Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: MomdYiO9cYLUr/1olmy+IuWi/1tAX88n/SJdhtMGmQw=
Subject key identifier: 5B:D1:8F:4A:BF:C5:50:4C:3C:18:C0:95:05:8D:67:B9:5E:17:34:AC
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 01A177A7417657227B0E0D1ACE1BA09492A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 1ACA
Signing time: Mon 26 Oct 2026 10:00:12 +0000
Manifest this update: Mon 26 Oct 2026 10:00:12 +0000
Manifest next update: Tue 27 Oct 2026 10:00:12 +0000
Files and hashes: 1: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: FFTUiycem7BJO+GIQRGOqruDY9iE4lKOA9dsFOTVot8=)
2: Ll4El4EPvQjU1m3_NGW31BoMNbs.roa (hash: aAbsXcXAi1Px9rBqFebnRpJI/7J+UKhx99NtmpOY4GQ=)
3: MlnC-jaRpZnIrgB8_eQnTAbVGTA.roa (hash: LraAiuo62bJSCi7FsjMWIePU6+pRqpeuBTDorfg6wzo=)
4: WVi_ybIpobHkUBuINJ5UAOJnWNI.roa (hash: 3fbJIuP8QMGU6Mp39Y5b/MTPHVVyptacQbOnxd8jif8=)
5: YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa (hash: gnWGWFdrNvGan6Zj654ovvMYwlS3b9SdtQbQJSYqz8w=)
6: cKL1r39FOEn9-Io6QM2GHDGad7Y.roa (hash: IVOj6G/Kxw/gIVSF+sBn1ShNhJ2a3NRvKy7Xif0pwjk=)
7: clfdiMu1i07BMzYCaMwkqCSWESQ.roa (hash: nPTdJ+2EENVzerbY85J3Hj4LaW3YuLFq8ExfSo1tXKU=)
8: l0hkPBiKEWtDrLzWt9rzeYLhYdk.roa (hash: LTxCKcgSLvCmIp5fk5kJlSt7sEk0QGEUSZibVkJctUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 10:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:a7:41:76:57:22:7b:0e:0d:1a:ce:1b:a0:94:92:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Oct 26 10:00:12 2026 GMT
Not After : Oct 27 10:00:12 2026 GMT
Subject: CN=5bd18f4abfc5504c3c18c095058d67b95e1734ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:c7:86:4b:05:c3:8f:04:fa:73:67:84:ee:
83:fd:3c:9f:d1:ef:8b:f3:99:99:2a:bd:5d:cd:de:
80:bf:c6:b6:f2:a8:5f:2e:0f:66:5c:b6:b6:30:e7:
05:e6:19:64:6e:2c:1d:99:bc:9b:8f:f0:82:1b:e6:
db:b1:df:3a:a4:c3:fd:d0:73:c8:99:3b:65:ce:e4:
2a:15:53:ab:72:84:74:2e:b3:10:06:7c:7c:52:29:
c6:41:9b:68:17:68:57:84:ca:bb:9e:20:3e:a3:76:
11:ad:e1:79:ff:9e:07:98:14:e9:63:ca:ce:51:61:
83:68:bc:7a:93:6a:e0:92:42:9b:f6:42:71:4b:13:
13:e7:d5:42:ef:fc:13:7e:eb:ff:e7:99:7b:ab:74:
59:f7:13:4e:2c:bd:a5:1d:fb:bc:00:4f:01:53:00:
d3:a4:14:72:e5:c8:8a:7a:95:40:a5:f2:ab:15:f2:
88:b7:42:87:ca:30:ff:96:4a:8b:55:a2:8f:8d:44:
36:03:56:bd:a9:74:6c:7f:2f:00:cf:f8:b2:9e:e4:
93:74:c2:d7:09:61:2b:45:bf:d4:44:e6:b9:fe:e1:
2a:2b:4d:35:d8:96:24:74:78:f0:b7:a7:a2:1b:3d:
90:7f:ff:19:1c:53:5d:7e:6c:34:2d:65:87:23:a8:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D1:8F:4A:BF:C5:50:4C:3C:18:C0:95:05:8D:67:B9:5E:17:34:AC
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:71:63:98:4c:36:fd:ef:07:39:93:49:3e:68:22:0b:71:30:
23:6e:3a:b4:e0:6f:1c:ef:4a:17:8b:b3:94:b1:34:9d:57:78:
d7:ff:e8:52:04:13:47:d3:f5:93:56:45:6b:a4:1d:30:c5:09:
ac:3a:84:2b:0b:ab:4e:49:64:1e:a2:88:e6:4c:4f:b1:10:ee:
ab:8a:0a:7b:97:63:91:e2:0d:9d:92:cc:7f:03:40:b0:e6:b6:
47:8a:fd:ad:26:a8:8d:17:cd:37:b5:0f:07:fb:d7:e3:e6:7d:
a2:0c:b6:b5:38:ac:35:c6:d0:7f:bc:81:fa:8d:2a:2d:72:80:
9e:a0:86:d4:24:c6:5a:72:19:dd:12:6a:b5:56:f2:9f:2f:00:
14:72:04:74:ed:e9:3d:d5:37:db:26:f7:b0:21:67:f9:52:19:
bc:9b:07:f7:16:01:4f:94:a3:98:5c:2f:8c:f4:80:ea:72:7e:
e0:5c:7d:2a:94:64:9a:16:d5:6a:c3:04:32:75:18:e3:eb:ae:
54:fb:43:f4:5d:eb:97:99:13:65:5d:53:a2:2e:5b:8a:24:6b:
70:35:8d:1d:da:a0:ab:f3:25:7f:e4:c4:3d:9f:9c:1b:49:9c:
0e:e5:86:8f:ba:c8:d0:fc:60:86:7b:02:6a:5c:4a:a7:9e:06:
79:90:a6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:03:09 2026 by rpki-client