Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
File: KZWUToTcN7pqQtaLseK5pEIehKQ.mft (raw, json)
Hash identifier: QJlNsLg62waZWKcenK304Inc7LNDrj5Jw+w65o7m12k=
Subject key identifier: EC:53:26:60:41:0C:7F:63:BE:1D:37:55:E7:FE:D3:CC:4D:28:D5:AE
Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Certificate serial: 01A0DF8568E23E2C3DF165BC6BDE3891C512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 21:00:57 +0000
Manifest this update: Sat 26 Sep 2026 21:00:57 +0000
Manifest next update: Sun 27 Sep 2026 21:00:57 +0000
Files and hashes: 1: KZWUToTcN7pqQtaLseK5pEIehKQ.crl (hash: 6vj4U9aTusK4sK2ZDaQy979ifuggIvE9aKrRHwyf3iY=)
2: REMIC3qlblupLlRlDy8YWtuHeGs.roa (hash: Jx2qxwn04q0eIKP0O31CsM6H6HSDWevmv7hr0SA1D6o=)
3: jqkc2v-EDfDqyX3RgGBk8W5KdEw.roa (hash: J6Uk//qcGJOT6wNTUI4e5Z8Vod7CmZ9RrMaWF9PPJeM=)
4: rrH1j10hPF7JqcYJAD3BPexcKzg.roa (hash: +IMZpUPrslETwFxcXPRLWmZpXfSU9RCOH9gP9Q/CH5w=)
5: y-cUmsyd1f2Nqa9AjFf-HrgBRvY.roa (hash: K08tIX67yafvJ07B2O/CtxAn2jeh7RiwSsp1rC6qb3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:68:e2:3e:2c:3d:f1:65:bc:6b:de:38:91:c5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Validity
Not Before: Sep 26 21:00:57 2026 GMT
Not After : Sep 27 21:00:57 2026 GMT
Subject: CN=ec532660410c7f63be1d3755e7fed3cc4d28d5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:72:39:a2:59:53:18:4e:2a:f0:38:eb:fc:
53:3d:57:f1:60:c6:7c:d1:a0:6d:de:f8:8b:76:fa:
9b:4d:b6:db:e1:e7:c2:7a:ad:a4:32:a5:a0:33:f0:
d6:27:7a:97:fd:c1:e8:af:25:7e:18:e8:83:60:b5:
b1:53:b4:52:1f:a2:01:3e:94:8f:64:65:8b:61:d3:
99:e0:df:49:c3:00:94:d8:80:95:05:b9:63:88:66:
f5:3d:9f:6d:97:0e:78:ac:00:9b:83:05:ae:75:1e:
1d:8e:99:bb:24:38:c7:36:cc:eb:0c:6b:14:13:b3:
bc:f1:bc:20:f8:9b:3b:8f:42:60:74:93:1c:d1:6b:
51:ad:3b:a2:c3:0c:18:d7:26:1e:71:d8:a2:af:23:
9e:12:24:ae:ec:5b:c7:6f:ca:39:df:f5:ce:35:db:
6a:54:f6:c1:b3:0b:2b:55:14:da:23:9b:23:4c:88:
f2:64:b9:30:46:f1:4b:24:87:a2:17:06:89:b0:6a:
15:b7:d5:c7:38:b8:d2:8f:20:70:ea:8c:46:af:ab:
54:b7:2b:5a:d2:23:c0:e3:c7:b6:28:e8:0c:b6:98:
34:f2:17:59:21:0f:24:d6:8d:08:1e:cb:e8:1f:3c:
66:24:43:15:50:90:02:82:8b:da:9f:a4:5d:77:86:
49:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:53:26:60:41:0C:7F:63:BE:1D:37:55:E7:FE:D3:CC:4D:28:D5:AE
X509v3 Authority Key Identifier:
keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:64:78:d6:bc:59:98:1f:db:83:fe:90:1f:82:b1:7f:f5:12:
f5:44:5f:01:6b:e1:37:ce:7e:9e:a9:66:ea:fc:1e:22:19:67:
68:cc:a8:54:ac:90:b5:1b:60:ea:8e:67:35:cb:ef:af:74:ab:
64:46:a0:63:89:1f:15:f3:39:1d:56:6e:f4:d3:56:a4:36:23:
88:4a:c2:7b:73:b2:76:d8:20:be:77:19:22:70:a7:ab:a8:0b:
81:37:50:2a:3c:f9:ce:15:f1:22:e4:ac:24:47:81:a1:dd:60:
25:c3:09:12:2c:86:8d:c1:8c:7f:7c:26:86:c1:41:e6:68:60:
04:2e:81:73:c6:3a:b7:24:72:ab:1f:50:d1:e0:5c:ae:6d:bb:
e6:ee:82:37:ef:29:7a:c8:b7:8b:7d:f8:ff:cc:be:c8:c9:9a:
8a:69:4c:26:6b:54:c8:b2:36:3c:f2:9f:15:17:fc:ba:1a:02:
b8:62:ed:30:f8:8d:cf:71:b1:69:3e:57:57:a9:11:50:31:e6:
b0:06:11:2d:2d:b2:35:3e:e5:37:71:68:9f:47:cd:b2:8c:33:
be:01:44:b1:b6:f4:58:c9:8d:11:fd:1a:ca:ff:eb:0f:16:8d:
0f:0b:68:2c:ef:7a:0c:ba:9c:eb:5f:2c:60:d6:a7:b1:11:0a:
f8:d8:7e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:35:36 2026 by rpki-client