Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
File: KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft (raw, json)
Hash identifier: A802kpcksTae7JDjUHAzcMYeXkxZqmdT8oijRJwKxJg=
Subject key identifier: DA:C3:1A:B7:87:BD:56:D9:5F:9C:C5:1F:8A:D0:56:4A:F6:FA:44:DF
Authority key identifier: 29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
Certificate issuer: /CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Certificate serial: 019CAA21E03F1587487C648EDB32F6E3CD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 16:01:12 +0000
Manifest this update: Sun 01 Mar 2026 16:01:12 +0000
Manifest next update: Mon 02 Mar 2026 16:01:12 +0000
Files and hashes: 1: D5K8QPUyMYfagYASYwL4lujklys.roa (hash: hyr6M3p6aHhLRaW47SkFIlt8kwLspMP/qCLs3ZNqvMQ=)
2: KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl (hash: zL5WkLQMWF7EmCxIG0wxEVLSWVDHRv/fawgoy/DSLVg=)
3: c4MgsqHgRIS7A8j2sOY1tiFehV8.roa (hash: Rh8SPNOodShlWVhJWX+J1gXICJ+9LsUUZNtxoGFB9Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:e0:3f:15:87:48:7c:64:8e:db:32:f6:e3:cd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Validity
Not Before: Mar 1 16:01:12 2026 GMT
Not After : Mar 2 16:01:12 2026 GMT
Subject: CN=dac31ab787bd56d95f9cc51f8ad0564af6fa44df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:bb:87:32:cb:d8:c2:79:12:59:df:fa:f1:
8b:82:85:9e:53:59:89:8f:96:3e:35:e1:a1:ac:cc:
71:c0:0f:e9:8b:12:62:db:d8:2c:98:c6:66:e0:17:
89:cc:0d:bd:ff:c0:86:d4:d6:56:78:bf:78:92:89:
4c:42:4b:76:0e:9e:8c:2e:0b:be:4b:6d:5b:27:8a:
8c:3f:97:6c:fe:8c:b8:b9:57:c1:7e:3b:39:26:2f:
ea:2c:ef:30:db:d2:73:93:2f:ab:cf:fd:ff:c9:b3:
70:be:bd:e5:c2:42:f3:1e:12:68:e6:e6:ba:99:d7:
0b:f4:7d:59:f9:48:5c:45:1a:b8:6f:f9:88:7d:b2:
2b:db:96:4a:27:e2:25:6e:72:02:5d:24:e3:1a:9d:
c4:cc:f8:f8:4b:8c:6b:35:ed:47:73:bd:88:30:ea:
a9:fa:16:93:0c:ab:47:66:6b:58:cd:6b:35:23:2e:
8d:f6:3e:1c:79:36:27:f0:ac:d9:7b:12:a6:4a:c0:
d3:83:01:c8:83:6f:61:af:5b:13:98:ee:4b:9e:72:
88:d3:26:8b:42:91:46:6c:c8:00:62:01:13:f1:f8:
78:d6:47:44:5c:57:ae:c3:5d:2c:b2:cd:9d:43:cb:
a6:dc:e9:d8:ac:3a:eb:e2:ce:0c:73:3d:eb:81:00:
80:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C3:1A:B7:87:BD:56:D9:5F:9C:C5:1F:8A:D0:56:4A:F6:FA:44:DF
X509v3 Authority Key Identifier:
keyid:29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:48:b2:34:0a:05:af:82:ff:97:0b:00:f1:9f:88:dd:6f:59:
9d:9b:c6:3d:06:c2:df:87:31:85:2f:2f:0f:28:da:c2:99:99:
b5:2f:1c:92:9b:d6:38:ca:35:c8:a0:2e:28:9f:9c:f8:85:74:
ae:b6:2e:bd:32:d0:17:e7:6e:3f:4f:4c:54:c7:fd:4a:51:de:
1d:7a:9b:05:51:52:35:47:27:e3:46:63:a4:bb:ff:5f:80:5b:
e1:d6:1e:59:89:d7:58:f6:1e:04:ea:9a:6c:ad:41:6d:1d:29:
f4:f2:2c:f0:38:c0:2f:9f:97:7e:33:d6:f5:24:7d:83:e9:c4:
d6:9b:c7:d6:0e:bc:6b:62:91:7e:c3:e8:45:c4:5c:b5:d2:7c:
52:4d:3f:b1:1a:56:5d:63:6b:90:de:0a:e7:86:53:e4:c0:d6:
e3:81:cc:cb:16:73:0e:d0:36:c1:28:90:0f:99:00:5d:7a:ea:
93:69:96:ae:01:8d:28:b7:37:85:d8:97:7c:ff:76:20:57:d0:
50:29:a5:5a:da:7d:1e:75:d0:b8:6e:b3:bc:4e:d4:03:be:b3:
37:ad:f5:2c:d4:ef:d0:65:8f:0d:f7:a9:46:c6:f6:ff:78:20:
9e:c1:09:6a:23:56:53:ed:b8:f3:00:45:d2:19:07:80:e1:43:
7d:f9:47:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:09 2026 by rpki-client