Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier: VT6qe4fuuQak9RRgagZnKxZmEl2HQmqosG0nLuZu8nQ=
Subject key identifier: 19:2C:1A:3D:0E:F5:86:22:53:DF:74:E8:A6:6E:C9:51:5D:5D:FD:FC
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 019CACEBDB2DA7E211C8FA0BD02B7689B2DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number: 092C
Signing time: Mon 02 Mar 2026 05:01:04 +0000
Manifest this update: Mon 02 Mar 2026 05:01:04 +0000
Manifest next update: Tue 03 Mar 2026 05:01:04 +0000
Files and hashes: 1: JYQFKO-FunI32nUSHCVmHj-U72s.roa (hash: t8vcZJVMC1m+PZSUssB6U2g3nAq5K3T4+GIKxNDbOGE=)
2: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: NzoxC+pT7lxlfSklDl7R0n+JTT8BkMZXfNymR/g1Px0=)
3: _WfVRuscLnYYCEteyctZE_mRNGA.roa (hash: OwIxeyz2i/PN3Q/yKcsy594HSMnZiCVH224Ea6c2hAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:db:2d:a7:e2:11:c8:fa:0b:d0:2b:76:89:b2:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: Mar 2 05:01:04 2026 GMT
Not After : Mar 3 05:01:04 2026 GMT
Subject: CN=192c1a3d0ef5862253df74e8a66ec9515d5dfdfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:57:14:10:78:8d:6e:68:e5:49:50:b9:f5:cd:
a1:d1:ca:df:1a:e6:ad:63:b2:0a:24:54:ad:6c:e3:
96:e9:b1:75:cb:e5:82:90:ae:30:1c:92:af:7a:6b:
1d:4b:0f:2c:f6:b0:45:83:20:0f:42:ba:6b:7b:d5:
59:a0:e5:e0:fa:02:ab:a3:cc:7b:83:96:92:5c:41:
bf:fe:c9:82:27:c2:78:3e:25:bc:a0:38:08:9f:34:
51:f5:41:17:ef:5c:e7:76:3f:92:ed:0d:65:f0:a5:
2c:74:4a:14:56:27:99:90:84:05:71:12:e7:a2:67:
ba:b7:96:83:5c:c6:59:93:01:d5:f4:5e:59:ce:db:
bd:fb:43:8c:1b:55:eb:fc:ce:31:36:2b:73:ad:a3:
25:21:f4:82:30:f2:c2:92:05:27:5e:77:eb:1a:c6:
31:3b:39:3f:b4:9a:5d:bf:0b:3d:44:dc:88:cb:8b:
26:13:d9:77:a5:d5:fe:76:7c:0c:e5:2a:9d:96:e1:
2b:5e:51:de:3d:e2:89:90:e2:40:97:6a:47:f0:70:
ff:99:93:98:78:28:24:cd:01:d3:55:70:37:c9:95:
ef:65:84:64:04:cc:a9:bd:8f:18:48:42:2a:9d:c8:
03:79:cb:aa:18:dd:a0:57:8f:0d:dc:bb:8b:86:0f:
32:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2C:1A:3D:0E:F5:86:22:53:DF:74:E8:A6:6E:C9:51:5D:5D:FD:FC
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4a:6b:8e:6c:59:6a:23:38:2a:df:0d:9d:b3:a0:2c:b2:7c:
ff:5a:e5:31:bb:9b:b0:6c:df:94:3f:78:e0:86:63:a2:f2:76:
67:36:44:0a:33:51:e9:1e:74:5a:6f:67:89:6e:c2:20:34:6d:
c9:44:25:71:20:ad:8e:cf:b3:88:a7:c2:46:34:d9:78:7d:ef:
14:14:39:34:ef:ce:5b:71:10:82:b8:6e:40:e2:68:51:cb:22:
a1:9b:38:61:a5:11:63:24:b2:4f:3e:cd:dd:df:da:7f:46:57:
50:f8:d2:17:70:14:e7:98:b7:e5:10:0d:12:8c:5c:81:df:62:
02:21:1a:c0:de:8a:4f:16:62:b1:3b:29:66:3e:dc:b8:8d:d2:
c9:20:3e:a5:dc:6f:e6:57:55:3f:6c:62:b9:77:e1:fb:00:0a:
7a:38:3b:37:6f:35:41:c9:69:15:c4:be:d1:57:b0:3a:e6:c8:
88:f8:40:37:ba:0c:6d:41:4e:cb:48:3c:d0:32:a7:c2:b8:e2:
3b:ea:19:64:34:9c:ec:0d:0e:57:4d:49:4c:ee:f2:d7:9a:0e:
fb:94:07:e3:78:7c:fd:f1:53:91:51:5e:4a:dd:5d:2c:15:75:
25:c9:02:0b:b2:53:9f:89:64:fd:47:9d:1c:fc:fa:6c:c4:a6:
7b:41:de:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:51:12 2026 by rpki-client