Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
File: KZWUToTcN7pqQtaLseK5pEIehKQ.mft (raw, json)
Hash identifier: Usnmey3fXQECWl2ZxF1kWr5MJMzcW2o2PgO6VgIRGJg=
Subject key identifier: 7D:14:D7:36:99:2C:90:CF:C4:20:7D:4F:61:D6:53:7E:C0:19:FC:3B
Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Certificate serial: 019D99626FC7FC3B39AA281416C3FCBFBCAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 03:00:58 +0000
Manifest this update: Fri 17 Apr 2026 03:00:58 +0000
Manifest next update: Sat 18 Apr 2026 03:00:58 +0000
Files and hashes: 1: KZWUToTcN7pqQtaLseK5pEIehKQ.crl (hash: MbnG0nSKB+fHpLW6afmuZ4Tx63qyXFbzz6Bp3/nHgSA=)
2: REMIC3qlblupLlRlDy8YWtuHeGs.roa (hash: Jx2qxwn04q0eIKP0O31CsM6H6HSDWevmv7hr0SA1D6o=)
3: jqkc2v-EDfDqyX3RgGBk8W5KdEw.roa (hash: J6Uk//qcGJOT6wNTUI4e5Z8Vod7CmZ9RrMaWF9PPJeM=)
4: rrH1j10hPF7JqcYJAD3BPexcKzg.roa (hash: +IMZpUPrslETwFxcXPRLWmZpXfSU9RCOH9gP9Q/CH5w=)
5: y-cUmsyd1f2Nqa9AjFf-HrgBRvY.roa (hash: K08tIX67yafvJ07B2O/CtxAn2jeh7RiwSsp1rC6qb3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:6f:c7:fc:3b:39:aa:28:14:16:c3:fc:bf:bc:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Validity
Not Before: Apr 17 03:00:58 2026 GMT
Not After : Apr 18 03:00:58 2026 GMT
Subject: CN=7d14d736992c90cfc4207d4f61d6537ec019fc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:e3:e8:56:51:df:c4:59:a1:30:7f:5b:30:
fa:8f:f4:6d:5f:f6:c1:e4:aa:cf:dd:88:ab:2b:83:
90:c2:85:3e:ad:95:fb:4d:f7:e1:3a:29:06:63:ee:
cd:6c:be:04:25:a7:2a:a3:43:8d:ea:ab:e8:68:db:
f3:c2:15:e9:01:38:a9:0f:9d:92:17:52:e6:07:a5:
9b:d2:23:cc:5c:b4:d9:32:96:00:5c:36:3d:dd:06:
80:93:69:32:1a:74:88:75:cc:9a:28:fe:55:3a:57:
02:d7:f9:95:3e:85:c3:98:fd:67:a0:56:1d:51:a3:
a0:20:ae:66:38:ab:a2:83:a5:71:53:3a:0d:85:1b:
b0:4a:88:45:56:7d:33:d5:5e:be:bc:fe:06:df:b3:
46:5b:39:32:3d:b0:24:20:5a:23:a0:46:d2:47:9c:
dd:88:42:15:a9:f2:ab:4a:ed:07:21:89:46:60:81:
4e:fb:6e:fb:b1:b2:1d:e9:2c:9b:ef:b3:bb:e2:a1:
11:d5:13:7b:30:40:da:89:57:b1:04:d2:cd:92:8e:
fc:e5:64:3b:75:04:59:a6:64:f6:d7:06:6b:40:ea:
dd:1e:ad:0e:40:d6:19:9a:26:1a:04:ca:62:86:4a:
09:45:99:c3:b7:8d:aa:3f:62:18:4d:a5:60:a1:3c:
fe:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:14:D7:36:99:2C:90:CF:C4:20:7D:4F:61:D6:53:7E:C0:19:FC:3B
X509v3 Authority Key Identifier:
keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:36:56:a4:50:e3:9d:ed:5a:f3:64:7a:7c:de:ee:04:bb:75:
b6:8c:9d:bf:52:02:e9:a8:89:91:89:dd:67:f4:4a:c7:8a:7a:
77:2f:d3:00:ca:32:6e:20:91:12:e5:ea:48:a0:0e:22:4d:5a:
36:41:7c:7a:31:a8:b1:28:31:04:8d:92:2b:34:a4:f5:3a:bc:
62:99:b6:2d:e2:d7:49:ab:6d:2e:1a:ac:fb:10:3f:8f:3f:92:
a9:03:dc:68:88:a6:a2:2d:46:b3:9b:0b:da:3a:4d:91:98:23:
bf:39:8a:23:d5:cb:fa:9c:a3:f5:5e:41:9e:02:ab:03:eb:b1:
df:1e:f6:37:06:11:4d:b4:04:e3:e1:99:13:63:cf:bf:d0:1c:
26:b7:d2:45:6b:6b:a1:ca:8b:95:4b:88:55:70:d1:5f:0b:df:
24:ec:7e:80:2b:96:e2:58:43:70:4a:81:8c:b9:7c:67:35:41:
a8:21:5e:d8:6e:da:f8:e8:4a:35:88:f7:46:50:00:8a:c1:c7:
5c:82:3a:15:50:21:a7:22:f7:90:66:99:81:df:38:67:34:03:
7a:97:30:07:c5:34:c0:1d:37:22:e0:58:27:ec:b5:a9:8b:a6:
ad:b5:12:61:2b:dd:d7:b9:ce:18:48:01:b5:d2:2d:48:b7:c2:
8f:81:e2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:48 2026 by rpki-client