Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
File: kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft (raw, json)
Hash identifier: w/2qN4SzZifjCZ3TZrDGPTNvyNozs97FhySavd6/vC8=
Subject key identifier: FA:94:B0:1E:A2:C4:50:EE:B8:6D:80:21:31:D9:EB:6D:C1:6A:BD:34
Authority key identifier: 93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44
Certificate issuer: /CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44
Certificate serial: 019FA2CDD790637707ED5DEAEB4C0B3D957B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
Manifest number: 195F
Signing time: Mon 27 Jul 2026 09:00:26 +0000
Manifest this update: Mon 27 Jul 2026 09:00:26 +0000
Manifest next update: Tue 28 Jul 2026 09:00:26 +0000
Files and hashes: 1: kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl (hash: uKUmY2MZgGSqWYDGLltN570erPu6DuaKh1JpwcJErGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:cd:d7:90:63:77:07:ed:5d:ea:eb:4c:0b:3d:95:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44
Validity
Not Before: Jul 27 09:00:26 2026 GMT
Not After : Jul 28 09:00:26 2026 GMT
Subject: CN=fa94b01ea2c450eeb86d802131d9eb6dc16abd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b1:b5:ea:91:fd:d4:d1:ed:63:4f:c0:63:91:
13:97:36:60:24:be:e1:2b:20:9f:f4:18:68:24:24:
d1:4b:40:fa:36:a8:8c:4e:9d:15:2c:6b:d8:aa:75:
b3:3c:cd:a3:d6:34:5f:bf:62:85:c2:67:41:b1:57:
70:64:6e:79:40:3d:84:ea:aa:3d:bd:f0:cb:08:59:
c8:12:e8:2d:92:f9:25:7a:f0:81:50:ad:31:85:a1:
04:5d:d3:98:64:0d:fb:6d:1b:cb:9f:92:2e:5c:27:
34:1e:ed:6c:25:49:ff:1a:21:33:15:8f:31:91:ce:
68:c3:0d:2c:09:ae:bb:50:5b:78:2d:35:a7:1e:f5:
d9:06:b5:19:0e:00:2d:9f:77:9a:46:53:1c:11:1b:
20:24:88:fc:f3:3a:db:e1:5e:20:b9:dc:13:15:58:
72:d5:dd:73:73:e5:2c:e4:88:64:c3:e1:ac:94:af:
0b:64:0a:b6:df:49:c7:c4:1d:55:7a:2a:c0:e3:22:
14:29:ac:96:e4:77:83:04:f9:17:a3:ce:4f:92:fc:
ec:6f:61:0f:b4:ec:90:d3:86:48:62:c6:a8:76:44:
8e:0b:f3:b9:4c:83:9e:35:11:6e:ce:ef:e7:d2:b0:
af:4c:40:10:1d:22:96:e9:bd:cd:84:5c:4d:c8:67:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:94:B0:1E:A2:C4:50:EE:B8:6D:80:21:31:D9:EB:6D:C1:6A:BD:34
X509v3 Authority Key Identifier:
keyid:93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:3e:cf:6a:20:b0:1e:66:52:65:76:e5:6d:fd:25:43:cb:ec:
a9:25:41:c7:dd:2a:8d:8d:e3:9d:ec:74:c4:b1:da:3a:86:5a:
35:b7:f4:1a:01:33:a5:c5:1a:27:65:79:61:29:ea:8d:cc:2b:
5e:d2:86:17:55:cc:b6:1a:7f:06:2d:4a:69:46:7a:ad:2d:79:
6e:77:b3:59:11:a7:d9:a2:f3:07:34:79:7d:53:47:9d:f8:83:
35:38:68:ae:87:10:e0:d0:a6:6b:4a:dc:8a:50:03:25:60:b7:
7c:48:4f:2e:a1:f3:4f:ce:d3:8b:21:6f:59:93:da:e7:d3:80:
c3:ce:b6:a2:81:6d:06:0d:91:a2:11:43:1e:b5:c5:d4:5a:e9:
8e:50:95:2d:c5:9d:11:67:18:16:51:69:c1:75:0c:e5:d1:bd:
6f:bf:a3:c6:b3:6c:53:7f:0a:96:73:b8:c3:92:d7:5f:44:51:
92:d3:e8:7c:9e:db:c4:6c:e9:ae:9a:e1:a9:3e:04:7e:f6:05:
e5:8d:59:18:30:92:32:1c:28:a1:39:a9:3d:51:9c:c0:ed:8b:
91:81:a8:67:e9:95:d6:ed:e1:0a:34:ab:5b:de:87:8d:4d:9d:
f1:7d:30:43:04:33:64:bc:84:2a:d1:53:c1:eb:44:e8:72:d7:
ba:72:d4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:14:33 2026 by rpki-client