Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
File: KzX2qYV9e-AmB6RNiVKojKS6bT8.mft (raw, json)
Hash identifier: YsD9cmslUMjZO3W6MHICHN8HOEqGqqqAA3JoNBh7Vms=
Subject key identifier: 25:3F:77:7A:26:12:02:A4:79:C7:53:EB:DC:DE:27:60:95:4D:18:22
Authority key identifier: 2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
Certificate issuer: /CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Certificate serial: 01A14D62AF4CFF9E6FAEC2AD75378C279A48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
Manifest number: 0299
Signing time: Sun 18 Oct 2026 05:01:15 +0000
Manifest this update: Sun 18 Oct 2026 05:01:15 +0000
Manifest next update: Mon 19 Oct 2026 05:01:15 +0000
Files and hashes: 1: KzX2qYV9e-AmB6RNiVKojKS6bT8.crl (hash: F3zmmnH/Hlayt0TarUgNvJzQQaxlOmo1Tng6lNNH3SQ=)
2: XRhRqov_VqyHRFFYOkd67TDUlfI.roa (hash: ML2iFZdBnrqeYBDgHkNF/6ovrR0UHPTGixgV/99EaNU=)
3: k424Nbk6SvvJjvOfKup0qsQXNRI.roa (hash: a50oRNVhCvCgBUG8ZaNohlcl3wba1rL6P6UcpuYYzJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:62:af:4c:ff:9e:6f:ae:c2:ad:75:37:8c:27:9a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b35f6a9857d7be02607a44d8952a88ca4ba6d3f
Validity
Not Before: Oct 18 05:01:15 2026 GMT
Not After : Oct 19 05:01:15 2026 GMT
Subject: CN=253f777a261202a479c753ebdcde2760954d1822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:eb:5a:12:cc:8f:7e:c7:e0:ac:99:0e:ec:2a:
a6:9d:7d:2b:b8:fe:8e:d7:5e:26:1d:9b:1e:a9:84:
c4:08:a1:d3:f2:4f:ae:e4:07:c9:92:85:e1:d0:bd:
21:68:2a:c5:8e:93:e7:86:d2:85:a9:59:06:0a:be:
07:49:83:cc:2f:2c:7d:90:ae:18:47:44:f1:08:cd:
73:e7:06:ae:0e:b2:61:b1:b0:7c:3e:0b:0a:0b:ed:
3f:7a:f2:02:61:c0:7e:ff:03:f3:b8:eb:e9:0c:07:
83:38:6f:ac:e0:70:45:a6:3a:2c:af:99:21:44:83:
7f:d4:6c:4f:08:37:ae:2f:3e:28:af:3b:d9:63:f9:
47:47:fe:4f:44:15:72:7a:ff:56:47:d4:48:8f:33:
4e:38:75:ac:77:b2:e8:a5:bc:3f:0f:ec:9d:8c:5c:
fe:6e:2a:96:04:51:96:fc:fb:75:6f:fe:55:f3:f0:
8c:36:93:0d:f2:db:37:b2:53:95:17:8b:ea:96:5a:
c4:bf:5a:69:57:fa:56:fb:32:99:50:c9:f5:a9:05:
43:a4:ee:10:b8:ad:82:6a:d9:bd:07:6c:76:df:20:
7a:bd:af:6b:a5:a6:c7:1e:fa:4f:6a:80:21:3b:f7:
5d:45:01:76:f4:ee:ab:8f:76:ac:e4:24:ad:e0:7f:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3F:77:7A:26:12:02:A4:79:C7:53:EB:DC:DE:27:60:95:4D:18:22
X509v3 Authority Key Identifier:
keyid:2B:35:F6:A9:85:7D:7B:E0:26:07:A4:4D:89:52:A8:8C:A4:BA:6D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KzX2qYV9e-AmB6RNiVKojKS6bT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/58315e-3663-4ca1-9dd1-23ac51343da5/1/KzX2qYV9e-AmB6RNiVKojKS6bT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a5:fc:63:46:45:72:b4:a8:3a:fa:62:99:80:8a:18:39:cb:
c3:f4:d3:3f:7e:cf:c8:88:e3:df:47:95:51:7f:3e:2b:bf:bb:
ef:96:cb:da:58:04:39:d5:c1:4d:0f:5e:68:89:17:94:f5:7b:
bd:2f:d3:5f:a8:db:11:7a:c6:78:c6:30:9b:26:dd:0f:f0:38:
fc:0d:0c:ce:28:6c:3a:07:2e:83:fe:6a:f1:c4:23:fe:77:0b:
1a:38:d5:51:8d:1b:2f:03:a1:1f:65:a6:c6:91:a0:e1:20:46:
0f:ff:01:b1:15:26:12:49:c1:3d:b6:58:a7:10:b2:c7:8c:ad:
e1:6a:20:41:64:66:a1:26:9c:0a:fd:80:83:88:01:ec:4c:39:
81:0f:8b:3f:09:89:ab:95:a1:59:b8:9e:0e:2e:10:03:23:c2:
78:16:06:65:27:e7:1a:b0:40:69:6f:ed:4a:c8:98:9e:87:3a:
d9:9e:44:06:e3:99:c0:da:db:6a:fd:ba:f5:d5:38:05:f0:7c:
48:22:ae:74:58:eb:fd:a1:c9:b3:8f:2e:50:88:fc:3b:14:3d:
5b:5b:a2:0b:6f:a8:96:26:61:04:35:43:0d:c9:df:93:aa:b8:
61:7d:cd:70:4f:14:14:2f:4c:06:4a:a8:a8:1e:33:17:7e:45:
3a:bb:54:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:43:47 2026 by rpki-client