Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
File: kziECSasc-rVthh5GeiPEAMimco.mft (raw, json)
Hash identifier: GNk+Pj0IRiK6C7DcGPELfoNLTX3DRIJWhVxWK3xFjmo=
Subject key identifier: 40:9A:9D:8E:AC:0B:AB:DA:FE:4E:C7:EE:25:D6:BF:3D:D1:1B:08:F2
Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca
Certificate serial: 019ED42C04AF5BD04E6D8237749EAAA8281A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
Manifest number: 025A
Signing time: Wed 17 Jun 2026 06:01:54 +0000
Manifest this update: Wed 17 Jun 2026 06:01:54 +0000
Manifest next update: Thu 18 Jun 2026 06:01:54 +0000
Files and hashes: 1: 1-z0Y3fH_aErOAd2Nag5ZT3JcPH4.roa (hash: ajlsAWqEGjBF2s25AsAbzW/nKPdDq6JxNB0eWlyY3OU=)
2: 6lmykGrjWlxTI-Qm8cv1Wru-ZUM.roa (hash: 3/8y+29k2Z9zB5VeslI5T+W11/MyhEBGlF4ugyZh+nA=)
3: FcXUetsC0-6bv54Z1lmHoqKMdxM.roa (hash: dFkWAsnbwOvbQKILV1fPns+xMo4goiFme2jYhULRvHk=)
4: Y4x7zeztB7lrOx01OBJN1UiLyT0.roa (hash: gs7Dc5as7DJ7oLTov6hgPGgK6t+t5Pe4B5kRBUgM7WI=)
5: _SAMOxgv34T8ZP2BEt3dVFweldA.roa (hash: bU6RDLC/fFMgRKk4b1P2ryi1ytEL97qHkSA7liSJFY0=)
6: kziECSasc-rVthh5GeiPEAMimco.crl (hash: Eh4yxwAXROAz34UEu1aFeotOMYKz2l5CkQpHdJH5iO8=)
7: nKQXbT6FciiHVvddJS0_5sOh1ms.asa (hash: 7BE1jfl/pKiooWczO/8pMkQZmIL4Zuvts1Z6qAFpwl4=)
8: nf63dpM5Md5RBRi4P-HwEK-eN_E.roa (hash: 9d7TgxCegK25CmqdbC1sGXI3mJJK7sBKT2RoRfBWFdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2c:04:af:5b:d0:4e:6d:82:37:74:9e:aa:a8:28:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca
Validity
Not Before: Jun 17 06:01:54 2026 GMT
Not After : Jun 18 06:01:54 2026 GMT
Subject: CN=409a9d8eac0babdafe4ec7ee25d6bf3dd11b08f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0c:37:42:54:d7:4b:6a:9a:87:c0:f5:74:51:
61:85:1b:f4:1a:74:c3:a1:5f:26:0c:5e:2a:c2:56:
47:9b:46:74:87:a5:17:c1:88:c2:2f:d7:3c:2c:a2:
45:b1:bd:e2:08:a3:e7:dd:37:61:74:69:97:7e:0d:
16:59:3d:cd:83:70:f3:33:75:98:f3:81:6c:e7:04:
90:57:03:6e:d1:a0:ee:ec:7d:1a:96:8c:95:a5:b5:
fa:04:fc:6f:2a:9f:5f:7c:6b:83:24:e0:9d:9b:b9:
82:21:00:cd:65:4a:3a:e6:5a:55:f3:18:53:e1:b0:
ef:8e:3c:6a:74:46:40:a0:f7:3b:46:75:d2:99:de:
b6:dd:9b:67:95:09:f4:ff:60:e5:41:c2:70:d0:85:
c7:8e:66:96:e8:b3:0c:f9:42:e7:a2:23:03:1b:71:
e9:0a:63:0d:49:bd:cc:0f:4e:20:c6:90:f0:8a:9c:
2d:34:3a:6d:70:91:d2:5e:ae:75:8a:79:32:bb:8d:
4d:a7:a2:36:63:05:78:eb:80:e8:b1:66:d9:57:32:
19:97:38:0e:1c:73:01:e2:99:c8:12:89:88:55:e6:
eb:ab:a7:24:58:3d:8b:09:4b:23:ed:51:87:0c:03:
98:c7:64:bb:84:19:21:e9:50:92:29:d9:0d:78:20:
df:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9A:9D:8E:AC:0B:AB:DA:FE:4E:C7:EE:25:D6:BF:3D:D1:1B:08:F2
X509v3 Authority Key Identifier:
keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:60:3c:ef:30:7a:61:14:d2:97:55:c8:6b:5a:dd:ba:47:90:
26:6d:49:86:e7:67:8e:10:18:7b:2f:a6:b7:e4:3f:65:a0:90:
de:8f:f8:4a:18:17:75:e2:61:fc:a1:c1:48:e0:ad:82:9e:76:
20:78:fb:42:34:10:f6:6e:3c:67:b5:9b:0d:de:a0:16:8f:c5:
64:67:9a:1b:de:0d:f8:e4:c0:b3:42:e1:fe:cd:43:ce:ce:78:
4a:6a:db:e0:57:50:bb:7f:1f:f1:b6:a2:56:e5:bb:2b:77:9d:
b7:9a:cf:ff:a2:43:24:a6:4b:77:32:76:0a:45:a8:66:3e:61:
4e:cc:c3:cd:4f:ba:4c:ae:8a:83:79:d6:da:7a:16:66:ac:e7:
54:bf:00:8b:3c:15:fe:97:b4:5d:cf:eb:41:40:eb:2b:7c:b1:
0f:1b:2f:10:d6:f6:75:ba:dc:8f:19:7f:f6:05:e9:15:4d:45:
d1:c3:91:23:2c:5d:4f:99:32:f7:f5:0b:36:8b:3a:e6:39:9c:
cf:a9:21:15:11:aa:56:7c:1f:c7:e5:50:41:1e:46:37:b0:ac:
30:07:f3:ff:5e:a9:ee:d4:da:8b:4d:a9:98:b3:6a:9d:8b:27:
24:54:71:86:81:e6:1f:4a:04:9f:3c:ca:9e:14:34:b2:80:7e:
d5:26:57:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:14:48 2026 by rpki-client