12:24:03:
e2:6c:c0:42:30:08:ef:7f:b9:cb:93:72:88:ba:a9:
8f:f1:ad:31:81:a7:c1:27:68:7e:a6:1b:7c:ef:e9:
a6:47:e1:a1:86:d6:79:39:b6:3a:95:15:47:a2:a5:
43:5f:f2:47:a8:e2:52:4f:7d:2e:d3:b3:4d:87:49:
eb:ca:14:eb:f1:d5:66:97:d7:6a:e0:ef:17:39:1d:
34:ef:84:eb:9e:be:74:d1:36:d8:e4:4f:3b:4c:87:
82:81:53:41:08:58:ec:58:e4:3d:74:46:0a:ac:a4:
04:9e:89:de:b8:47:6b:af:a0:d7:30:06:1a:27:ff:
11:7e:23:23:86:99:fd:1b:50:45:e1:d3:c2:52:fd:
af:85:6c:54:a1:65:67:9c:0f:9a:cc:83:8f:0f:b5:
dd:20:1d:75:4a:cb:61:f3:9d:0c:d2:4e:21:58:32:
ee:ab:51:f7:d6:d1:e8:e4:4c:a9:21:74:2c:c8:5c:
37:bd:31:0c:b3:60:07:52:bb:10:87:43:f9:5f:ae:
d7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D8:50:37:32:F1:DE:54:D7:4D:DD:D4:F8:B7:7D:74:E9:92:6D:24
X509v3 Authority Key Identifier:
keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:26:3a:3e:a1:4b:40:59:14:44:e1:6e:74:de:6a:5d:a7:fd:
2e:72:83:44:20:40:50:92:65:28:bc:56:b5:4b:9b:0c:4b:93:
22:c9:d3:ce:5a:5e:0b:fc:e5:5b:9c:77:05:95:55:24:c7:90:
f5:c3:94:27:80:22:f1:84:0b:f4:78:e5:18:6d:f1:97:72:db:
db:6b:27:e2:8e:99:33:d8:b7:99:00:eb:1b:08:1d:d8:9c:f0:
1b:b6:77:e3:e2:a0:ea:fe:05:e6:ba:06:55:77:b3:8b:39:ff:
c8:7c:72:1e:c8:4a:5f:1e:3a:5e:97:39:e6:34:d3:0b:d9:5d:
ee:60:a0:87:94:ce:95:6f:73:56:4d:f4:5d:db:8a:7c:57:19:
83:8b:4b:a2:35:c8:b1:7c:bc:b9:fc:60:fd:49:1c:03:f7:d9:
4d:ca:76:f0:37:1e:3e:54:35:b9:e5:0d:6f:67:4a:67:06:05:
7b:23:a2:89:9d:d8:16:38:71:d2:3e:39:3c:6f:c0:7e:b6:2e:
0f:55:40:ed:66:ec:95:e0:f9:10:a3:e2:47:5f:09:e4:1c:6e:
9a:4d:52:0f:0a:cf:00:71:88:ca:b4:7f:1b:98:71:6d:63:b9:
fd:13:b3:16:f0:48:36:0e:7a:fe:12:3f:69:66:80:ae:64:dc:
62:52:4e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:15:08 2026 by rpki-client