Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
File: kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft (raw, json)
Hash identifier: qqVdUep41QYm2igVgjKcusE6eXr6XFbpDSZuxFsR/Kc=
Subject key identifier: 94:02:46:85:0A:0E:21:8C:4B:5F:F1:0B:9C:4B:E0:B9:93:A2:BB:4C
Authority key identifier: 93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44
Certificate issuer: /CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44
Certificate serial: 01A08A8C08DB3F835B2EFEB032F34A353E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
Manifest number: 19D7
Signing time: Thu 10 Sep 2026 09:00:28 +0000
Manifest this update: Thu 10 Sep 2026 09:00:28 +0000
Manifest next update: Fri 11 Sep 2026 09:00:28 +0000
Files and hashes: 1: kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl (hash: 9MTd+Pv0j4UoUhSeInxYXaokn9KXfnq+v6aBbDBC2gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:08:db:3f:83:5b:2e:fe:b0:32:f3:4a:35:3e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44
Validity
Not Before: Sep 10 09:00:28 2026 GMT
Not After : Sep 11 09:00:28 2026 GMT
Subject: CN=940246850a0e218c4b5ff10b9c4be0b993a2bb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2f:39:a4:26:c4:57:27:75:4a:91:f1:78:6e:
80:cb:de:41:01:54:a8:05:dc:d8:00:52:f3:6c:71:
c1:ed:3d:b2:85:11:d9:a4:ed:af:50:60:d0:0e:bc:
fb:95:69:24:d6:04:d2:cf:76:e9:96:71:50:cd:6f:
b6:23:7d:09:61:02:94:66:0b:5d:af:dd:d9:fb:dc:
07:80:9e:2e:36:47:01:f2:71:9b:fa:1f:52:85:25:
1b:88:3b:80:0a:f4:a1:b6:b2:5f:d3:73:e7:ab:bb:
bb:76:18:1c:68:e5:68:b1:c3:40:cf:e5:40:31:2a:
22:86:74:39:14:7a:6d:9a:6d:6b:7a:cd:d2:aa:ed:
d6:a2:05:a3:52:a9:41:69:c8:99:a2:5b:56:bb:c8:
c7:56:06:e7:8f:74:8a:e6:28:9d:1c:ff:0a:b7:97:
4f:00:50:11:c6:d2:4b:00:e6:fa:33:a1:e7:fe:f2:
63:77:10:f0:6d:67:06:2c:c8:d1:ea:52:a9:98:0c:
35:f6:0d:ff:d7:08:84:28:b6:02:7b:be:62:d4:f9:
a9:22:b6:10:d4:ec:b0:79:9a:d8:f4:e3:6a:34:63:
5d:87:d9:b0:0d:76:91:7d:f5:3d:04:da:cc:e3:42:
1a:47:27:a6:1d:d3:0d:8b:94:c6:65:9a:75:79:ce:
c0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:02:46:85:0A:0E:21:8C:4B:5F:F1:0B:9C:4B:E0:B9:93:A2:BB:4C
X509v3 Authority Key Identifier:
keyid:93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:e2:50:ea:e7:10:3f:07:b8:89:63:2c:4e:84:bd:ec:f8:c1:
67:d6:a8:27:b4:9d:db:a9:a0:10:27:c9:88:dd:9f:37:23:0a:
b9:5c:2d:b0:4c:ed:36:d3:bb:b8:6d:33:42:5f:05:ec:cd:59:
5c:9d:e2:b5:90:1a:4c:0b:87:4b:99:46:a9:cf:b2:ed:c2:8c:
3f:20:8f:6b:8d:88:92:0b:9d:16:b0:88:5a:6e:c1:96:6e:79:
c0:cb:71:c3:43:6b:5f:20:3a:74:4a:85:5e:53:97:b7:70:20:
2a:95:6b:68:85:0b:06:8d:20:cd:24:35:bf:73:cc:b5:fa:36:
e3:a4:6a:cb:db:6d:55:d7:9c:8e:72:cd:93:97:41:2c:db:46:
b7:a2:9f:34:28:ee:b7:c4:13:fd:66:10:d1:35:45:69:f6:f6:
e8:80:10:9d:5a:86:63:9f:7d:ba:12:f6:28:b9:d3:24:f3:5e:
d0:ab:de:76:0a:ee:0e:6b:45:c3:63:3b:4a:90:b3:d9:0f:6f:
94:2b:b1:44:8c:04:37:7e:31:b5:71:23:45:d8:83:3d:c0:8d:
e5:9b:19:af:96:4b:1a:55:09:f9:59:fd:4e:f0:a5:c4:93:6c:
5b:82:f9:69:34:67:e0:e9:02:38:9e:03:fb:0b:dc:a4:39:ce:
e5:c5:02:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:22:59 2026 by rpki-client