Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
File: Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft (raw, json)
Hash identifier: dzTrWGHRF7iU7HyXhln0l64Xajz87HuU5SvolqflgKU=
Subject key identifier: 8A:74:E7:54:70:4C:43:0F:C2:EA:E5:04:71:29:5F:65:70:48:1F:47
Authority key identifier: 2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
Certificate issuer: /CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Certificate serial: 01A0024B297BD9B5AFF9F5B1420DF490B91E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
Manifest number: 05F4
Signing time: Fri 14 Aug 2026 22:01:15 +0000
Manifest this update: Fri 14 Aug 2026 22:01:15 +0000
Manifest next update: Sat 15 Aug 2026 22:01:15 +0000
Files and hashes: 1: Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl (hash: 0p/Aff3EIfZ8b5o2SptC0WQIkfO5pzW6OQebg97FeKo=)
2: bHxNQUrJC8Eh62QodMXQrjbnmgg.roa (hash: 1d3ZqMZQAbRLtC6TZNo/vpwZQcPk90gTwtcmQgBCgII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4b:29:7b:d9:b5:af:f9:f5:b1:42:0d:f4:90:b9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b3f6fa9f037765e74bdf2ac82ccbabc7e4fc8ed
Validity
Not Before: Aug 14 22:01:15 2026 GMT
Not After : Aug 15 22:01:15 2026 GMT
Subject: CN=8a74e754704c430fc2eae50471295f6570481f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:15:73:c8:8f:f2:71:b6:46:a1:b1:fb:d8:
fe:01:9d:db:05:28:1e:72:fe:9f:cd:fc:6c:00:79:
9e:bc:6e:47:0d:0e:2d:06:ec:7d:d7:37:33:89:8b:
8b:df:29:ae:cf:b4:5c:7b:40:89:ac:9b:ee:88:57:
13:39:ee:70:e2:bb:c4:af:de:a7:36:90:2d:72:ef:
95:1e:6b:07:8b:33:e8:98:ae:ba:0b:1b:69:bd:ae:
1a:d1:c2:1e:01:38:f0:dd:f5:80:16:56:c2:08:c4:
74:d6:cb:fe:e6:3c:05:06:8b:7f:f7:b2:da:00:34:
53:88:3c:0e:d5:35:23:d9:9b:0f:81:f7:79:c0:1d:
53:5e:8a:6d:2c:d9:15:98:de:29:ae:f8:d6:00:ee:
5b:7b:60:ef:31:b0:e8:3b:bc:b0:fe:86:0f:24:2b:
b7:66:56:92:78:dc:aa:ad:47:d7:4f:fb:60:fd:a4:
b3:d0:0f:5d:64:0e:2b:79:f4:72:a4:fc:94:63:12:
f6:ee:c1:df:76:02:3b:00:fc:f1:97:80:90:cb:47:
e1:0c:bd:b1:0f:8a:56:90:ce:73:5c:3e:d0:8b:27:
2c:e9:3f:f0:7c:e1:8f:00:2d:fd:25:95:b5:6b:77:
70:ca:17:23:e8:fc:03:ad:89:e7:24:3d:4e:6d:85:
0c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:74:E7:54:70:4C:43:0F:C2:EA:E5:04:71:29:5F:65:70:48:1F:47
X509v3 Authority Key Identifier:
keyid:2B:3F:6F:A9:F0:37:76:5E:74:BD:F2:AC:82:CC:BA:BC:7E:4F:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kz9vqfA3dl50vfKsgsy6vH5PyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c54f42-912f-4b81-8b00-5c00fcd73619/1/Kz9vqfA3dl50vfKsgsy6vH5PyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:bf:c7:e7:67:03:e5:9b:1c:f0:18:4d:6e:57:5d:a5:e0:04:
