Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
File: KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft (raw, json)
Hash identifier: TEDKDm0UF6QgJ697rHkYsSyAQe6+QBVUhe51jMPKjTw=
Subject key identifier: 27:88:86:2E:25:54:A9:59:9D:D2:C7:AC:A0:07:DF:D4:CB:C4:AE:73
Authority key identifier: 29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
Certificate issuer: /CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Certificate serial: 019D3909C25F8DD00DD0468F714A598C5D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 10:00:34 +0000
Manifest this update: Sun 29 Mar 2026 10:00:34 +0000
Manifest next update: Mon 30 Mar 2026 10:00:34 +0000
Files and hashes: 1: D5K8QPUyMYfagYASYwL4lujklys.roa (hash: hyr6M3p6aHhLRaW47SkFIlt8kwLspMP/qCLs3ZNqvMQ=)
2: KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl (hash: QVHRke4HdscxH1BLh+yjoefhzaLumFCXppitgVuTZXw=)
3: c4MgsqHgRIS7A8j2sOY1tiFehV8.roa (hash: Rh8SPNOodShlWVhJWX+J1gXICJ+9LsUUZNtxoGFB9Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c2:5f:8d:d0:0d:d0:46:8f:71:4a:59:8c:5d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Validity
Not Before: Mar 29 10:00:34 2026 GMT
Not After : Mar 30 10:00:34 2026 GMT
Subject: CN=2788862e2554a9599dd2c7aca007dfd4cbc4ae73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e0:db:3d:94:db:17:3d:2e:38:95:29:cb:9f:
de:27:0b:e9:4c:81:d2:0e:cd:ee:d4:d9:2a:c4:a5:
b2:86:3e:aa:75:a6:13:c7:82:c6:d1:bd:59:03:88:
0f:ff:70:9e:62:c5:96:36:b4:3c:d7:ef:49:ca:30:
f8:19:40:23:67:20:51:d3:92:77:ef:d4:a6:6c:6e:
68:62:69:3c:24:4d:a2:7b:e9:6d:cc:4d:5b:00:9a:
e6:8b:8f:3a:2c:a5:ce:f0:f2:3e:e7:68:bd:5c:bf:
0f:eb:d0:17:11:77:d3:ad:12:40:4f:48:af:2b:9d:
f2:dd:67:42:91:17:ec:17:96:57:a1:55:f8:e7:b8:
15:dd:9e:41:26:30:22:b3:df:3d:dd:81:9e:88:c5:
c3:20:27:84:f2:c2:2e:a8:ef:72:b8:19:30:f5:99:
5a:93:f0:ac:85:40:b9:c7:b6:a5:51:1b:d1:6e:3f:
45:90:d1:47:87:c3:97:61:31:ca:e3:99:26:a7:93:
eb:3c:b5:92:00:99:12:a3:57:20:73:8f:6b:a3:0c:
5d:91:b4:1d:75:1b:82:02:bb:90:76:93:24:70:a2:
cb:fe:cf:6d:9b:4d:03:d0:a7:0f:a7:2c:78:b1:4b:
97:b9:3e:21:61:31:d4:15:63:c7:d3:33:a4:28:f9:
76:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:88:86:2E:25:54:A9:59:9D:D2:C7:AC:A0:07:DF:D4:CB:C4:AE:73
X509v3 Authority Key Identifier:
keyid:29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:22:92:84:46:37:bd:2b:b5:66:a7:56:25:ee:e3:c7:2d:ab:
a1:0c:57:6e:08:22:3f:18:80:98:25:19:32:6b:67:3d:5a:85:
00:aa:56:f4:b8:9d:49:bf:d6:69:d0:f9:e4:1f:8d:19:6e:5b:
7c:b9:a7:b8:17:a7:ec:45:0b:a4:35:b5:31:c0:f2:2a:b7:bb:
77:b9:b2:9a:66:bf:8d:7d:57:b4:09:90:d1:d5:08:ce:9c:29:
79:27:ec:21:36:be:09:05:94:05:31:7c:3f:bf:3c:8a:ba:09:
30:09:0c:46:1c:ca:3e:1e:94:41:3b:4c:bc:93:1f:48:e4:d1:
a1:c0:73:e1:b1:09:b3:ce:2a:35:4d:74:ce:57:4a:bf:68:a8:
7d:cf:d9:37:29:72:1f:37:2a:bd:6d:3f:9d:72:2c:56:01:d8:
ca:5d:4a:9b:53:58:c6:1f:71:14:e0:4f:66:d4:15:bb:50:6b:
7c:e9:ae:ce:62:a8:2e:94:de:c0:48:0f:ec:5d:38:7c:e4:a8:
a3:e9:e6:24:fe:b6:95:0b:b7:dd:65:97:c0:1b:fe:d6:9a:3a:
e9:fc:5f:14:3c:d2:cb:2e:eb:19:30:f6:9d:c7:40:c9:48:b4:
bb:6c:77:3b:7d:7b:b9:9c:56:68:6d:28:93:86:03:66:2d:43:
59:16:6e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:39 2026 by rpki-client