Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
File: kziECSasc-rVthh5GeiPEAMimco.mft (raw, json)
Hash identifier: Bs4/0pYYobwMP58geb7XP9xkyhnnDJ7K2Tz8D3PrdIg=
Subject key identifier: CE:06:AD:10:B5:44:22:20:9E:4E:D2:DD:A8:6B:3A:E1:C5:AF:87:FB
Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca
Certificate serial: 019F9DA7E5FE23E37C43E89D1A35C08375B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
Manifest number: 02C3
Signing time: Sun 26 Jul 2026 09:00:53 +0000
Manifest this update: Sun 26 Jul 2026 09:00:53 +0000
Manifest next update: Mon 27 Jul 2026 09:00:53 +0000
Files and hashes: 1: 1-z0Y3fH_aErOAd2Nag5ZT3JcPH4.roa (hash: ajlsAWqEGjBF2s25AsAbzW/nKPdDq6JxNB0eWlyY3OU=)
2: 6lmykGrjWlxTI-Qm8cv1Wru-ZUM.roa (hash: 3/8y+29k2Z9zB5VeslI5T+W11/MyhEBGlF4ugyZh+nA=)
3: FcXUetsC0-6bv54Z1lmHoqKMdxM.roa (hash: dFkWAsnbwOvbQKILV1fPns+xMo4goiFme2jYhULRvHk=)
4: Y4x7zeztB7lrOx01OBJN1UiLyT0.roa (hash: gs7Dc5as7DJ7oLTov6hgPGgK6t+t5Pe4B5kRBUgM7WI=)
5: _SAMOxgv34T8ZP2BEt3dVFweldA.roa (hash: bU6RDLC/fFMgRKk4b1P2ryi1ytEL97qHkSA7liSJFY0=)
6: kJ0Vy0B72zssXC26u57KGbX2ct8.roa (hash: hSN+a59jsv0SWS/ZOD8c1cKgqSReXutR5ErlmyVzSmA=)
7: kziECSasc-rVthh5GeiPEAMimco.crl (hash: q89pOyXyMsvmXJPQU3u+L44ZPZrZONUSLeDAqPLwmGI=)
8: v6hmJMW3LdEeiIk2pUs40W0Igc0.asa (hash: G12/XDzxuGPxlLmYdatRM5nZUuVBUTD/yODTrcG9PnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:a7:e5:fe:23:e3:7c:43:e8:9d:1a:35:c0:83:75:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca
Validity
Not Before: Jul 26 09:00:53 2026 GMT
Not After : Jul 27 09:00:53 2026 GMT
Subject: CN=ce06ad10b54422209e4ed2dda86b3ae1c5af87fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:87:25:1d:ff:ff:5d:5f:69:1d:16:e0:9e:
bf:75:df:1b:5f:7e:e7:a9:43:6a:a5:7d:83:d1:80:
1f:ab:3e:c5:46:08:89:ca:09:7c:d9:87:04:6a:fe:
3a:c1:11:c0:57:77:1a:f7:9d:59:85:61:75:f1:31:
4d:9b:42:e4:74:13:f6:f8:23:b1:38:d5:0d:ae:f0:
f3:a1:b9:29:cc:9f:6c:1d:66:3d:a7:1c:70:49:0f:
10:23:65:8b:01:88:29:73:62:52:f5:94:97:91:88:
99:ba:4c:6b:86:9c:3a:7d:75:1e:09:ae:c6:5a:90:
08:1d:53:19:43:95:29:ef:74:bd:b7:87:3d:bf:35:
fd:4b:9e:b8:9c:48:79:f9:cf:67:52:28:b6:5d:99:
62:f0:c5:cb:e4:97:66:ed:d2:b5:cc:7f:03:1f:ea:
4d:e8:a0:dc:ea:03:a1:20:5c:c8:0f:24:ef:ad:87:
c5:70:da:68:35:6b:c5:53:46:5d:6b:e3:45:96:43:
a0:51:db:08:7d:26:7e:9b:e6:fa:d4:99:6a:33:93:
92:f3:de:9b:a0:6d:8a:46:c2:a8:14:3d:57:ca:1e:
5b:ad:6a:0b:62:f0:c4:73:de:73:d0:84:80:e6:2d:
b7:6f:2c:1e:c7:b1:91:2a:83:15:23:df:52:07:7c:
c5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:06:AD:10:B5:44:22:20:9E:4E:D2:DD:A8:6B:3A:E1:C5:AF:87:FB
X509v3 Authority Key Identifier:
keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:99:8c:ac:e0:7b:be:7f:2a:54:45:39:54:55:df:7e:db:56:
8f:86:31:66:eb:d7:05:42:ec:a1:c6:d0:d2:1a:ad:77:4c:aa:
2c:09:6c:a9:47:12:98:d2:9a:b7:cf:36:7a:5b:1c:62:00:18:
d5:11:25:b8:5f:de:f5:91:73:33:4d:3c:4a:3b:db:f8:43:e0:
5b:01:06:0f:16:48:58:5a:ed:9b:d2:46:60:ed:91:ca:0a:21:
1e:59:78:b2:c7:89:41:e2:a4:b8:c9:da:96:8f:24:51:cb:55:
55:71:05:5d:a3:a7:98:d0:68:14:f1:45:5c:3b:b6:98:b3:1b:
e0:11:27:e6:19:6d:5f:d6:b1:c7:f3:f2:90:6c:03:ed:1e:fe:
ca:3b:6b:96:42:78:e0:30:9e:77:07:e9:fb:85:08:5a:ed:06:
30:fa:19:f9:44:28:e8:fe:32:f3:06:b0:1e:58:65:60:4a:78:
e7:aa:41:ea:f2:12:0f:7b:9b:4f:16:52:57:70:4e:28:a2:fa:
dc:03:db:e1:c2:7c:a3:37:80:f6:a1:26:80:96:62:64:09:be:
49:9e:e1:7e:0d:f0:38:03:c5:af:9d:90:fd:da:98:05:b4:29:
c4:d9:e4:09:0a:68:04:63:df:96:46:84:6f:32:68:25:e6:f0:
d8:78:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:50:11 2026 by rpki-client