Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
File: kziECSasc-rVthh5GeiPEAMimco.mft (raw, json)
Hash identifier: NOFLUAzm9677ARdk7bybQM8ecpu1A6rSaMwl3G6T5KI=
Subject key identifier: 2C:AF:E4:3B:8D:98:F8:99:A7:65:30:A5:33:2A:D3:9A:0A:61:29:9E
Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca
Certificate serial: 01A174DD824231BC939AEB051FE9D5036E43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
Manifest number: 03B7
Signing time: Sun 25 Oct 2026 21:00:36 +0000
Manifest this update: Sun 25 Oct 2026 21:00:36 +0000
Manifest next update: Mon 26 Oct 2026 21:00:36 +0000
Files and hashes: 1: 1-z0Y3fH_aErOAd2Nag5ZT3JcPH4.roa (hash: ajlsAWqEGjBF2s25AsAbzW/nKPdDq6JxNB0eWlyY3OU=)
2: 6lmykGrjWlxTI-Qm8cv1Wru-ZUM.roa (hash: 3/8y+29k2Z9zB5VeslI5T+W11/MyhEBGlF4ugyZh+nA=)
3: FcXUetsC0-6bv54Z1lmHoqKMdxM.roa (hash: dFkWAsnbwOvbQKILV1fPns+xMo4goiFme2jYhULRvHk=)
4: Y4x7zeztB7lrOx01OBJN1UiLyT0.roa (hash: gs7Dc5as7DJ7oLTov6hgPGgK6t+t5Pe4B5kRBUgM7WI=)
5: _SAMOxgv34T8ZP2BEt3dVFweldA.roa (hash: bU6RDLC/fFMgRKk4b1P2ryi1ytEL97qHkSA7liSJFY0=)
6: kJ0Vy0B72zssXC26u57KGbX2ct8.roa (hash: hSN+a59jsv0SWS/ZOD8c1cKgqSReXutR5ErlmyVzSmA=)
7: kziECSasc-rVthh5GeiPEAMimco.crl (hash: 78Y5RvbtPrQQ5aMP7x8Ym7B7SHlA7mnou9ADaGWEe1s=)
8: v6hmJMW3LdEeiIk2pUs40W0Igc0.asa (hash: G12/XDzxuGPxlLmYdatRM5nZUuVBUTD/yODTrcG9PnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:dd:82:42:31:bc:93:9a:eb:05:1f:e9:d5:03:6e:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca
Validity
Not Before: Oct 25 21:00:36 2026 GMT
Not After : Oct 26 21:00:36 2026 GMT
Subject: CN=2cafe43b8d98f899a76530a5332ad39a0a61299e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:85:c8:74:82:fd:6a:4f:68:65:27:f5:bf:
d6:c3:32:bf:57:d7:bd:40:84:8c:b9:44:c7:3f:c1:
8e:9f:1d:f6:38:31:5a:26:7d:d6:d6:5d:d8:d6:66:
0e:6e:38:96:76:f5:89:88:f1:df:b8:8d:48:87:f4:
b2:e2:48:63:3a:b2:47:81:58:96:7b:28:d7:ae:d5:
7d:f1:a9:19:cb:f4:e6:47:92:4c:34:3e:bd:34:94:
f6:18:02:f2:d1:ba:ba:bd:80:26:f1:d1:8e:6b:c5:
63:ed:8a:a5:25:2c:1a:aa:57:4e:74:38:92:91:02:
5d:6e:ad:28:ef:81:70:f4:df:30:39:ca:54:a0:10:
d3:b0:ac:28:ac:9a:bd:73:9d:06:0d:4c:77:d4:13:
cb:eb:a5:38:49:c0:21:a6:49:0b:95:a5:31:f3:69:
f3:97:ac:63:77:8b:fa:c3:ae:ff:82:9f:0c:72:e7:
d5:f5:a8:f3:dd:2a:e6:f9:18:4c:6b:fa:d9:bc:85:
01:4c:7e:62:02:8c:8f:44:0f:00:99:08:dc:82:98:
fe:29:60:9e:f3:11:1b:bb:e8:54:ef:8c:2b:37:b4:
ff:ce:f5:02:be:1f:6f:d4:85:fb:9a:7c:fd:8b:e0:
