Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
File: KzX2qYV9e-AmB6RNiVKojKS6bT8.mft (raw, json)
Hash identifier: 3BVeSvPbGJX82+/t8tS+08OxcMkq8RLRCN31zppPc/g=
Subject key identifier: 76:C9:93:D8:5C:88:A1:B2:2D:99:9C:8F:96:40:88:A6:39:87:E0:12
Authority key identifier: 2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
Certificate issuer: /CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Certificate serial: 01A05A0DBB5553A159146A13898D6A29DCB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
Manifest number: 021B
Signing time: Mon 31 Aug 2026 23:00:44 +0000
Manifest this update: Mon 31 Aug 2026 23:00:44 +0000
Manifest next update: Tue 01 Sep 2026 23:00:44 +0000
Files and hashes: 1: KzX2qYV9e-AmB6RNiVKojKS6bT8.crl (hash: Y2Qj9y/aRS/rT1Ttdo1fPATbxfuSYwJ6gxigLCpT1/Y=)
2: XRhRqov_VqyHRFFYOkd67TDUlfI.roa (hash: ML2iFZdBnrqeYBDgHkNF/6ovrR0UHPTGixgV/99EaNU=)
3: k424Nbk6SvvJjvOfKup0qsQXNRI.roa (hash: a50oRNVhCvCgBUG8ZaNohlcl3wba1rL6P6UcpuYYzJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:0d:bb:55:53:a1:59:14:6a:13:89:8d:6a:29:dc:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Validity
Not Before: Aug 31 23:00:44 2026 GMT
Not After : Sep 1 23:00:44 2026 GMT
Subject: CN=76c993d85c88a1b22d999c8f964088a63987e012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5c:03:a9:ad:5a:45:44:2b:1f:3b:d5:b2:79:
bc:a4:a1:c4:29:d1:42:eb:bc:8e:22:1b:65:cc:62:
0d:1f:fc:f2:99:39:0a:bf:c3:39:33:71:dd:a1:56:
7e:ab:c1:4c:c0:f7:0f:ca:1c:71:ce:62:4f:77:7a:
e9:9b:ae:0c:fb:75:96:17:cc:c2:62:fa:31:c7:f1:
84:43:e5:4e:d9:46:f0:fd:62:40:87:a8:40:09:b5:
71:6d:52:5a:86:b5:42:34:c9:5b:c8:44:de:0f:6f:
a9:3e:ab:31:56:c9:b2:1d:61:67:9b:d0:04:0a:6b:
c1:2d:6c:fe:7b:dc:af:fe:e8:35:c1:ed:2d:f7:8d:
aa:82:5b:7f:13:1a:2f:b2:7c:13:5e:c7:3e:1d:f7:
7d:74:52:37:49:c9:84:84:75:43:01:94:c3:97:38:
40:d9:e1:63:69:91:10:d4:86:87:d2:e9:a3:bb:4e:
e8:1e:37:ab:15:3e:ed:97:56:1d:05:4e:e9:bf:7e:
e4:42:a2:ad:32:a3:1a:26:84:7a:35:47:b5:d6:8f:
89:30:f4:78:23:8a:6b:ab:6d:50:83:c6:49:af:16:
f2:11:90:74:9a:14:86:08:e4:73:03:66:81:4b:98:
ae:e8:ee:13:73:0a:c5:3e:04:89:08:9d:51:24:28:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C9:93:D8:5C:88:A1:B2:2D:99:9C:8F:96:40:88:A6:39:87:E0:12
X509v3 Authority Key Identifier:
keyid:2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:6b:e9:01:58:ea:4c:ec:bc:45:3b:e3:b7:ab:82:71:c5:75:
