Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
File: 2KzzS-KwTHzO8iIejR_LbKu0FZE.mft (raw, json)
Hash identifier: Cwmu1p+JZEjXJf1aLulFen0YLAON5fYCZ0CFG5SypUY=
Subject key identifier: 73:ED:95:4D:FF:C9:0A:15:34:AF:38:8A:2F:0C:FD:66:98:78:1C:6D
Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Certificate serial: 01A0C6335FC2972C32F5EE44F5588F562458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 23:00:50 +0000
Manifest this update: Mon 21 Sep 2026 23:00:50 +0000
Manifest next update: Tue 22 Sep 2026 23:00:50 +0000
Files and hashes: 1: 1VZy0G-wHQ_TX2BXwKD4dH12AVw.roa (hash: mifTRRl6FrcrdgjIAd+uxzGUQnWJ54FTfDl9SZZKo7c=)
2: 2KzzS-KwTHzO8iIejR_LbKu0FZE.crl (hash: 76KrzgPy6RbAGJM6V1V55qaFTMEFOfkNvz1AUYcjrrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:5f:c2:97:2c:32:f5:ee:44:f5:58:8f:56:24:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Validity
Not Before: Sep 21 23:00:50 2026 GMT
Not After : Sep 22 23:00:50 2026 GMT
Subject: CN=73ed954dffc90a1534af388a2f0cfd6698781c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f4:d2:53:5b:88:4f:24:16:7a:a9:70:24:02:
5d:f1:e2:91:89:d6:40:1c:36:a5:5b:41:fd:0a:38:
22:a1:19:7e:bf:e6:de:a6:1e:ae:bd:16:49:bd:ec:
13:5a:6a:14:7f:71:ac:90:cb:95:48:61:65:58:97:
90:fa:d2:b5:2d:ff:ce:63:66:df:e7:08:1c:35:50:
11:1b:0c:64:7e:35:09:0b:a9:64:85:6b:ab:65:6d:
00:10:35:20:96:8b:ff:14:81:1a:f2:cd:27:66:a6:
26:f0:f8:63:8e:f7:60:48:ab:6d:7d:6a:78:f6:64:
ee:8a:c7:33:d6:af:3f:98:c8:1e:5a:b1:cb:a7:3c:
77:67:f2:fe:d1:62:c4:d9:40:f1:1a:29:15:6b:ac:
bd:3d:92:57:16:5f:6d:61:cb:8b:f7:1c:cf:33:01:
92:2d:ab:48:23:7e:53:29:18:02:03:10:ec:d1:e7:
b2:09:92:22:a8:b2:1f:c7:fa:9e:d5:54:b1:c9:1b:
6d:fd:46:6b:fa:52:12:1c:44:52:32:5e:81:41:79:
21:1e:55:6d:da:a8:c6:37:48:e5:f3:23:f2:26:24:
00:a1:f3:5a:6f:eb:db:02:df:d8:bc:da:5f:bf:97:
33:b7:58:6c:ed:0d:f8:42:6e:b1:bd:10:9e:2c:a2:
d6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:ED:95:4D:FF:C9:0A:15:34:AF:38:8A:2F:0C:FD:66:98:78:1C:6D
X509v3 Authority Key Identifier:
keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0f:20:0b:6e:59:9c:fc:d2:48:4b:eb:a1:7f:58:a5:2a:5b:
ac:77:6d:34:54:97:3b:b0:98:4f:7d:ca:a3:48:01:3c:24:f0:
7e:de:40:c2:7e:0c:66:c8:5b:a4:30:2e:03:8a:50:70:ca:60:
db:81:c5:6f:5f:6a:7d:29:d2:a7:d4:ef:9b:30:9e:b8:5d:25:
92:d7:87:8e:69:06:10:b6:17:e0:ec:62:95:3f:7b:5a:b1:d2:
72:f8:81:9f:9a:f9:6d:6c:9a:8f:3a:96:ff:b4:09:1f:07:ff:
0e:07:9f:a6:a3:c3:6f:56:63:7d:1e:cb:14:9d:5f:cf:86:ab:
63:48:2c:1e:f4:3b:6d:5e:5c:cf:07:5b:bd:5b:12:e8:64:9f:
55:62:22:75:3e:76:6f:28:23:e1:0c:69:85:d4:89:4f:01:07:
da:aa:5f:c1:d8:aa:92:b5:d5:45:6a:5e:87:4f:1b:1a:f0:e2:
69:b5:db:ac:da:94:01:25:d0:00:c1:55:26:b3:12:45:7b:f2:
dd:67:31:ae:d3:b2:52:70:80:7c:b0:c1:2c:b6:04:af:78:5f:
e2:16:3d:e0:95:bf:fc:bd:a8:76:eb:a6:53:97:bb:73:0e:b7:
00:43:18:20:fd:a9:f9:a4:47:f6:ab:28:f8:be:1c:2d:4b:3d:
85:fa:7f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:44:43 2026 by rpki-client