ea:30:b1:e4:17:b2:ff:73:96:e0:5a:e0:80:4a:bb:41:d8:4c:
c6:e5:15:07:62:2d:d8:0d:6d:24:f2:50:ad:5d:41:6d:cd:c0:
c5:29:53:33:81:1d:f7:9f:d0:72:52:e3:b5:7f:1d:54:c7:d4:
4b:d6:93:9d:bb:8a:9c:db:67:ca:d9:79:bd:04:7f:c3:da:2c:
08:93:33:8c:10:11:d8:ad:e1:98:c5:aa:1a:b6:70:bd:39:62:
e3:b0:d4:11:b4:14:47:11:4f:ef:38:aa:6b:c7:2b:73:c4:16:
f3:e9:5b:a0:e7:b3:2c:23:d3:10:4f:13:91:57:f2:cd:fd:c5:
3e:8f:4a:4d:e6:18:85:60:54:bb:f9:e5:16:c7:7e:91:fa:ad:
54:e8:de:87:6b:e2:4b:e1:9b:9e:8c:01:c4:f5:c8:a2:38:cb:
99:69:d0:da:80:f7:af:77:ab:dc:90:09:85:c0:0b:1f:3f:1c:
50:d5:18:6b:ca:0d:44:3a:20:a5:2f:50:9e:e2:16:47:83:a6:
98:b4:9a:b1:e9:f7:31:52:8e:4c:17:f8:76:b2:4c:76:a3:38:
67:cf:39:66:4f:4c:74:45:f8:ea:75:ef:d2:96:08:c4:f4:1d:
c2:ac:c1:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACSyl72bWv+fWxQg30kLkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiM2Y2ZmE5ZjAzNzc2NWU3NGJkZjJhYzgyY2NiYWJjN2U0
ZmM4ZWQwHhcNMjYwODE0MjIwMTE1WhcNMjYwODE1MjIwMTE1WjAzMTEwLwYDVQQD
Eyg4YTc0ZTc1NDcwNGM0MzBmYzJlYWU1MDQ3MTI5NWY2NTcwNDgxZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5UVc8iP8nG2RqGx+9j+AZ3bBSge
cv6fzfxsAHmevG5HDQ4tBux91zcziYuL3ymuz7Rce0CJrJvuiFcTOe5w4rvEr96n
NpAtcu+VHmsHizPomK66Cxtpva4a0cIeATjw3fWAFlbCCMR01sv+5jwFBot/97La
ADRTiDwO1TUj2ZsPgfd5wB1TXoptLNkVmN4prvjWAO5be2DvMbDoO7yw/oYPJCu3
ZlaSeNyqrUfXT/tg/aSz0A9dZA4refRypPyUYxL27sHfdgI7APzxl4CQy0fhDL2x
D4pWkM5zXD7Qiycs6T/wfOGPAC39JZW1a3dwyhcj6PwDrYnnJD1ObYUMmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIp051RwTEMPwurlBHEpX2VwSB9HMB8GA1UdIwQY
MBaAFCs/b6nwN3ZedL3yrILMurx+T8jtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jNTRmNDItOTEyZi00YjgxLThiMDAt
NWMwMGZjZDczNjE5LzEvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jNTRmNDItOTEyZi00YjgxLThiMDAtNWMwMGZjZDczNjE5
LzEvS3o5dnFmQTNkbDUwdmZLc2dzeTZ2SDVQeU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7/H52cD
5Zsc8BhNblddpeAE6jCx5Bey/3OW4FrggEq7QdhMxuUVB2It2A1tJPJQrV1Bbc3A
xSlTM4Ed95/QclLjtX8dVMfUS9aTnbuKnNtnytl5vQR/w9osCJMzjBAR2K3hmMWq
GrZwvTli47DUEbQURxFP7ziqa8crc8QW8+lboOezLCPTEE8TkVfyzf3FPo9KTeYY
hWBUu/nlFsd+kfqtVOjeh2viS+GbnowBxPXIojjLmWnQ2oD3r3er3JAJhcALHz8c
UNUYa8oNRDogpS9QnuIWR4OmmLSasen3MVKOTBf4drJMdqM4Z885Zk9MdEX46nXv
0pYIxPQdwqzBEw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:27:47 2026 by rpki-client