a0:fa:d6:2b:ff:9b:a6:cd:25:62:36:34:8a:0b:e8:67:f5:cd:
0c:b6:1d:32:c4:21:a3:b7:36:5c:0f:86:b7:7a:f0:53:9f:6b:
0f:60:1d:ca:5b:f6:51:94:97:f6:2a:b8:22:20:fd:a3:61:fe:
47:2b:e9:cf:0b:aa:b2:2d:20:dc:a4:66:dc:5b:90:28:0a:27:
49:15:ad:f7:d0:57:de:bd:3c:53:07:6d:3e:10:52:45:bc:2d:
e4:14:26:e2:18:cb:c1:89:33:a0:bf:20:80:9a:60:dd:31:0b:
65:fb:bb:f9:f8:66:a2:fb:9e:91:4e:82:0e:26:88:bd:ff:a6:
e9:6d:f1:6d:61:c7:e9:82:6c:a4:4c:89:71:2e:49:d5:02:ae:
fb:db:3b:e8:6f:1f:e4:37:b2:65:3b:55:bb:a1:5d:13:7a:07:
92:4a:ce:bb:56:d2:ab:5f:ee:76:7d:01:aa:e7:d0:fa:50:9c:
07:6a:af:01:1b:3f:96:c1:9a:b6:74:ad:ce:d8:c8:55:ef:6a:
d0:2f:27:6f:64:28:39:0e:77:34:e2:37:0c:6d:fa:36:73:fd:
fc:bb:3e:e7:6e:75:ea:78:12:17:fa:21:a8:d3:76:e5:ce:d5:
1a:eb:8a:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBaDbtVU6FZFGoTiY1qKdy5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMzVmNmE5ODU3ZDdiZTAyNjA3YTQ0ZDg5NTJhODhjYTRi
YTZkM2YwHhcNMjYwODMxMjMwMDQ0WhcNMjYwOTAxMjMwMDQ0WjAzMTEwLwYDVQQD
Eyg3NmM5OTNkODVjODhhMWIyMmQ5OTljOGY5NjQwODhhNjM5ODdlMDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVwDqa1aRUQrHzvVsnm8pKHEKdFC
67yOIhtlzGINH/zymTkKv8M5M3HdoVZ+q8FMwPcPyhxxzmJPd3rpm64M+3WWF8zC
Yvoxx/GEQ+VO2Ubw/WJAh6hACbVxbVJahrVCNMlbyETeD2+pPqsxVsmyHWFnm9AE
CmvBLWz+e9yv/ug1we0t942qglt/ExovsnwTXsc+Hfd9dFI3ScmEhHVDAZTDlzhA
2eFjaZEQ1IaH0umju07oHjerFT7tl1YdBU7pv37kQqKtMqMaJoR6NUe11o+JMPR4
I4prq21Qg8ZJrxbyEZB0mhSGCORzA2aBS5iu6O4TcwrFPgSJCJ1RJChkKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHbJk9hciKGyLZmcj5ZAiKY5h+ASMB8GA1UdIwQY
MBaAFCs19qmFfXvgJgekTYlSqIykum0/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3pYMnFZVjllLUFtQjZSTmlWS29qS1M2YlQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81ODMxNWUtMzY2My00Y2ExLTlkZDEt
MjNhYzUxMzQzZGE1LzEvS3pYMnFZVjllLUFtQjZSTmlWS29qS1M2YlQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS81ODMxNWUtMzY2My00Y2ExLTlkZDEtMjNhYzUxMzQzZGE1
LzEvS3pYMnFZVjllLUFtQjZSTmlWS29qS1M2YlQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdmvpAVjq
TOy8RTvjt6uCccV1oPrWK/+bps0lYjY0igvoZ/XNDLYdMsQho7c2XA+Gt3rwU59r
D2Adylv2UZSX9iq4IiD9o2H+Ryvpzwuqsi0g3KRm3FuQKAonSRWt99BX3r08Uwdt
PhBSRbwt5BQm4hjLwYkzoL8ggJpg3TELZfu7+fhmovuekU6CDiaIvf+m6W3xbWHH
6YJspEyJcS5J1QKu+9s76G8f5DeyZTtVu6FdE3oHkkrOu1bSq1/udn0BqufQ+lCc
B2qvARs/lsGatnStztjIVe9q0C8nb2QoOQ53NOI3DG36NnP9/Ls+52516ngSF/oh
qNN25c7VGuuKOQ==
-----END CERTIFICATE-----
Generated at Tue Sep 1 04:42:02 2026 by rpki-client