Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
File: KzX2qYV9e-AmB6RNiVKojKS6bT8.mft (raw, json)
Hash identifier: VIfhyK79F+AS7WTrWGQlvaP7X+PufooYLK83cw7r8bo=
Subject key identifier: A0:34:E4:25:A4:29:17:7B:58:35:B8:5B:74:0D:7F:07:1C:3D:ED:5F
Authority key identifier: 2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
Certificate issuer: /CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Certificate serial: 019DA0E5204268175571D2357AAE4079637F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
Manifest number: B2
Signing time: Sat 18 Apr 2026 14:01:03 +0000
Manifest this update: Sat 18 Apr 2026 14:01:03 +0000
Manifest next update: Sun 19 Apr 2026 14:01:03 +0000
Files and hashes: 1: KzX2qYV9e-AmB6RNiVKojKS6bT8.crl (hash: l/glgTs93v/TdfEy7hVFpxAOeA6NBClAOI2m9FTtm7I=)
2: XRhRqov_VqyHRFFYOkd67TDUlfI.roa (hash: ML2iFZdBnrqeYBDgHkNF/6ovrR0UHPTGixgV/99EaNU=)
3: k424Nbk6SvvJjvOfKup0qsQXNRI.roa (hash: a50oRNVhCvCgBUG8ZaNohlcl3wba1rL6P6UcpuYYzJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a0:e5:20:42:68:17:55:71:d2:35:7a:ae:40:79:63:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Validity
Not Before: Apr 18 14:01:03 2026 GMT
Not After : Apr 19 14:01:03 2026 GMT
Subject: CN=a034e425a429177b5835b85b740d7f071c3ded5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:89:f0:0d:93:e2:4e:aa:15:70:d3:4a:25:eb:
3e:d8:f1:0c:4f:99:ec:70:c8:f8:72:8d:26:24:44:
1e:43:ce:d5:c8:c7:27:88:a9:42:18:f7:24:20:99:
4b:9b:a4:1b:94:c1:9a:d1:ff:dd:26:27:ba:09:70:
a7:4a:de:dc:29:59:fd:71:70:0e:70:92:96:d9:80:
b9:ec:98:40:2f:19:cd:34:52:51:64:5f:e8:03:b8:
61:f1:6b:3d:43:a4:75:25:46:51:d9:67:01:3d:c6:
eb:8d:93:22:d0:b3:22:cb:b6:af:62:f5:98:99:91:
d8:0f:07:ab:d1:9a:d9:bd:3f:d0:fb:05:e2:b1:06:
4e:b9:0f:b3:e0:7c:5c:38:74:a8:a3:a4:6d:3d:d2:
a8:f8:48:30:19:25:56:17:8d:35:af:9f:c2:6f:89:
10:b4:50:b2:a3:4a:25:e4:b8:cb:b5:f1:20:be:f8:
6f:d1:6e:0e:f9:46:74:11:fe:b4:0b:07:4b:20:cb:
ef:d7:0e:f0:3d:39:d0:ac:bc:f3:93:e9:25:36:9f:
a4:73:39:5a:a2:00:e9:a1:91:5c:b2:8d:f7:5e:c4:
b6:17:0d:ed:ca:29:7c:fc:03:77:c9:c9:2d:f1:95:
d1:8a:be:ba:e0:b9:e9:69:82:a7:43:8b:e9:0b:7a:
52:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:34:E4:25:A4:29:17:7B:58:35:B8:5B:74:0D:7F:07:1C:3D:ED:5F
X509v3 Authority Key Identifier:
keyid:2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:1f:3f:ac:ef:97:38:1f:34:6f:a6:64:0f:f6:85:ee:8f:d5:
d4:ee:04:e0:a1:dd:a3:a6:a8:12:ee:b3:6e:46:88:57:78:33:
76:f5:ac:e9:94:4e:93:db:cd:84:d6:26:68:11:1c:28:ec:9f:
8b:06:3c:49:9e:88:07:83:08:83:b8:37:cf:14:6c:b1:63:20:
09:dc:4f:ff:b7:84:92:a2:6b:7f:cd:2c:88:5f:ee:07:d3:c4:
8d:7b:b8:05:85:4a:88:1a:44:3f:07:2e:64:4c:cd:2a:6d:18:
28:0f:5c:b6:6c:9b:8e:cb:7e:a9:a5:c4:16:66:e5:1c:73:9b:
71:a6:22:94:6f:56:21:44:5b:24:77:bd:c3:d8:bf:a1:b8:4a:
de:e2:05:a6:9b:46:60:97:cf:28:25:6b:7c:fc:f5:47:16:c3:
06:ac:b1:c3:f2:02:79:9b:a1:f4:40:6f:d2:1d:c2:ad:96:54:
8e:ab:46:f9:ce:7d:c2:60:cf:b8:04:af:66:c5:54:67:07:df:
f6:cd:4f:03:11:54:9d:d8:b7:e5:bd:ea:fe:58:9c:08:5f:90:
2f:93:b6:52:48:cd:2d:43:3a:0b:ae:8b:2f:8c:68:90:0d:f5:
1c:50:78:0d:6d:45:4a:9e:46:04:29:b0:4d:b2:01:c9:00:e6:
58:bd:8b:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2g5SBCaBdVcdI1eq5AeWN/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMzVmNmE5ODU3ZDdiZTAyNjA3YTQ0ZDg5NTJhODhjYTRi
YTZkM2YwHhcNMjYwNDE4MTQwMTAzWhcNMjYwNDE5MTQwMTAzWjAzMTEwLwYDVQQD
EyhhMDM0ZTQyNWE0MjkxNzdiNTgzNWI4NWI3NDBkN2YwNzFjM2RlZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4InwDZPiTqoVcNNKJes+2PEMT5ns
cMj4co0mJEQeQ87VyMcniKlCGPckIJlLm6QblMGa0f/dJie6CXCnSt7cKVn9cXAO
cJKW2YC57JhALxnNNFJRZF/oA7hh8Ws9Q6R1JUZR2WcBPcbrjZMi0LMiy7avYvWY
mZHYDwer0ZrZvT/Q+wXisQZOuQ+z4HxcOHSoo6RtPdKo+EgwGSVWF401r5/Cb4kQ
tFCyo0ol5LjLtfEgvvhv0W4O+UZ0Ef60CwdLIMvv1w7wPTnQrLzzk+klNp+kczla
ogDpoZFcso33XsS2Fw3tyil8/AN3yckt8ZXRir664LnpaYKnQ4vpC3pSGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKA05CWkKRd7WDW4W3QNfwccPe1fMB8GA1UdIwQY
MBaAFCs19qmFfXvgJgekTYlSqIykum0/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3pYMnFZVjllLUFtQjZSTmlWS29qS1M2YlQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS81ODMxNWUtMzY2My00Y2ExLTlkZDEt
MjNhYzUxMzQzZGE1LzEvS3pYMnFZVjllLUFtQjZSTmlWS29qS1M2YlQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS81ODMxNWUtMzY2My00Y2ExLTlkZDEtMjNhYzUxMzQzZGE1
LzEvS3pYMnFZVjllLUFtQjZSTmlWS29qS1M2YlQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIh8/rO+X
OB80b6ZkD/aF7o/V1O4E4KHdo6aoEu6zbkaIV3gzdvWs6ZROk9vNhNYmaBEcKOyf
iwY8SZ6IB4MIg7g3zxRssWMgCdxP/7eEkqJrf80siF/uB9PEjXu4BYVKiBpEPwcu
ZEzNKm0YKA9ctmybjst+qaXEFmblHHObcaYilG9WIURbJHe9w9i/obhK3uIFpptG
YJfPKCVrfPz1RxbDBqyxw/ICeZuh9EBv0h3CrZZUjqtG+c59wmDPuASvZsVUZwff
9s1PAxFUndi35b3q/licCF+QL5O2UkjNLUM6C66LL4xokA31HFB4DW1FSp5GBCmw
TbIByQDmWL2LJw==
-----END CERTIFICATE-----
Generated at Sat Apr 18 18:32:12 2026 by rpki-client