Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
File: KZWUToTcN7pqQtaLseK5pEIehKQ.mft (raw, json)
Hash identifier: DMBvQkbDFCYhGuZbQIVxPgAARrZi6uAm/jOSQnEVtVY=
Subject key identifier: 8A:FE:33:4B:D3:3F:9D:1B:84:83:19:87:D9:7E:88:0A:40:6E:66:2B
Authority key identifier: 29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
Certificate issuer: /CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Certificate serial: 01A0B6F74FBAB0F1C04EFBCC7A78A7FA1AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
Manifest number: 1A5E
Signing time: Sat 19 Sep 2026 00:00:56 +0000
Manifest this update: Sat 19 Sep 2026 00:00:56 +0000
Manifest next update: Sun 20 Sep 2026 00:00:56 +0000
Files and hashes: 1: KZWUToTcN7pqQtaLseK5pEIehKQ.crl (hash: 3Q7kZM7wv9l6BCqBnEouN3AKiJ2oWgA/L4D0zqKnWn8=)
2: REMIC3qlblupLlRlDy8YWtuHeGs.roa (hash: Jx2qxwn04q0eIKP0O31CsM6H6HSDWevmv7hr0SA1D6o=)
3: jqkc2v-EDfDqyX3RgGBk8W5KdEw.roa (hash: J6Uk//qcGJOT6wNTUI4e5Z8Vod7CmZ9RrMaWF9PPJeM=)
4: rrH1j10hPF7JqcYJAD3BPexcKzg.roa (hash: +IMZpUPrslETwFxcXPRLWmZpXfSU9RCOH9gP9Q/CH5w=)
5: y-cUmsyd1f2Nqa9AjFf-HrgBRvY.roa (hash: K08tIX67yafvJ07B2O/CtxAn2jeh7RiwSsp1rC6qb3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:f7:4f:ba:b0:f1:c0:4e:fb:cc:7a:78:a7:fa:1a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2995944e84dc37ba6a42d68bb1e2b9a4421e84a4
Validity
Not Before: Sep 19 00:00:56 2026 GMT
Not After : Sep 20 00:00:56 2026 GMT
Subject: CN=8afe334bd33f9d1b84831987d97e880a406e662b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cf:80:f2:fc:93:4a:4b:2a:d0:54:71:8b:6e:
ed:47:d4:99:db:67:35:a7:fc:89:0f:e3:54:e3:67:
6a:9b:d1:6f:dd:bd:6f:95:d0:a5:9a:19:e7:a1:eb:
47:43:76:94:10:44:7d:9e:ea:f1:4b:c1:41:a5:67:
21:ce:6f:86:8a:d0:1b:c4:d6:1e:ea:9f:f2:e6:46:
e4:42:d3:bf:b2:00:20:45:94:e9:8a:06:df:3b:92:
1f:50:5e:67:70:f2:f6:32:1e:a5:55:a0:51:2c:7d:
0a:19:14:a0:a0:2d:a0:69:fc:7b:aa:3b:a1:3d:77:
5f:c4:87:4a:f2:6b:49:46:2a:7b:d1:7f:e0:4d:60:
0d:8e:9f:cf:a6:f5:af:cd:e5:89:94:ce:88:5b:b0:
47:a1:5b:df:fc:82:56:f8:22:12:75:29:a4:64:56:
1a:ee:f1:9a:b3:d3:71:6d:6a:38:aa:86:af:b0:4f:
6b:88:ff:fb:4b:ef:87:49:43:0c:6a:66:2e:7b:fd:
45:39:99:81:9b:57:97:91:91:eb:23:94:ff:c2:2f:
07:a6:83:2a:3c:0b:f0:cf:3a:61:18:27:5d:c7:2d:
e4:d1:87:b2:33:be:b0:1f:8e:06:8a:67:67:5e:7f:
f4:c0:62:b6:f0:f7:0d:fb:d0:db:a7:34:25:6d:7d:
32:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FE:33:4B:D3:3F:9D:1B:84:83:19:87:D9:7E:88:0A:40:6E:66:2B
X509v3 Authority Key Identifier:
keyid:29:95:94:4E:84:DC:37:BA:6A:42:D6:8B:B1:E2:B9:A4:42:1E:84:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZWUToTcN7pqQtaLseK5pEIehKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a12069-a061-442e-9bfb-338bdd439ee1/1/KZWUToTcN7pqQtaLseK5pEIehKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cd:b3:a2:e6:f9:ec:7c:85:0c:b7:bc:af:8a:c5:ed:59:04:
e9:9d:8a:23:ce:3d:a9:40:91:3d:1e:45:43:74:4c:e2:46:09:
66:f6:eb:42:58:45:f5:37:0f:ef:7a:c7:46:e9:44:ad:1b:fc:
06:d8:96:05:66:5b:24:e4:02:24:7d:e4:50:42:29:4a:27:46:
8c:63:5b:96:53:a1:f1:9d:bd:19:35:2a:ac:7c:26:e4:d3:1a:
48:d6:54:6d:33:6d:7f:e2:20:f2:b1:87:1f:ec:6a:4b:9c:1d:
e1:fc:27:75:96:12:69:dd:d8:d2:96:5e:c2:f8:1a:c7:fb:95:
99:07:05:78:33:43:45:af:1c:03:5e:df:54:b4:b8:c7:d4:10:
29:59:9e:9e:8f:0e:59:fb:2f:b9:89:17:c1:5d:b8:ff:7e:6a:
9b:15:9a:b6:4d:a4:a0:70:82:9c:c1:9d:16:f1:bf:8b:78:77:
0c:49:fc:58:60:9a:11:a5:db:94:2c:d8:55:bd:db:5b:42:11:
b9:49:8a:f9:7f:67:b4:b8:be:72:b4:fb:bd:3c:b2:a3:e8:71:
c9:72:d8:e9:9f:af:e2:bc:58:7c:08:48:31:be:f6:e9:07:7f:
b1:1f:16:b6:53:df:d0:bd:2e:7e:75:23:3f:97:89:82:3f:a2:
a6:8c:f9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 08:08:22 2026 by rpki-client