Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: /Ip9aHhYE5JgsgavambIreFGkpJ6/dcYrzP6dSShfdQ=
Subject key identifier: 67:16:96:96:ED:7D:ED:57:CD:92:A3:E9:04:C1:99:15:3A:B5:83:50
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 01A0BF5543AD816D413B2A2E477BFD90886A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 1A6A
Signing time: Sun 20 Sep 2026 15:00:31 +0000
Manifest this update: Sun 20 Sep 2026 15:00:31 +0000
Manifest next update: Mon 21 Sep 2026 15:00:31 +0000
Files and hashes: 1: FVFRIPh6vjxNZF9GmdKTzMvxW20.roa (hash: RxEPmyeQKw2S/n6YHyV1FFH2RRQ1FPtU6WCYyBI+QSs=)
2: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: i5C5QgFyUdHpfBrdtoS51Li2U9rFHubTPYFztXszn2g=)
3: Ll4El4EPvQjU1m3_NGW31BoMNbs.roa (hash: aAbsXcXAi1Px9rBqFebnRpJI/7J+UKhx99NtmpOY4GQ=)
4: MlnC-jaRpZnIrgB8_eQnTAbVGTA.roa (hash: LraAiuo62bJSCi7FsjMWIePU6+pRqpeuBTDorfg6wzo=)
5: WVi_ybIpobHkUBuINJ5UAOJnWNI.roa (hash: 3fbJIuP8QMGU6Mp39Y5b/MTPHVVyptacQbOnxd8jif8=)
6: YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa (hash: gnWGWFdrNvGan6Zj654ovvMYwlS3b9SdtQbQJSYqz8w=)
7: cKL1r39FOEn9-Io6QM2GHDGad7Y.roa (hash: IVOj6G/Kxw/gIVSF+sBn1ShNhJ2a3NRvKy7Xif0pwjk=)
8: clfdiMu1i07BMzYCaMwkqCSWESQ.roa (hash: nPTdJ+2EENVzerbY85J3Hj4LaW3YuLFq8ExfSo1tXKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:55:43:ad:81:6d:41:3b:2a:2e:47:7b:fd:90:88:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Sep 20 15:00:31 2026 GMT
Not After : Sep 21 15:00:31 2026 GMT
Subject: CN=67169696ed7ded57cd92a3e904c199153ab58350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:87:c1:6d:dc:e4:f0:6f:75:0f:70:8a:9d:
fd:1c:02:bf:19:69:95:a3:1c:a2:b2:2f:42:63:3b:
36:65:df:85:94:a0:18:5e:06:4d:fa:29:c9:ac:bf:
b8:73:01:f4:cc:10:3b:8f:43:8e:79:b6:8c:7d:03:
4d:53:3d:7b:55:1d:9f:ee:c1:73:a5:3e:5a:d4:1e:
46:e6:94:9f:91:92:49:0f:ea:0e:36:68:d4:47:4e:
dd:56:31:55:b2:e1:1b:0c:41:80:4e:3c:bb:63:b7:
63:b8:11:ba:2c:51:60:49:8d:72:6c:c8:c8:e8:a9:
00:94:7c:f4:15:f8:c8:e0:15:81:4a:9e:98:02:a4:
5d:d9:98:58:38:c7:76:03:9b:a5:08:10:57:9e:89:
3a:0e:81:fb:6f:8c:e8:2e:e7:45:24:ac:d7:09:46:
38:cc:3d:c2:48:05:ac:89:8d:78:73:b2:d4:2a:d5:
a4:15:d8:6e:2f:71:1e:a4:f4:7b:1b:f1:6c:3c:06:
93:bf:d3:d7:c3:fe:68:9e:fd:04:92:36:24:86:15:
a1:36:62:cc:78:92:29:9a:2d:3c:c0:60:a1:d5:3c:
d4:04:6b:07:5a:f4:a2:c8:b0:e1:19:53:15:0a:0a:
05:f4:f2:80:0e:23:b7:22:e2:32:88:a6:43:64:e2:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:16:96:96:ED:7D:ED:57:CD:92:A3:E9:04:C1:99:15:3A:B5:83:50
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f4:83:72:af:80:d3:4b:19:7d:1b:9f:55:3d:32:2b:b9:80:
6a:f5:65:c9:25:87:b3:f6:6d:ff:44:e9:06:80:ab:e6:63:e1:
15:58:c0:1f:25:c8:d1:40:1b:3e:4a:96:89:85:ff:85:d6:11:
bf:94:04:ee:f9:ef:61:c3:df:dc:1a:d4:91:d5:b4:af:a9:06:
52:bb:6e:91:8c:c5:b5:78:6b:a9:4f:20:c8:c7:f8:11:d7:39:
1c:cd:f7:95:b9:46:14:d5:94:94:47:d9:72:24:59:61:a4:c2:
14:92:46:4d:a8:55:64:65:2d:c4:ee:bb:98:92:53:9e:81:cd:
d8:b6:c6:30:49:2a:d8:40:f5:4f:53:0c:97:e3:36:2f:c0:69:
1e:9e:18:7c:a2:c5:32:c5:e9:e1:92:f5:57:db:f4:c8:54:c0:
4f:91:af:c9:26:a1:3f:14:a5:c2:11:a0:af:37:6f:d8:dd:a7:
29:fa:32:58:26:79:46:81:69:eb:2e:c1:1d:64:f6:7f:91:3f:
21:79:cb:9f:5c:23:46:4e:50:84:d1:e1:a2:4d:ce:dd:5c:52:
f3:3b:03:95:b8:8c:27:41:96:6e:11:15:55:92:af:85:4a:c1:
6d:b3:a2:ed:e2:f8:0c:41:b4:20:e3:fe:00:78:b9:1e:40:d3:
b6:22:82:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 01:19:22 2026 by rpki-client