Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
File: KZWUToTcN7pqQtaLseK5pEIehKQ.mft (raw, json)
Hash identifier: OzQS0GVOnfpJr9oD+zRs5Kx3v956X1nHFwWUGpWeSiU=
Subject key identifier: F2:28:25:16:A9:F5:ED:91:A8:A0:BE:74:E4:8E:BF:04:33:91:57:EE
Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Certificate serial: 019CA9EB6702CF129527C56332DB1F46C280
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 15:01:42 +0000
Manifest this update: Sun 01 Mar 2026 15:01:42 +0000
Manifest next update: Mon 02 Mar 2026 15:01:42 +0000
Files and hashes: 1: KZWUToTcN7pqQtaLseK5pEIehKQ.crl (hash: QD5ib1Rgth1imYLxIm3ikPtDQT2vcQNS3Ec/tt6JWP0=)
2: REMIC3qlblupLlRlDy8YWtuHeGs.roa (hash: Jx2qxwn04q0eIKP0O31CsM6H6HSDWevmv7hr0SA1D6o=)
3: jqkc2v-EDfDqyX3RgGBk8W5KdEw.roa (hash: J6Uk//qcGJOT6wNTUI4e5Z8Vod7CmZ9RrMaWF9PPJeM=)
4: rrH1j10hPF7JqcYJAD3BPexcKzg.roa (hash: +IMZpUPrslETwFxcXPRLWmZpXfSU9RCOH9gP9Q/CH5w=)
5: y-cUmsyd1f2Nqa9AjFf-HrgBRvY.roa (hash: K08tIX67yafvJ07B2O/CtxAn2jeh7RiwSsp1rC6qb3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:67:02:cf:12:95:27:c5:63:32:db:1f:46:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Validity
Not Before: Mar 1 15:01:42 2026 GMT
Not After : Mar 2 15:01:42 2026 GMT
Subject: CN=f2282516a9f5ed91a8a0be74e48ebf04339157ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f3:8f:5d:dd:75:51:9c:3e:7a:d6:fd:e4:03:
83:f6:01:44:2d:81:c6:31:d0:a2:8b:c1:19:fd:6b:
d0:a5:56:04:49:fd:b5:9b:b7:70:44:87:93:2e:c9:
56:d6:0c:37:1a:67:01:8f:fd:18:a1:6b:00:db:eb:
28:05:93:6b:2f:0b:8b:ac:6e:c0:9f:50:3c:91:05:
d5:0f:88:f8:ae:92:64:c9:30:e9:1b:34:99:f9:b6:
27:68:af:28:51:ea:c0:41:47:c8:bd:dc:d7:26:75:
59:0a:ad:9a:ce:d8:5f:cf:99:13:bc:6c:f3:4c:bb:
05:39:fa:18:47:8d:48:29:79:4c:6a:d5:d9:4e:d9:
59:b2:32:66:82:1d:8b:ca:41:70:de:17:86:0c:48:
f7:53:bd:e2:74:f2:90:cb:fb:7b:57:91:e6:46:fc:
d5:38:5e:8e:83:5e:4b:83:67:a8:1b:6d:8f:a9:34:
af:00:d6:2c:74:59:a0:0b:e8:27:9b:f8:53:8e:9e:
83:a5:11:fa:17:01:6e:c3:bf:26:0f:92:72:92:9b:
0b:ba:06:d7:c1:4a:f2:b2:6e:29:0f:33:2c:7f:0d:
f6:33:64:b1:0e:54:fe:8e:ec:0b:b6:1f:b2:63:0a:
ea:b2:47:1d:1b:d4:62:c5:5e:ca:e2:7f:a5:9c:c5:
23:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:28:25:16:A9:F5:ED:91:A8:A0:BE:74:E4:8E:BF:04:33:91:57:EE
X509v3 Authority Key Identifier:
keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4b:30:6e:c3:a0:32:e4:2f:96:bf:94:33:1b:ea:14:ff:2b:
9c:8f:81:bb:8a:05:f6:93:78:da:14:9a:b8:c5:e5:db:07:2f:
3d:4c:dd:93:30:15:90:91:57:96:a4:aa:55:73:40:43:dd:fe:
0c:6b:71:9c:11:14:1e:8b:6e:70:2f:f1:2f:09:7f:50:7d:0e:
14:d7:f7:3c:bc:47:90:53:f5:45:70:e7:2c:62:df:1d:b1:a8:
69:2c:b6:87:2e:5a:c2:ac:66:f7:b0:b3:39:83:c7:45:52:2c:
b7:c8:0c:dc:46:1a:97:cb:19:22:c4:06:2a:4f:4c:51:cd:7c:
43:37:49:a5:bb:ae:c4:96:2a:fd:d0:a0:a1:75:be:53:fa:e0:
00:e6:41:d1:bb:54:f6:54:0b:c7:e6:52:54:f4:f0:01:5b:c3:
18:56:c9:57:8f:10:48:30:15:aa:6d:5a:32:c4:e7:0c:a1:89:
74:54:a4:f9:cf:3b:31:59:aa:bd:80:f3:0c:1f:a7:23:30:01:
69:60:5e:c6:a1:69:0f:bb:54:56:22:03:0d:e1:3b:ce:30:5d:
0f:46:b7:f2:f3:47:06:22:ae:9d:75:69:66:68:d8:9b:09:3a:
48:1c:a2:60:62:14:9f:fa:cf:68:53:c3:a7:2f:24:73:76:36:
81:68:72:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:42:53 2026 by rpki-client