Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
File: kziECSasc-rVthh5GeiPEAMimco.mft (raw, json)
Hash identifier: xWX0Ml3fqe/ncjhrP8d/n7hMrlnkdcyJbfAiK+0NuEA=
Subject key identifier: 77:62:15:46:CA:A9:7F:82:92:BB:BA:16:CB:B3:87:FB:DC:5E:4F:20
Authority key identifier: 93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
Certificate issuer: /CN=9338840926ac73ead5b6187919e88f10032299ca
Certificate serial: 01A085664727BAFCEE8B67BFF846890D37D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
Manifest number: 033B
Signing time: Wed 09 Sep 2026 09:01:07 +0000
Manifest this update: Wed 09 Sep 2026 09:01:07 +0000
Manifest next update: Thu 10 Sep 2026 09:01:07 +0000
Files and hashes: 1: 1-z0Y3fH_aErOAd2Nag5ZT3JcPH4.roa (hash: ajlsAWqEGjBF2s25AsAbzW/nKPdDq6JxNB0eWlyY3OU=)
2: 6lmykGrjWlxTI-Qm8cv1Wru-ZUM.roa (hash: 3/8y+29k2Z9zB5VeslI5T+W11/MyhEBGlF4ugyZh+nA=)
3: FcXUetsC0-6bv54Z1lmHoqKMdxM.roa (hash: dFkWAsnbwOvbQKILV1fPns+xMo4goiFme2jYhULRvHk=)
4: Y4x7zeztB7lrOx01OBJN1UiLyT0.roa (hash: gs7Dc5as7DJ7oLTov6hgPGgK6t+t5Pe4B5kRBUgM7WI=)
5: _SAMOxgv34T8ZP2BEt3dVFweldA.roa (hash: bU6RDLC/fFMgRKk4b1P2ryi1ytEL97qHkSA7liSJFY0=)
6: kJ0Vy0B72zssXC26u57KGbX2ct8.roa (hash: hSN+a59jsv0SWS/ZOD8c1cKgqSReXutR5ErlmyVzSmA=)
7: kziECSasc-rVthh5GeiPEAMimco.crl (hash: o/UBeFYVdA2kW9aFDfx4D58KS3m/GgP6rIFdWLqxqRY=)
8: v6hmJMW3LdEeiIk2pUs40W0Igc0.asa (hash: G12/XDzxuGPxlLmYdatRM5nZUuVBUTD/yODTrcG9PnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:66:47:27:ba:fc:ee:8b:67:bf:f8:46:89:0d:37:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9338840926ac73ead5b6187919e88f10032299ca
Validity
Not Before: Sep 9 09:01:07 2026 GMT
Not After : Sep 10 09:01:07 2026 GMT
Subject: CN=77621546caa97f8292bbba16cbb387fbdc5e4f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:38:06:e9:6e:c7:10:24:34:a3:1f:1c:42:4e:
df:40:88:b2:07:6d:a8:54:ae:0b:f1:b8:91:e7:c8:
e1:66:90:03:4d:da:4e:35:93:9a:66:78:27:4c:21:
64:82:08:bc:36:5c:4b:30:2b:db:b7:05:4a:b2:e4:
02:80:40:25:38:32:54:3e:e0:59:cf:31:fd:21:c4:
65:15:bd:24:31:46:af:2c:55:68:4d:fd:f7:46:9d:
92:39:35:46:60:67:97:2a:fa:3e:28:05:ef:d8:fc:
87:a7:16:7f:85:64:ab:ce:76:ea:48:f4:44:3f:5a:
87:29:c7:94:7f:d9:7d:69:bd:e1:87:4c:63:30:bd:
e3:7e:5f:13:ac:8b:e9:cb:d9:01:68:ef:62:47:a4:
a0:f9:ba:80:de:9b:e1:d7:eb:aa:06:c9:93:f7:f3:
f1:cc:c9:b4:6e:03:3e:ef:ff:2b:54:72:f4:fa:69:
af:f6:68:d8:2b:13:96:f6:54:f7:f9:8c:f6:69:9b:
cf:61:e6:d7:e0:e5:eb:d7:39:ed:fd:73:2d:5d:71:
b1:e4:5f:8f:01:44:b6:ac:4a:55:fa:78:31:2b:b9:
4c:5c:8b:a7:05:fd:67:de:a8:42:4f:e7:ea:63:61:
db:d1:dd:29:4b:f7:36:e5:b2:c3:91:85:9e:c1:5f:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:62:15:46:CA:A9:7F:82:92:BB:BA:16:CB:B3:87:FB:DC:5E:4F:20
