Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: dOY3YF1uSZhutBhkwl/qgQ08wWxDBTkHznuQXW/VwTE=
Subject key identifier: 07:36:88:70:F3:D6:7A:94:5A:73:A6:87:C5:E4:23:26:E3:13:C5:8B
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 019F9F95CC0AE983DEC7B964E6061D63090A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 19D5
Signing time: Sun 26 Jul 2026 18:00:22 +0000
Manifest this update: Sun 26 Jul 2026 18:00:22 +0000
Manifest next update: Mon 27 Jul 2026 18:00:22 +0000
Files and hashes: 1: FVFRIPh6vjxNZF9GmdKTzMvxW20.roa (hash: RxEPmyeQKw2S/n6YHyV1FFH2RRQ1FPtU6WCYyBI+QSs=)
2: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: qzCq6ZMUOVkQM5I/nM/J945Lu779/KRKWqqkxUaT0Us=)
3: Ll4El4EPvQjU1m3_NGW31BoMNbs.roa (hash: aAbsXcXAi1Px9rBqFebnRpJI/7J+UKhx99NtmpOY4GQ=)
4: MlnC-jaRpZnIrgB8_eQnTAbVGTA.roa (hash: LraAiuo62bJSCi7FsjMWIePU6+pRqpeuBTDorfg6wzo=)
5: WVi_ybIpobHkUBuINJ5UAOJnWNI.roa (hash: 3fbJIuP8QMGU6Mp39Y5b/MTPHVVyptacQbOnxd8jif8=)
6: YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa (hash: gnWGWFdrNvGan6Zj654ovvMYwlS3b9SdtQbQJSYqz8w=)
7: cKL1r39FOEn9-Io6QM2GHDGad7Y.roa (hash: IVOj6G/Kxw/gIVSF+sBn1ShNhJ2a3NRvKy7Xif0pwjk=)
8: clfdiMu1i07BMzYCaMwkqCSWESQ.roa (hash: nPTdJ+2EENVzerbY85J3Hj4LaW3YuLFq8ExfSo1tXKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:95:cc:0a:e9:83:de:c7:b9:64:e6:06:1d:63:09:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Jul 26 18:00:22 2026 GMT
Not After : Jul 27 18:00:22 2026 GMT
Subject: CN=07368870f3d67a945a73a687c5e42326e313c58b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:db:55:2d:b1:85:79:05:05:d2:20:50:01:
8d:2b:43:76:7d:87:09:5d:5d:6e:7d:18:16:f6:68:
f2:bf:fe:02:77:2b:93:ac:4d:f5:97:20:8a:9d:47:
c0:5b:fa:2b:4b:c2:dd:9c:25:a1:ec:86:55:af:c3:
f6:c7:07:17:1a:8f:37:7c:62:23:b3:1c:24:29:31:
b6:a9:99:fe:62:cd:79:5e:34:cb:e5:f3:02:50:a5:
42:ad:5a:54:f5:a9:16:4a:de:0b:da:c3:09:75:6b:
0a:92:e5:29:93:d8:05:55:de:cb:ff:a1:dd:97:45:
f7:b8:04:e7:a7:a7:11:4e:7b:eb:ae:4f:1a:15:c7:
40:db:64:79:61:1d:a2:bb:e1:1d:6a:a2:d3:8e:bc:
9d:28:3e:ad:f0:aa:55:4b:1f:9d:af:99:c9:59:aa:
d2:6d:b9:a3:e7:16:db:48:40:0b:ea:94:89:d5:d9:
15:6d:66:0d:42:b6:68:6b:bb:ef:10:98:d7:5b:90:
5f:c8:c2:55:81:fe:6a:bf:fa:1a:4c:8c:8e:d2:72:
13:ec:6a:a2:99:a0:5c:fe:f0:fb:89:e8:0d:d3:b7:
7b:6c:50:1e:f5:0d:07:da:ff:24:5b:84:1b:72:ff:
c7:99:e5:3b:83:b8:45:d9:2c:fc:fa:0f:93:39:37:
da:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:36:88:70:F3:D6:7A:94:5A:73:A6:87:C5:E4:23:26:E3:13:C5:8B
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ca:6a:13:87:ed:23:77:48:8b:89:5d:10:d6:38:70:d3:8a:
04:ee:f6:dc:75:7b:97:fe:69:94:23:06:29:f8:87:2d:80:34:
0b:19:ee:ff:0d:1c:7d:6a:3c:4a:89:35:49:36:37:cf:85:07:
44:e4:c0:ca:2b:26:56:42:e4:1b:91:f7:29:b7:bd:8d:ae:02:
80:69:ea:65:9a:f2:11:57:94:f5:65:bb:64:1c:9d:e6:e2:3e:
d4:98:be:e7:be:87:d5:0e:9e:72:7f:52:58:d1:19:a7:df:39:
20:11:f1:14:a6:15:82:63:73:f9:d2:f7:b4:2d:64:c7:2f:d9:
9e:92:b3:9d:97:22:ec:d5:e3:0f:1b:6a:27:4a:c2:cf:14:5b:
1a:a3:0b:d7:f9:9b:df:ed:24:ad:ea:13:2d:b9:41:a4:c8:94:
71:b6:7a:de:f7:f3:05:09:17:d3:f1:54:e5:49:9f:13:09:6f:
bc:5b:d1:cd:bf:dc:d3:b6:7d:5c:dc:ec:e5:5b:58:b9:79:54:
d8:da:cb:ad:01:09:5f:8a:2d:96:5c:24:91:91:9a:1b:08:91:
90:ce:44:87:e9:0d:d7:6c:74:18:82:7f:39:e4:5c:45:84:c8:
55:b4:1d:0f:35:ef:79:38:87:08:f7:b2:36:92:f5:13:09:c8:
26:44:81:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:14:12 2026 by rpki-client