Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: lRIsqtW0mrSPlsAw9MVwnwVtiyel5usgznVeOI7Spqc=
Subject key identifier: 6C:C4:2E:F0:9A:1E:21:54:FE:AB:9F:CC:55:D4:CC:2D:4D:EE:90:F8
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 019FAB2C2FACABB98E4AA138F7AB6500F721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 19DB
Signing time: Wed 29 Jul 2026 00:00:27 +0000
Manifest this update: Wed 29 Jul 2026 00:00:27 +0000
Manifest next update: Thu 30 Jul 2026 00:00:27 +0000
Files and hashes: 1: FVFRIPh6vjxNZF9GmdKTzMvxW20.roa (hash: RxEPmyeQKw2S/n6YHyV1FFH2RRQ1FPtU6WCYyBI+QSs=)
2: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: fsP7VQ1xWS/2LTEttrQM123k/VcZht2DoUZ8gjbCdgY=)
3: Ll4El4EPvQjU1m3_NGW31BoMNbs.roa (hash: aAbsXcXAi1Px9rBqFebnRpJI/7J+UKhx99NtmpOY4GQ=)
4: MlnC-jaRpZnIrgB8_eQnTAbVGTA.roa (hash: LraAiuo62bJSCi7FsjMWIePU6+pRqpeuBTDorfg6wzo=)
5: WVi_ybIpobHkUBuINJ5UAOJnWNI.roa (hash: 3fbJIuP8QMGU6Mp39Y5b/MTPHVVyptacQbOnxd8jif8=)
6: YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa (hash: gnWGWFdrNvGan6Zj654ovvMYwlS3b9SdtQbQJSYqz8w=)
7: cKL1r39FOEn9-Io6QM2GHDGad7Y.roa (hash: IVOj6G/Kxw/gIVSF+sBn1ShNhJ2a3NRvKy7Xif0pwjk=)
8: clfdiMu1i07BMzYCaMwkqCSWESQ.roa (hash: nPTdJ+2EENVzerbY85J3Hj4LaW3YuLFq8ExfSo1tXKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:2f:ac:ab:b9:8e:4a:a1:38:f7:ab:65:00:f7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Jul 29 00:00:27 2026 GMT
Not After : Jul 30 00:00:27 2026 GMT
Subject: CN=6cc42ef09a1e2154feab9fcc55d4cc2d4dee90f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:67:75:5f:a4:ac:c4:7d:ac:f1:58:ed:ec:
64:42:a8:ed:b9:2e:08:36:5d:3d:49:b1:61:55:5c:
d1:c6:28:9b:40:7e:c6:a6:84:7e:cd:fa:bf:aa:59:
b0:1d:a1:c7:7f:fe:4c:38:0b:40:39:97:76:e5:11:
be:f2:53:4d:2b:ed:56:0b:77:f8:00:4d:55:cc:4b:
62:9f:03:66:53:92:c9:e7:e0:5a:e8:60:9a:9f:fb:
a9:b4:32:cf:26:44:a2:46:8f:5b:25:79:77:d0:65:
65:45:92:32:5a:6a:35:0b:49:22:8d:3d:13:58:65:
48:dd:67:bb:3b:c4:13:70:c5:18:50:60:23:c9:e4:
dc:f5:89:6e:0d:13:4f:f3:df:56:09:1b:2c:03:72:
92:d1:01:9b:37:f6:70:6d:50:d2:a6:92:01:7b:e5:
49:5c:5d:5d:83:0d:4c:7a:27:9c:0b:c0:62:13:7d:
ca:12:32:47:e1:cd:55:11:7a:1c:65:02:e2:c0:dd:
7b:8d:71:10:f2:71:4b:3c:d0:91:e6:e8:8c:e3:c7:
55:5f:dd:e3:f6:1b:2d:10:60:46:64:c9:4e:da:4f:
fb:17:93:2c:52:88:88:8b:84:83:2c:24:86:da:07:
c9:f2:93:cd:9f:82:35:e5:bc:29:00:af:ed:91:14:
ee:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C4:2E:F0:9A:1E:21:54:FE:AB:9F:CC:55:D4:CC:2D:4D:EE:90:F8
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:55:22:87:ad:6e:fc:9f:84:0b:22:7b:8a:4a:75:83:cb:67:
a2:b0:4c:f2:4a:ff:a5:ec:9e:78:e0:98:38:96:39:4c:8d:0f:
70:f7:0c:79:4d:55:f6:8b:f4:3e:8f:48:f0:93:49:9f:e5:10:
63:68:cc:22:f5:97:c6:d9:16:64:ff:0a:2a:d7:55:42:e2:c1:
ef:68:64:fe:c0:10:23:9e:54:b8:47:c8:3f:69:bf:2e:72:e7:
ce:93:d5:ab:41:81:40:d5:88:61:76:95:42:08:50:90:56:58:
ee:ad:c5:0c:a7:47:da:87:1f:3e:10:59:1a:34:1d:e0:ea:55:
4a:4e:9c:b0:94:5e:54:b8:1a:bd:ef:69:6a:68:a5:e0:26:94:
b4:cd:82:93:09:e8:f7:00:c8:3e:4c:e7:fb:01:25:15:f5:a6:
2a:2d:ab:d4:a4:c4:05:55:67:c2:55:e3:74:e2:c3:30:2f:f0:
06:ba:2b:46:72:d0:e3:52:5d:4c:da:91:32:f3:b3:7c:b6:55:
e7:69:6d:f3:71:1b:ad:ff:6d:bf:2e:7f:8d:f2:60:86:42:fb:
53:97:e8:89:58:68:da:7d:55:7c:e8:24:04:5a:ec:b5:4e:e4:
0d:28:0e:37:0f:5e:ed:bc:4c:fa:56:e0:2d:c0:09:3c:cb:45:
b5:0d:98:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:08:30 2026 by rpki-client