X509v3 Authority Key Identifier:
keyid:93:38:84:09:26:AC:73:EA:D5:B6:18:79:19:E8:8F:10:03:22:99:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kziECSasc-rVthh5GeiPEAMimco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0bd4d3-d46c-483f-956e-ea7ae72bd32d/1/kziECSasc-rVthh5GeiPEAMimco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:41:93:df:e4:82:02:63:77:79:fa:91:d9:37:30:81:49:08:
33:3b:7f:6c:86:6e:b5:4a:65:4d:bc:b9:07:c3:a7:ba:98:8b:
75:11:3c:be:2e:51:d6:a7:04:60:ec:9e:de:56:8c:3b:c1:e6:
85:79:3f:2b:f7:31:16:18:d4:67:6e:25:f2:04:03:b7:36:66:
29:82:e4:4b:af:0a:f8:a3:08:f8:49:ab:18:cb:48:35:aa:0a:
ca:f9:d8:f5:13:a4:9e:08:88:a5:57:d2:5d:8a:f1:c1:e4:46:
37:d4:19:d3:21:dd:69:e7:7f:08:7a:89:32:bb:40:b7:96:ff:
c6:73:86:51:e6:2a:b3:61:3e:76:16:f8:0d:f8:7d:22:6d:18:
df:10:7e:34:aa:84:0c:fd:a1:af:5a:e7:85:15:0b:0f:50:f2:
d8:86:ad:73:1d:18:aa:74:39:aa:d4:c9:ab:44:53:68:27:49:
d2:09:05:99:48:d3:f1:a8:ec:9a:b1:40:e0:39:7f:d1:3c:70:
f1:bd:5b:80:b8:7b:2a:91:51:7c:be:d3:ac:69:c1:1e:94:c7:
c1:49:29:12:7a:dd:aa:99:38:29:c8:ac:b9:2c:c9:fd:5b:eb:
0a:41:2a:46:da:dc:f2:78:a8:c4:91:73:41:dd:36:4c:12:bb:
03:17:a1:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCFZkcnuvzui2e/+EaJDTfZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMzg4NDA5MjZhYzczZWFkNWI2MTg3OTE5ZTg4ZjEwMDMy
Mjk5Y2EwHhcNMjYwOTA5MDkwMTA3WhcNMjYwOTEwMDkwMTA3WjAzMTEwLwYDVQQD
Eyg3NzYyMTU0NmNhYTk3ZjgyOTJiYmJhMTZjYmIzODdmYmRjNWU0ZjIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzgG6W7HECQ0ox8cQk7fQIiyB22o
VK4L8biR58jhZpADTdpONZOaZngnTCFkggi8NlxLMCvbtwVKsuQCgEAlODJUPuBZ
zzH9IcRlFb0kMUavLFVoTf33Rp2SOTVGYGeXKvo+KAXv2PyHpxZ/hWSrznbqSPRE
P1qHKceUf9l9ab3hh0xjML3jfl8TrIvpy9kBaO9iR6Sg+bqA3pvh1+uqBsmT9/Px
zMm0bgM+7/8rVHL0+mmv9mjYKxOW9lT3+Yz2aZvPYebX4OXr1znt/XMtXXGx5F+P
AUS2rEpV+ngxK7lMXIunBf1n3qhCT+fqY2Hb0d0pS/c25bLDkYWewV8xvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdiFUbKqX+Ckru6Fsuzh/vcXk8gMB8GA1UdIwQY
MBaAFJM4hAkmrHPq1bYYeRnojxADIpnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUt
ZWE3YWU3MmJkMzJkLzEva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8wYmQ0ZDMtZDQ2Yy00ODNmLTk1NmUtZWE3YWU3MmJkMzJk
LzEva3ppRUNTYXNjLXJWdGhoNUdlaVBFQU1pbWNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkGT3+SC
AmN3efqR2TcwgUkIMzt/bIZutUplTby5B8OnupiLdRE8vi5R1qcEYOye3laMO8Hm
hXk/K/cxFhjUZ24l8gQDtzZmKYLkS68K+KMI+EmrGMtINaoKyvnY9ROkngiIpVfS
XYrxweRGN9QZ0yHdaed/CHqJMrtAt5b/xnOGUeYqs2E+dhb4Dfh9Im0Y3xB+NKqE
DP2hr1rnhRULD1Dy2Iatcx0YqnQ5qtTJq0RTaCdJ0gkFmUjT8ajsmrFA4Dl/0Txw
8b1bgLh7KpFRfL7TrGnBHpTHwUkpEnrdqpk4KcisuSzJ/VvrCkEqRtrc8nioxJFz
Qd02TBK7AxehHQ==
-----END CERTIFICATE-----
Generated at Wed Sep 9 16:37:34 2026 by rpki-client