Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
File: KzX2qYV9e-AmB6RNiVKojKS6bT8.mft (raw, json)
Hash identifier: QRVtbYSEkHaSLbr14pzmeKUaouIWcfmRvLs18HdqAh4=
Subject key identifier: 46:0F:5D:FD:26:A1:EF:B2:9C:AA:51:3A:61:90:1F:92:4A:52:9F:22
Authority key identifier: 2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
Certificate issuer: /CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Certificate serial: 019CB35B44C24BCBBDA24A678D9183C3DF08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
Manifest number: 37
Signing time: Tue 03 Mar 2026 11:00:28 +0000
Manifest this update: Tue 03 Mar 2026 11:00:28 +0000
Manifest next update: Wed 04 Mar 2026 11:00:28 +0000
Files and hashes: 1: KzX2qYV9e-AmB6RNiVKojKS6bT8.crl (hash: Va9uXzjr7VOVML1eO32uhX2FX/idiabuHHS4Rvxo4Yg=)
2: XRhRqov_VqyHRFFYOkd67TDUlfI.roa (hash: ML2iFZdBnrqeYBDgHkNF/6ovrR0UHPTGixgV/99EaNU=)
3: k424Nbk6SvvJjvOfKup0qsQXNRI.roa (hash: a50oRNVhCvCgBUG8ZaNohlcl3wba1rL6P6UcpuYYzJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Mar 2026 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:5b:44:c2:4b:cb:bd:a2:4a:67:8d:91:83:c3:df:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Validity
Not Before: Mar 3 11:00:28 2026 GMT
Not After : Mar 4 11:00:28 2026 GMT
Subject: CN=460f5dfd26a1efb29caa513a61901f924a529f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5d:ab:3c:0d:38:cd:81:24:95:79:32:67:dd:
c5:20:7c:f7:08:fc:bf:06:fa:f6:9d:60:95:90:dc:
b6:b8:8f:12:6e:66:c8:b7:eb:7a:6a:28:80:17:de:
08:55:f9:ac:94:3e:52:a5:5e:a0:aa:77:c5:14:6e:
a8:02:b0:c7:36:3a:ad:1e:cc:49:fe:64:4d:7b:69:
08:a0:29:fb:4c:05:12:a7:4c:f2:be:54:6f:87:ed:
18:0e:91:9f:ab:73:94:aa:05:5f:5f:2d:47:67:01:
fc:64:b8:6c:7b:cc:72:a4:70:6d:56:3c:ce:7e:37:
8d:1a:dc:83:1d:a6:72:35:7a:56:cd:eb:d4:d9:fb:
77:34:0c:fa:40:c5:7d:9b:9d:4f:f0:0c:60:eb:eb:
16:da:0a:5b:6a:37:53:03:31:45:d5:33:d0:c9:ea:
d3:bd:b3:1a:b8:6e:5d:9c:91:c9:f7:67:81:85:9d:
86:54:c3:a5:11:23:b1:22:8c:b2:ee:bb:92:d1:0a:
56:ab:ba:d1:c8:08:e9:de:92:dd:dd:95:77:26:0c:
94:2f:33:ad:16:7d:b4:a3:14:e4:23:b3:1f:29:48:
e1:26:1d:00:2c:0c:fb:24:d3:ce:8a:dd:d1:6f:cb:
82:29:0a:ae:af:e4:e6:56:97:c3:c6:f9:79:35:cc:
b9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0F:5D:FD:26:A1:EF:B2:9C:AA:51:3A:61:90:1F:92:4A:52:9F:22
X509v3 Authority Key Identifier:
keyid:2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:68:42:9c:ae:e1:1d:54:bf:e8:43:67:d0:5e:1e:22:58:ef:
