Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/KziM2BJWh8KWwAXj_HWC8NLV9DA.mft
File: KziM2BJWh8KWwAXj_HWC8NLV9DA.mft (raw, json)
Hash identifier: ribzBT7QGT3HiZ+6y3y8FZWosIIGbeczV9ZApYnjey0=
Subject key identifier: 2B:4C:45:06:1D:F3:43:03:22:8B:58:44:AF:07:52:5C:22:A5:3A:1D
Authority key identifier: 2B:38:8C:D8:12:56:87:C2:96:C0:05:E3:FC:75:82:F0:D2:D5:F4:30
Certificate issuer: /CN=2b388cd8125687c296c005e3fc7582f0d2d5f430
Certificate serial: 019EB87CED36801263619B198EE64ED989CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KziM2BJWh8KWwAXj_HWC8NLV9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/KziM2BJWh8KWwAXj_HWC8NLV9DA.mft
Manifest number: 41
Signing time: Thu 11 Jun 2026 21:00:55 +0000
Manifest this update: Thu 11 Jun 2026 21:00:55 +0000
Manifest next update: Fri 12 Jun 2026 21:00:55 +0000
Files and hashes: 1: KziM2BJWh8KWwAXj_HWC8NLV9DA.crl (hash: T20jHzR58fFZViasY3IrhYTGLvn688LI9wukPDHDZjY=)
2: eWt51NtuPNvIS6HxDaX9L2BrBjA.roa (hash: 10KwVSGDSftJHeU/pZbCFDl2bTnuaPigGssxY4rv+DM=)
3: mtFg9dPPtnwsI_EE-_kCeNmzQj4.roa (hash: f4LSSvZ6n6eIi+W5zEhdojG9D8Eyn4TFAykK5EjC2a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/KziM2BJWh8KWwAXj_HWC8NLV9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/KziM2BJWh8KWwAXj_HWC8NLV9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KziM2BJWh8KWwAXj_HWC8NLV9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:ed:36:80:12:63:61:9b:19:8e:e6:4e:d9:89:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b388cd8125687c296c005e3fc7582f0d2d5f430
Validity
Not Before: Jun 11 21:00:55 2026 GMT
Not After : Jun 12 21:00:55 2026 GMT
Subject: CN=2b4c45061df34303228b5844af07525c22a53a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:89:41:3a:f4:a4:e0:af:8e:e6:6e:18:00:f6:
48:6c:25:65:7a:86:13:b9:16:e5:42:bd:da:1a:0a:
53:93:02:4a:29:aa:04:e3:b6:e0:24:38:4c:b1:32:
e2:e9:c0:b4:37:6a:37:3e:73:db:a9:f4:b8:7c:2d:
28:3e:bb:01:59:ba:37:53:7a:92:25:a9:10:8b:8f:
61:b4:26:88:f0:6e:fe:fc:d5:99:08:0f:58:ad:15:
80:68:86:63:3a:79:e7:cc:69:97:fd:69:2c:21:1a:
f5:2e:94:22:1b:15:7f:c7:4f:d0:21:86:06:4d:82:
eb:7c:07:a7:2a:e9:c7:1b:90:e8:28:78:51:6b:b7:
68:3b:1a:54:cc:21:fc:1f:86:43:a5:5f:4e:82:ba:
68:80:b8:5a:c0:08:18:5b:4f:77:74:34:9d:b2:c8:
6f:08:6a:93:29:7c:45:00:fd:d5:9d:2b:c0:c3:1e:
c8:46:33:74:29:48:e8:93:00:64:53:0c:40:c0:45:
ac:f6:77:68:38:4d:1d:f6:1c:1c:bc:a5:61:05:93:
97:6d:01:63:93:b4:a1:5f:41:7c:76:95:e4:e6:c9:
82:22:f0:4c:1b:db:bc:90:83:07:39:2e:e4:05:b7:
cd:36:0b:08:77:59:3e:3a:45:3d:d0:79:5e:d1:a2:
b8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:4C:45:06:1D:F3:43:03:22:8B:58:44:AF:07:52:5C:22:A5:3A:1D
X509v3 Authority Key Identifier:
keyid:2B:38:8C:D8:12:56:87:C2:96:C0:05:E3:FC:75:82:F0:D2:D5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KziM2BJWh8KWwAXj_HWC8NLV9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/KziM2BJWh8KWwAXj_HWC8NLV9DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7caf72-f042-4ef8-8339-eb360c418e53/1/KziM2BJWh8KWwAXj_HWC8NLV9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:09:bb:c3:e2:ad:6b:f7:d0:3d:0e:d9:67:f5:c9:42:76:99:
60:bf:69:cd:62:76:29:61:a6:23:a7:dc:ec:33:e2:2a:4e:38:
a2:85:c6:90:bf:de:e8:46:35:a3:25:df:07:f4:fe:75:6e:db:
13:de:1d:2a:8e:fe:c2:cf:46:e1:eb:5a:67:d9:4e:c0:d2:9b:
b3:5a:ee:9c:6e:66:cb:72:5c:0a:b6:7e:3c:87:48:c0:2a:8d:
40:77:90:11:30:18:8d:ed:d4:f8:1d:40:4b:47:dd:71:e3:6b:
59:d6:2e:00:50:fb:35:e7:a9:4f:d6:30:26:bd:b3:8c:35:9a:
74:b7:73:50:b0:eb:65:61:f4:f3:19:fe:ce:8d:a1:d2:bb:c4:
ef:9d:9b:58:46:9d:74:b7:a8:75:35:f4:81:66:98:91:5a:44:
d3:4a:a4:12:86:dd:9e:2e:a4:2d:44:8b:9a:f0:da:78:38:6f:
ef:1d:95:45:bb:59:9e:3b:4d:c5:bd:38:77:28:49:88:da:87:
1d:4d:10:3b:44:15:45:b1:0e:f6:69:17:63:fa:56:81:4b:ab:
af:a1:b9:ee:bd:80:b5:80:66:44:51:29:d2:c7:88:eb:67:22:
e1:64:4d:a6:69:2c:8a:65:92:8e:3a:15:b3:82:ea:df:3a:9d:
74:15:ef:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ64fO02gBJjYZsZjuZO2YnLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMzg4Y2Q4MTI1Njg3YzI5NmMwMDVlM2ZjNzU4MmYwZDJk
NWY0MzAwHhcNMjYwNjExMjEwMDU1WhcNMjYwNjEyMjEwMDU1WjAzMTEwLwYDVQQD
EygyYjRjNDUwNjFkZjM0MzAzMjI4YjU4NDRhZjA3NTI1YzIyYTUzYTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0olBOvSk4K+O5m4YAPZIbCVleoYT
uRblQr3aGgpTkwJKKaoE47bgJDhMsTLi6cC0N2o3PnPbqfS4fC0oPrsBWbo3U3qS
JakQi49htCaI8G7+/NWZCA9YrRWAaIZjOnnnzGmX/WksIRr1LpQiGxV/x0/QIYYG
TYLrfAenKunHG5DoKHhRa7doOxpUzCH8H4ZDpV9OgrpogLhawAgYW093dDSdsshv
CGqTKXxFAP3VnSvAwx7IRjN0KUjokwBkUwxAwEWs9ndoOE0d9hwcvKVhBZOXbQFj
k7ShX0F8dpXk5smCIvBMG9u8kIMHOS7kBbfNNgsId1k+OkU90Hle0aK4rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtMRQYd80MDIotYRK8HUlwipTodMB8GA1UdIwQY
MBaAFCs4jNgSVofClsAF4/x1gvDS1fQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3ppTTJCSldoOEtXd0FYal9IV0M4TkxWOURBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS83Y2FmNzItZjA0Mi00ZWY4LTgzMzkt
ZWIzNjBjNDE4ZTUzLzEvS3ppTTJCSldoOEtXd0FYal9IV0M4TkxWOURBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS83Y2FmNzItZjA0Mi00ZWY4LTgzMzktZWIzNjBjNDE4ZTUz
LzEvS3ppTTJCSldoOEtXd0FYal9IV0M4TkxWOURBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABwm7w+Kt
a/fQPQ7ZZ/XJQnaZYL9pzWJ2KWGmI6fc7DPiKk44ooXGkL/e6EY1oyXfB/T+dW7b
E94dKo7+ws9G4etaZ9lOwNKbs1runG5my3JcCrZ+PIdIwCqNQHeQETAYje3U+B1A
S0fdceNrWdYuAFD7NeepT9YwJr2zjDWadLdzULDrZWH08xn+zo2h0rvE752bWEad
dLeodTX0gWaYkVpE00qkEobdni6kLUSLmvDaeDhv7x2VRbtZnjtNxb04dyhJiNqH
HU0QO0QVRbEO9mkXY/pWgUurr6G57r2AtYBmRFEp0seI62ci4WRNpmksimWSjjoV
s4Lq3zqddBXviw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:28:33 2026 by rpki-client