Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: TOr40bXrspYWGXmv3SbxDPfv7T7QL3zJMEBi+LrTYy0=
Subject key identifier: AC:F0:91:C4:B9:80:02:06:27:6A:3F:E0:9E:3A:00:EC:AA:0B:4A:28
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 01A08B315873A3D12A378F976608BAD6A3C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 1A4F
Signing time: Thu 10 Sep 2026 12:01:01 +0000
Manifest this update: Thu 10 Sep 2026 12:01:01 +0000
Manifest next update: Fri 11 Sep 2026 12:01:01 +0000
Files and hashes: 1: FVFRIPh6vjxNZF9GmdKTzMvxW20.roa (hash: RxEPmyeQKw2S/n6YHyV1FFH2RRQ1FPtU6WCYyBI+QSs=)
2: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: f0LLx1OYr46r69yeWiKSkpLWdv9eNIx4bkdC/gmULzc=)
3: Ll4El4EPvQjU1m3_NGW31BoMNbs.roa (hash: aAbsXcXAi1Px9rBqFebnRpJI/7J+UKhx99NtmpOY4GQ=)
4: MlnC-jaRpZnIrgB8_eQnTAbVGTA.roa (hash: LraAiuo62bJSCi7FsjMWIePU6+pRqpeuBTDorfg6wzo=)
5: WVi_ybIpobHkUBuINJ5UAOJnWNI.roa (hash: 3fbJIuP8QMGU6Mp39Y5b/MTPHVVyptacQbOnxd8jif8=)
6: YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa (hash: gnWGWFdrNvGan6Zj654ovvMYwlS3b9SdtQbQJSYqz8w=)
7: cKL1r39FOEn9-Io6QM2GHDGad7Y.roa (hash: IVOj6G/Kxw/gIVSF+sBn1ShNhJ2a3NRvKy7Xif0pwjk=)
8: clfdiMu1i07BMzYCaMwkqCSWESQ.roa (hash: nPTdJ+2EENVzerbY85J3Hj4LaW3YuLFq8ExfSo1tXKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:58:73:a3:d1:2a:37:8f:97:66:08:ba:d6:a3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Sep 10 12:01:01 2026 GMT
Not After : Sep 11 12:01:01 2026 GMT
Subject: CN=acf091c4b9800206276a3fe09e3a00ecaa0b4a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8b:1d:36:2a:38:d2:41:52:e9:d4:bc:f2:ea:
da:c1:7a:37:fe:51:b8:f6:32:e5:c5:9d:3e:c8:d6:
9e:44:eb:4c:49:4f:26:ae:45:9b:94:92:9a:47:87:
ec:cb:40:21:6b:f4:70:34:ed:04:f7:e5:48:0e:a9:
56:7f:0a:89:37:27:b3:13:cd:f0:5d:4b:98:d0:db:
60:e9:1b:e0:1c:a6:05:b1:16:ba:75:1f:24:b6:b8:
12:26:a2:76:85:0f:e3:ec:a8:38:47:39:a1:4b:96:
6b:d8:85:d3:31:e6:be:3b:c4:55:7e:94:33:ef:56:
de:28:65:52:61:08:0d:3e:c7:25:0e:41:30:d1:73:
d9:98:2d:a6:3c:fd:14:12:a5:29:6e:31:5d:8b:c3:
4d:dd:9f:d5:70:01:2b:a4:7d:37:04:db:e2:5c:4f:
33:8c:49:36:ed:ab:e0:85:ba:9a:81:b4:01:59:2f:
a4:37:87:09:36:b3:72:72:0e:1f:1c:82:54:74:7c:
67:8f:7d:db:63:25:b1:e9:42:c5:d0:35:8d:7a:17:
e4:28:b7:b1:d3:f0:86:94:55:10:6d:87:46:69:13:
1a:59:d1:25:db:90:be:9a:a7:3f:5b:c1:2f:d9:b9:
e0:02:8e:5b:4d:89:f0:96:9f:c0:17:a6:0f:96:c6:
03:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F0:91:C4:B9:80:02:06:27:6A:3F:E0:9E:3A:00:EC:AA:0B:4A:28
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2a:92:0d:d3:61:ef:eb:28:4c:d2:cb:19:04:2a:44:eb:a5:
41:06:f5:26:11:90:e4:b7:b2:9b:8d:64:84:6f:2e:c3:5d:59:
95:f3:5d:fa:86:d5:29:a6:0f:80:62:3c:f2:1d:68:bb:be:c9:
b2:fb:10:72:b6:01:0f:ed:73:6b:4f:9c:41:f8:75:8b:d2:a0:
e5:37:f5:02:27:ed:ef:7e:2b:c7:40:3d:cc:de:bc:20:0a:bf:
a2:2b:04:99:e6:e1:28:b8:f3:f1:a0:0e:a1:95:e7:f8:0e:4a:
64:92:e4:90:c3:07:4d:cd:7f:cb:30:df:1f:11:c9:94:f0:86:
ba:55:8d:09:7d:3f:0a:24:c0:37:2c:de:e4:b7:8d:d4:b7:8c:
b6:a2:c3:d6:da:b7:32:8d:20:6b:a4:1c:0c:ce:2e:8d:53:18:
a3:00:62:be:c7:6f:a3:87:c0:8b:72:f1:43:4b:ea:a1:50:11:
53:90:d4:8b:c5:1d:81:4b:7d:04:cd:12:15:f2:8b:84:43:f6:
a1:f5:a0:47:cb:95:fb:d5:e5:60:33:8e:d8:74:f9:a9:e2:de:
35:2f:45:95:45:c1:5f:b6:65:14:76:48:e0:dd:99:b9:9a:8c:
de:39:cf:b6:ca:0e:11:b6:b2:6e:48:5a:3e:c6:be:e7:e0:7c:
fc:9d:7c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:32:38 2026 by rpki-client