89:f2:26:fa:cf:cc:b2:92:fd:4a:ac:94:29:15:7d:7e:8c:ce:
a4:d0:92:c6:df:9c:53:8e:c5:96:5b:7d:bb:e8:d2:00:e5:04:
7b:13:c2:98:58:cf:d7:d4:c7:69:29:5d:ac:51:e7:23:f2:95:
bf:aa:41:9c:4a:84:0e:8b:32:1f:bb:0f:fb:42:61:de:d8:04:
2d:47:1f:db:4f:db:7a:b9:d9:77:86:af:a6:34:95:0e:7e:39:
91:4c:b5:19:16:30:39:c4:2f:0a:23:a3:23:eb:f3:20:18:b2:
c3:27:df:e8:c4:73:75:96:9d:d1:be:ec:c7:d4:aa:c9:46:9a:
eb:43:97:20:65:e0:d0:b3:ae:c9:ec:16:a4:c6:d3:72:87:34:
9d:55:8c:9d:a4:a6:41:1c:be:d8:4e:0d:41:ae:35:69:7f:f2:
61:7f:07:38:b4:18:a8:a7:72:64:ee:b3:d7:f0:4c:e4:b4:fb:
f9:11:9f:ea:c1:1d:d0:c3:7d:cc:96:70:e2:9f:a2:07:02:44:
9c:00:d6:97:ff:b8:0f:f0:f6:60:70:ec:4f:d3:a6:fb:ce:70:
b1:f8:28:8d:f7:0d:b2:ca:62:7b:ee:0c:c5:d1:3b:99:3e:b7:
70:bc:68:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyzW0TCS8u9okpnjZGDw98IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMzVmNmE5ODU3ZDdiZTAyNjA3YTQ0ZDg5NTJhODhjYTRi
YTZkM2YwHhcNMjYwMzAzMTEwMDI4WhcNMjYwMzA0MTEwMDI4WjAzMTEwLwYDVQQD
Eyg0NjBmNWRmZDI2YTFlZmIyOWNhYTUxM2E2MTkwMWY5MjRhNTI5ZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw12rPA04zYEklXkyZ93FIHz3CPy/
Bvr2nWCVkNy2uI8SbmbIt+t6aiiAF94IVfmslD5SpV6gqnfFFG6oArDHNjqtHsxJ
/mRNe2kIoCn7TAUSp0zyvlRvh+0YDpGfq3OUqgVfXy1HZwH8ZLhse8xypHBtVjzO
fjeNGtyDHaZyNXpWzevU2ft3NAz6QMV9m51P8Axg6+sW2gpbajdTAzFF1TPQyerT
vbMauG5dnJHJ92eBhZ2GVMOlESOxIoyy7ruS0QpWq7rRyAjp3pLd3ZV3JgyULzOt
Fn20oxTkI7MfKUjhJh0ALAz7JNPOit3Rb8uCKQqur+TmVpfDxvl5Ncy5ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYPXf0moe+ynKpROmGQH5JKUp8iMB8GA1UdIwQY
MBaAFCs19qmFfXvgJgekTYlSqIykum0/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3pYMnFZVjllLUFtQjZSTmlWS29qS1M2YlQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81ODMxNWUtMzY2My00Y2ExLTlkZDEt
MjNhYzUxMzQzZGE1LzEvS3pYMnFZVjllLUFtQjZSTmlWS29qS1M2YlQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS81ODMxNWUtMzY2My00Y2ExLTlkZDEtMjNhYzUxMzQzZGE1
LzEvS3pYMnFZVjllLUFtQjZSTmlWS29qS1M2YlQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2hCnK7h
HVS/6ENn0F4eIljvifIm+s/MspL9SqyUKRV9fozOpNCSxt+cU47Fllt9u+jSAOUE
exPCmFjP19THaSldrFHnI/KVv6pBnEqEDosyH7sP+0Jh3tgELUcf20/bernZd4av
pjSVDn45kUy1GRYwOcQvCiOjI+vzIBiywyff6MRzdZad0b7sx9SqyUaa60OXIGXg
0LOuyewWpMbTcoc0nVWMnaSmQRy+2E4NQa41aX/yYX8HOLQYqKdyZO6z1/BM5LT7
+RGf6sEd0MN9zJZw4p+iBwJEnADWl/+4D/D2YHDsT9Om+85wsfgojfcNsspie+4M
xdE7mT63cLxofA==
-----END CERTIFICATE-----
Generated at Tue Mar 3 18:19:02 2026 by rpki-client