Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/KziM2BJWh8KWwAXj_HWC8NLV9DA.mft
File: KziM2BJWh8KWwAXj_HWC8NLV9DA.mft (raw, json)
Hash identifier: 2/y9M+HsCC9j0PtNDfXFrj39ASCIeyTJOZDNn5kUpWA=
Subject key identifier: D0:DB:4A:4E:35:A2:FF:7C:96:14:83:3C:78:0C:D4:52:59:F4:9E:AD
Authority key identifier: 2B:38:8C:D8:12:56:87:C2:96:C0:05:E3:FC:75:82:F0:D2:D5:F4:30
Certificate issuer: /CN=2b388cd8125687c296c005e3fc7582f0d2d5f430
Certificate serial: 019EC224975D2789A76D6710DA3BAAB78BF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KziM2BJWh8KWwAXj_HWC8NLV9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/KziM2BJWh8KWwAXj_HWC8NLV9DA.mft
Manifest number: 46
Signing time: Sat 13 Jun 2026 18:00:38 +0000
Manifest this update: Sat 13 Jun 2026 18:00:38 +0000
Manifest next update: Sun 14 Jun 2026 18:00:38 +0000
Files and hashes: 1: KziM2BJWh8KWwAXj_HWC8NLV9DA.crl (hash: PNsP5UQaGFtVfhQItAj2HN1ZrqqWmnPFsJNLcwtWTRE=)
2: eWt51NtuPNvIS6HxDaX9L2BrBjA.roa (hash: 10KwVSGDSftJHeU/pZbCFDl2bTnuaPigGssxY4rv+DM=)
3: mtFg9dPPtnwsI_EE-_kCeNmzQj4.roa (hash: f4LSSvZ6n6eIi+W5zEhdojG9D8Eyn4TFAykK5EjC2a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/KziM2BJWh8KWwAXj_HWC8NLV9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/KziM2BJWh8KWwAXj_HWC8NLV9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KziM2BJWh8KWwAXj_HWC8NLV9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:97:5d:27:89:a7:6d:67:10:da:3b:aa:b7:8b:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b388cd8125687c296c005e3fc7582f0d2d5f430
Validity
Not Before: Jun 13 18:00:38 2026 GMT
Not After : Jun 14 18:00:38 2026 GMT
Subject: CN=d0db4a4e35a2ff7c9614833c780cd45259f49ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:ca:d7:46:72:88:45:f2:91:2e:2e:2e:23:
07:f0:3a:1d:b4:59:b6:4e:17:2f:1c:41:26:ab:e5:
b9:aa:d5:c1:db:46:02:ab:76:5c:15:16:88:17:a1:
6d:9b:41:2c:be:53:32:f9:cc:ce:b9:05:57:eb:1b:
8a:e0:6d:96:80:c2:f2:d5:f4:77:95:27:88:f3:5b:
53:16:df:9c:24:b9:2f:20:39:9c:d6:3a:f6:3c:dd:
0c:3b:41:f1:57:5b:1d:76:f8:5e:73:02:5b:f5:21:
b7:2a:33:4f:b3:9b:9e:14:64:ca:05:74:52:54:6c:
ce:3f:f3:36:56:2d:96:34:a9:53:c6:58:af:05:58:
40:1f:16:c0:a9:00:d2:15:dd:69:8a:94:84:07:61:
03:5d:34:35:f0:3b:14:19:4b:81:b9:84:18:9c:c7:
94:f6:11:de:a3:0c:f5:c8:f5:26:43:6c:ba:5b:03:
fd:bb:eb:59:bf:3a:43:38:8d:91:fd:66:b4:30:98:
21:e1:21:21:26:8d:0c:c7:a7:ff:60:b4:e8:e0:e1:
65:ff:77:21:cd:5f:7e:f5:0d:72:02:0b:0c:f5:84:
65:24:54:6e:fe:6b:2f:33:35:32:c3:21:9a:6a:fc:
16:88:7f:a8:47:0d:38:b8:c0:19:7a:88:d3:3d:86:
de:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DB:4A:4E:35:A2:FF:7C:96:14:83:3C:78:0C:D4:52:59:F4:9E:AD
X509v3 Authority Key Identifier:
keyid:2B:38:8C:D8:12:56:87:C2:96:C0:05:E3:FC:75:82:F0:D2:D5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KziM2BJWh8KWwAXj_HWC8NLV9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/KziM2BJWh8KWwAXj_HWC8NLV9DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/KziM2BJWh8KWwAXj_HWC8NLV9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:6c:00:cf:db:5d:48:f6:55:ce:8e:a5:f1:6f:14:45:26:c2:
08:d7:a4:2b:12:67:da:c8:bb:3a:8f:c2:ca:9b:c4:23:0f:51:
91:9b:4c:1f:41:67:f6:fd:1a:c5:20:c7:7e:94:c6:92:bd:21:
a2:bb:d0:aa:37:30:14:6c:a2:74:61:2b:64:b9:be:df:30:45:
49:3a:a6:2b:17:a2:f9:eb:07:89:57:68:59:81:88:b6:4d:da:
1e:a4:45:6e:6d:05:80:2b:5a:db:97:c7:56:f5:aa:6d:7d:71:
58:14:73:6c:f4:d0:5c:f5:2d:c9:d4:d9:1e:90:5a:88:40:76:
7f:5f:fc:07:d7:5d:01:36:49:6d:35:3f:ac:48:63:a8:b4:ef:
7f:b1:1a:0f:eb:f7:d9:4e:d3:5d:75:1b:40:4c:9b:9e:d9:d5:
00:72:75:62:91:c5:f9:b8:ba:5b:2f:54:0c:a3:3f:df:42:f4:
86:d9:1e:4c:41:00:8e:08:da:3d:21:48:99:d3:e7:33:b5:da:
7b:6a:b4:df:ae:84:14:7d:bb:45:a3:28:10:e7:04:2a:24:ff:
3d:c4:d1:ec:d0:38:7c:32:76:f0:e5:6a:76:20:6c:02:9b:bb:
8c:ce:2e:44:be:4a:49:94:13:8b:a6:82:1e:97:3b:ad:0f:22:
9e:9e:ea:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:52:20 2026 by rpki-client