Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: Ou54X4S/uEsVVID9jhwObWDDQOR3+6W5o09Yn1nYgBk=
Subject key identifier: 73:36:D4:A7:FC:E7:43:86:12:B0:0E:AF:6A:BA:13:ED:65:D6:FC:AE
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 019D98189E69A383E88C710DB71F1B88705A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 18C8
Signing time: Thu 16 Apr 2026 21:00:43 +0000
Manifest this update: Thu 16 Apr 2026 21:00:43 +0000
Manifest next update: Fri 17 Apr 2026 21:00:43 +0000
Files and hashes: 1: FVFRIPh6vjxNZF9GmdKTzMvxW20.roa (hash: RxEPmyeQKw2S/n6YHyV1FFH2RRQ1FPtU6WCYyBI+QSs=)
2: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: Mh6IYHAlFiMVvpA5H6EQoWid4erLFEiLk4brl+WkbqU=)
3: Ll4El4EPvQjU1m3_NGW31BoMNbs.roa (hash: aAbsXcXAi1Px9rBqFebnRpJI/7J+UKhx99NtmpOY4GQ=)
4: MlnC-jaRpZnIrgB8_eQnTAbVGTA.roa (hash: LraAiuo62bJSCi7FsjMWIePU6+pRqpeuBTDorfg6wzo=)
5: WVi_ybIpobHkUBuINJ5UAOJnWNI.roa (hash: 3fbJIuP8QMGU6Mp39Y5b/MTPHVVyptacQbOnxd8jif8=)
6: YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa (hash: gnWGWFdrNvGan6Zj654ovvMYwlS3b9SdtQbQJSYqz8w=)
7: cKL1r39FOEn9-Io6QM2GHDGad7Y.roa (hash: IVOj6G/Kxw/gIVSF+sBn1ShNhJ2a3NRvKy7Xif0pwjk=)
8: clfdiMu1i07BMzYCaMwkqCSWESQ.roa (hash: nPTdJ+2EENVzerbY85J3Hj4LaW3YuLFq8ExfSo1tXKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:9e:69:a3:83:e8:8c:71:0d:b7:1f:1b:88:70:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Apr 16 21:00:43 2026 GMT
Not After : Apr 17 21:00:43 2026 GMT
Subject: CN=7336d4a7fce7438612b00eaf6aba13ed65d6fcae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:6c:2a:67:9c:66:a5:6f:e1:65:4e:06:70:
dc:2d:f5:81:0b:70:84:95:22:96:38:7b:16:82:ae:
da:2e:a1:af:e3:ad:63:47:fb:66:85:b7:83:e2:85:
5e:14:30:00:68:e0:77:ea:1b:68:8b:f3:07:59:a0:
ad:4a:2c:47:58:92:42:43:b8:c3:cd:dd:5f:de:42:
b3:58:45:20:22:05:d3:e8:15:a2:f4:94:40:4e:12:
64:6a:24:99:7a:de:8c:c0:b8:17:9e:fc:99:68:3e:
33:8b:4f:e6:63:42:21:14:a9:a3:96:b0:c6:b3:50:
9d:54:19:02:7e:f1:af:fa:53:0f:49:ac:e9:10:04:
b9:b4:8a:2d:06:e0:9f:af:9f:65:06:d2:b6:06:42:
d0:96:0d:e6:98:ba:b1:ac:18:12:f5:29:03:87:c0:
71:43:c3:f5:42:54:a7:61:31:df:3a:57:66:eb:ff:
6e:c1:80:5a:5d:29:80:58:df:18:4c:cb:7f:9a:64:
9d:84:15:1d:00:49:dc:7b:0a:1a:aa:73:2e:c8:f4:
22:9b:48:4d:fa:e3:d7:1d:2b:f0:35:b7:69:68:4a:
da:31:c6:d6:ce:0a:d4:00:ed:8a:13:5d:24:e6:cf:
c2:e6:7c:9e:67:e1:82:b0:2f:36:68:ed:08:32:82:
f5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:36:D4:A7:FC:E7:43:86:12:B0:0E:AF:6A:BA:13:ED:65:D6:FC:AE
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:6e:c6:af:56:df:5d:b6:46:df:60:5d:56:2f:42:5a:e3:14:
cd:c0:a6:ea:fa:4e:93:d1:aa:3f:f1:22:04:75:b5:e0:11:9a:
91:b6:ab:41:59:bd:05:20:13:02:3a:26:b8:09:9e:6c:80:16:
0e:72:a6:6d:1e:fc:82:b1:93:d7:fd:a2:c1:69:62:db:e7:8a:
e2:fd:a8:f9:20:60:41:aa:19:5b:6c:7a:6a:bb:3b:71:49:74:
bd:ae:08:c5:50:63:06:0c:3f:8e:38:62:93:07:db:3f:a9:2c:
3e:5b:f4:0e:a9:14:b5:aa:63:44:fe:b8:bf:61:f8:b7:46:f1:
09:66:d8:f8:53:88:1f:84:53:13:8e:c1:58:fb:25:37:88:83:
55:5e:89:e1:1a:49:2b:e7:b1:ed:64:27:81:f8:88:4a:65:ee:
e5:ee:56:60:8c:e4:86:fd:eb:bb:82:a7:e0:11:25:35:68:90:
92:49:ce:b6:c7:64:62:cd:14:e8:09:43:22:b2:50:05:20:6e:
ce:5e:f2:6f:00:db:cd:8d:81:9a:9e:f2:91:fd:79:18:41:72:
30:d8:d8:44:e2:5b:3d:ce:7d:d1:14:7e:0c:58:92:3d:4d:0c:
7a:2d:ef:74:0f:bf:a1:08:ab:b8:62:f7:7f:a9:f2:b9:ce:e7:
7d:87:e0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:47 2026 by rpki-client