1a:0a:f6:21:5c:dd:11:3c:cb:39:83:1b:7c:c0:68:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:AF:E4:3B:8D:98:F8:99:A7:65:30:A5:33:2A:D3:9A:0A:61:29:9E
X509v3 Authority Key Identifier:
keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:c2:5a:ee:f8:fc:e5:1e:06:13:a6:59:03:33:2e:4c:60:42:
e1:84:ff:cd:8c:95:b0:7d:8c:0d:1c:cc:41:40:9f:e0:7b:f0:
2d:ad:ec:5d:06:4a:31:a1:ba:e5:da:55:8f:b6:1b:17:ff:28:
6d:47:58:03:c0:1f:ff:56:2e:26:7d:73:ac:9f:73:2a:0a:b0:
f7:ad:0a:2a:2f:12:4a:38:f8:f5:08:5e:b2:24:de:06:b7:00:
52:86:18:a1:5e:40:3c:49:14:4a:b0:90:8c:16:33:53:76:31:
3b:31:9d:df:eb:fe:3b:8f:37:96:fc:dc:62:4d:fc:8f:2a:cc:
ea:b1:9c:3d:41:91:38:9f:21:b1:fb:75:51:19:bb:47:bd:08:
92:b7:14:1c:32:4d:3b:56:54:f4:6a:d2:d2:1c:ba:51:e4:42:
29:66:e7:c2:13:6c:8a:ea:fa:91:bc:e3:ab:06:9d:fb:da:b2:
27:57:eb:f6:f8:44:a9:ae:0f:e4:2c:bb:f2:eb:75:a2:ac:ba:
75:9d:e7:e9:f0:97:fc:68:08:fd:1e:0a:72:68:3e:17:e3:f8:
b8:41:c6:2c:4f:26:f6:06:af:f0:ee:92:94:ed:3a:e6:e3:74:
bd:06:c3:e4:84:2a:77:4b:ce:35:5f:d2:ee:ec:54:f9:80:0d:
e9:12:21:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF03YJCMbyTmusFH+nVA25DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMzg4NDA5MjZhYzczZWFkNWI2MTg3OTE5ZTg4ZjEwMDMy
Mjk5Y2EwHhcNMjYxMDI1MjEwMDM2WhcNMjYxMDI2MjEwMDM2WjAzMTEwLwYDVQQD
EygyY2FmZTQzYjhkOThmODk5YTc2NTMwYTUzMzJhZDM5YTBhNjEyOTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVqFyHSC/WpPaGUn9b/WwzK/V9e9
QISMuUTHP8GOnx32ODFaJn3W1l3Y1mYObjiWdvWJiPHfuI1Ih/Sy4khjOrJHgViW
eyjXrtV98akZy/TmR5JMND69NJT2GALy0bq6vYAm8dGOa8Vj7YqlJSwaqldOdDiS
kQJdbq0o74Fw9N8wOcpUoBDTsKworJq9c50GDUx31BPL66U4ScAhpkkLlaUx82nz
l6xjd4v6w67/gp8McufV9ajz3Srm+RhMa/rZvIUBTH5iAoyPRA8AmQjcgpj+KWCe
8xEbu+hU74wrN7T/zvUCvh9v1IX7mnz9i+AaCvYhXN0RPMs5gxt8wGgeRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCyv5DuNmPiZp2UwpTMq05oKYSmeMB8GA1UdIwQY
MBaAFJM4hAkmrHPq1bYYeRnojxADIpnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUt
ZWE3YWU3MmJkMzJkLzEva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUtZWE3YWU3MmJkMzJk
LzEva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALcJa7vj8
5R4GE6ZZAzMuTGBC4YT/zYyVsH2MDRzMQUCf4HvwLa3sXQZKMaG65dpVj7YbF/8o
bUdYA8Af/1YuJn1zrJ9zKgqw960KKi8SSjj49QhesiTeBrcAUoYYoV5APEkUSrCQ
jBYzU3YxOzGd3+v+O483lvzcYk38jyrM6rGcPUGROJ8hsft1URm7R70IkrcUHDJN
O1ZU9GrS0hy6UeRCKWbnwhNsiur6kbzjqwad+9qyJ1fr9vhEqa4P5Cy78ut1oqy6
dZ3n6fCX/GgI/R4Kcmg+F+P4uEHGLE8m9gav8O6SlO065uN0vQbD5IQqd0vONV/S
7uxU+YAN6RIhNA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:26:57 2026 by rpki-client