Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: JYzjSPnkEUxiGu3QIc3M7vLpJpR8K4NZkh3rou0QLAM=
Subject key identifier: A4:51:11:B0:83:13:27:E4:C3:DA:A3:80:78:F3:0D:82:04:45:B4:9F
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 019EBF9159950336F1BA8A6B7D36833410D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 1961
Signing time: Sat 13 Jun 2026 06:00:34 +0000
Manifest this update: Sat 13 Jun 2026 06:00:34 +0000
Manifest next update: Sun 14 Jun 2026 06:00:34 +0000
Files and hashes: 1: FVFRIPh6vjxNZF9GmdKTzMvxW20.roa (hash: RxEPmyeQKw2S/n6YHyV1FFH2RRQ1FPtU6WCYyBI+QSs=)
2: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: XimIr5OMECUf9HDurvhGpFT/sSjRr8+gWWNtdNR6jwk=)
3: Ll4El4EPvQjU1m3_NGW31BoMNbs.roa (hash: aAbsXcXAi1Px9rBqFebnRpJI/7J+UKhx99NtmpOY4GQ=)
4: MlnC-jaRpZnIrgB8_eQnTAbVGTA.roa (hash: LraAiuo62bJSCi7FsjMWIePU6+pRqpeuBTDorfg6wzo=)
5: WVi_ybIpobHkUBuINJ5UAOJnWNI.roa (hash: 3fbJIuP8QMGU6Mp39Y5b/MTPHVVyptacQbOnxd8jif8=)
6: YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa (hash: gnWGWFdrNvGan6Zj654ovvMYwlS3b9SdtQbQJSYqz8w=)
7: cKL1r39FOEn9-Io6QM2GHDGad7Y.roa (hash: IVOj6G/Kxw/gIVSF+sBn1ShNhJ2a3NRvKy7Xif0pwjk=)
8: clfdiMu1i07BMzYCaMwkqCSWESQ.roa (hash: nPTdJ+2EENVzerbY85J3Hj4LaW3YuLFq8ExfSo1tXKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:59:95:03:36:f1:ba:8a:6b:7d:36:83:34:10:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Jun 13 06:00:34 2026 GMT
Not After : Jun 14 06:00:34 2026 GMT
Subject: CN=a45111b0831327e4c3daa38078f30d820445b49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:79:40:95:a3:8c:31:46:be:3f:bd:c7:5e:
3d:cc:2d:99:31:e8:35:f4:93:f5:c1:12:69:62:bf:
7f:4d:cc:88:15:ba:04:85:a9:8d:d7:94:e0:34:e2:
5d:d4:b4:cd:ec:4e:55:64:82:15:19:83:97:ac:4a:
6f:20:d0:fa:10:72:44:d1:33:91:e2:76:f9:c9:5f:
23:cf:59:3e:3b:aa:76:9f:a3:27:18:5f:18:7f:20:
ea:76:9e:da:0b:e4:8c:03:dc:f7:39:88:ae:39:8a:
ba:3a:d1:e8:50:4d:a2:b1:1d:bf:d1:31:e1:e4:db:
32:48:96:39:17:e9:f8:94:e3:f0:f6:5a:b9:52:1f:
7a:d4:6b:26:db:f0:e8:1b:94:ca:b6:eb:b3:df:9b:
06:ed:f6:74:47:e1:e3:aa:22:af:fd:2f:c0:8a:8d:
1a:94:5b:76:9d:b4:0a:0b:94:3a:1a:18:0d:f7:8d:
cc:36:08:61:91:0e:00:0e:7c:14:5a:b1:f6:e3:18:
fe:2f:97:c0:23:4b:56:fe:ba:33:ec:71:5b:e2:1a:
75:6f:ae:b0:61:be:51:56:36:39:42:f6:57:2a:23:
e8:b6:10:0d:06:82:69:6f:04:e9:a9:b5:a8:b8:d3:
50:3f:9c:a8:55:eb:93:11:e8:db:3e:86:93:06:63:
aa:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:51:11:B0:83:13:27:E4:C3:DA:A3:80:78:F3:0D:82:04:45:B4:9F
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ed:42:c2:a4:8b:cf:64:2e:37:52:fe:d1:a2:91:d9:b8:f0:
4c:9f:29:16:1d:66:c4:62:02:e8:dd:d2:9b:71:3e:78:fd:8a:
45:bf:bd:40:8e:d1:76:5d:ec:66:23:55:ed:a9:3b:ee:60:fa:
1c:f4:cf:47:f0:54:b9:ea:48:6e:9a:6a:53:bf:37:e3:bf:2e:
56:47:ad:95:af:aa:4a:cd:c3:5a:ef:b9:a8:ec:fa:b7:bd:0e:
4e:96:f8:00:b7:a0:a5:ef:bf:4d:53:10:fa:96:e3:24:e5:49:
ae:3a:d4:e5:22:f5:40:b7:9f:c6:1a:4e:dd:28:24:21:0d:2c:
0f:7b:f8:11:fd:c7:83:b0:88:0e:6e:fe:7b:50:f7:d9:bf:9e:
7a:aa:a2:14:10:8a:d9:46:cf:a7:e0:c7:0e:30:22:ad:df:e9:
dd:d3:8d:57:09:a5:24:21:2e:9f:fa:93:a3:2d:71:d4:6c:c6:
84:a5:31:05:cb:c6:6d:97:48:c6:6f:32:73:32:66:a2:66:83:
08:0e:34:77:09:1d:61:2e:68:72:f1:e0:de:3b:4c:0a:e0:ee:
6b:5e:96:26:ce:d1:da:23:0f:b1:18:7f:cd:b4:34:7e:19:db:
6b:28:f9:fd:3f:ff:6d:8b:6e:11:3a:2c:9f:40:cf:8b:8f:ad:
7c:8b:e7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:04 2026 by rpki-client