Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: 8hYQiyZdmGoPIEAIlcxXttaRNk7/v69UG5C4ehp6LAU=
Subject key identifier: 8C:99:6A:7C:3A:7D:D4:A6:73:A4:8C:5B:EF:B3:D9:1D:F5:92:18:9F
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 019CE66CFE764F8EBCBB016095A71FD73BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 186C
Signing time: Fri 13 Mar 2026 09:00:28 +0000
Manifest this update: Fri 13 Mar 2026 09:00:28 +0000
Manifest next update: Sat 14 Mar 2026 09:00:28 +0000
Files and hashes: 1: FVFRIPh6vjxNZF9GmdKTzMvxW20.roa (hash: RxEPmyeQKw2S/n6YHyV1FFH2RRQ1FPtU6WCYyBI+QSs=)
2: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: NmnhMHoOrriy6pyi2i4QdIdYPY9w5qPnuqRlzFxG3dI=)
3: Ll4El4EPvQjU1m3_NGW31BoMNbs.roa (hash: aAbsXcXAi1Px9rBqFebnRpJI/7J+UKhx99NtmpOY4GQ=)
4: MlnC-jaRpZnIrgB8_eQnTAbVGTA.roa (hash: LraAiuo62bJSCi7FsjMWIePU6+pRqpeuBTDorfg6wzo=)
5: WVi_ybIpobHkUBuINJ5UAOJnWNI.roa (hash: 3fbJIuP8QMGU6Mp39Y5b/MTPHVVyptacQbOnxd8jif8=)
6: YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa (hash: gnWGWFdrNvGan6Zj654ovvMYwlS3b9SdtQbQJSYqz8w=)
7: cKL1r39FOEn9-Io6QM2GHDGad7Y.roa (hash: IVOj6G/Kxw/gIVSF+sBn1ShNhJ2a3NRvKy7Xif0pwjk=)
8: clfdiMu1i07BMzYCaMwkqCSWESQ.roa (hash: nPTdJ+2EENVzerbY85J3Hj4LaW3YuLFq8ExfSo1tXKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6c:fe:76:4f:8e:bc:bb:01:60:95:a7:1f:d7:3b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Mar 13 09:00:28 2026 GMT
Not After : Mar 14 09:00:28 2026 GMT
Subject: CN=8c996a7c3a7dd4a673a48c5befb3d91df592189f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:8a:cf:f0:90:43:49:86:6f:cb:e0:87:ce:
c1:fb:37:43:be:5d:bc:9a:2e:01:8b:c4:32:cd:66:
f1:82:fc:dc:a1:7c:57:45:c6:fa:99:ae:17:ab:08:
be:6a:3e:31:94:db:5d:17:0c:ce:84:3d:02:a3:46:
64:4a:3a:21:03:13:87:72:b6:aa:6e:fe:5b:9b:7c:
ad:65:66:86:ca:4f:d0:54:99:0a:a1:b3:5b:07:49:
d2:99:7a:a2:0d:47:a4:d3:0c:46:13:b0:fb:cd:99:
4d:05:96:eb:fa:31:8c:09:9f:51:50:a8:fd:bd:6f:
fe:a7:6a:d2:0b:46:7a:2f:b4:b5:58:73:f4:0b:66:
83:03:09:01:df:0a:95:b3:4d:5f:93:27:31:93:76:
69:cb:9b:68:65:3d:64:0d:2a:e2:6b:3d:c6:92:1b:
5b:35:61:c5:8f:43:6e:08:a4:d6:f7:b9:1d:8e:c0:
55:71:c7:ed:a6:0d:5a:89:07:33:81:5a:04:06:ba:
cd:73:c4:4f:cc:eb:10:04:0c:5b:74:68:4a:c2:66:
65:51:ce:54:81:83:05:65:9e:29:1f:5f:6a:e6:3b:
8d:b2:a6:40:83:a3:83:c1:e6:1c:42:1f:1b:1f:94:
89:bd:43:77:e9:8f:31:6e:db:c1:df:26:87:93:c2:
52:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:99:6A:7C:3A:7D:D4:A6:73:A4:8C:5B:EF:B3:D9:1D:F5:92:18:9F
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:0e:24:2e:15:0b:c8:d5:36:3a:10:db:ec:62:2d:1e:c5:1d:
d5:2c:af:58:78:b5:78:c7:27:2b:7e:18:8b:a8:b7:be:ca:0a:
a7:f9:e5:ce:b7:88:6d:ab:56:34:18:40:e8:d7:48:fe:c6:5c:
00:77:35:91:82:81:98:dc:29:d2:32:ea:38:60:35:c1:d9:37:
cc:09:6c:0c:40:a6:41:9a:c8:85:c5:26:3b:fa:7e:5f:ce:44:
57:68:53:4c:14:01:48:0e:8a:ee:18:8e:6b:80:21:5c:c1:20:
f4:2f:d1:3b:74:e5:b2:fa:86:96:16:7e:24:3b:b4:b4:6e:f4:
ba:c7:ec:60:3b:3f:aa:fa:82:be:a5:60:b5:c2:8b:8b:99:d7:
4d:2c:71:df:19:8b:fd:57:95:c3:2d:f5:51:cc:0c:ac:09:38:
8f:cd:75:55:a5:7e:c0:ca:52:48:ff:5f:bc:ae:ae:3a:98:62:
a3:4a:6b:2b:9d:0c:4f:88:a7:af:69:fa:63:bb:bd:00:64:fe:
34:13:5c:6f:88:49:56:41:be:c4:2a:98:b6:9e:5e:b0:ad:3c:
20:ce:74:36:8a:d5:f1:d4:d0:5f:73:87:7a:c5:4d:61:f5:39:
d1:5e:aa:2f:9b:78:1e:83:a2:93:de:fb:28:35:2a:d2:0b:48:
2b:29:7f:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZzmbP52T468uwFglacf1zu/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzY0ZGMyMWNiNWZkNGQwYmNiMDJjYzJiNDNmZDc1MWZk
OTFlMWUwHhcNMjYwMzEzMDkwMDI4WhcNMjYwMzE0MDkwMDI4WjAzMTEwLwYDVQQD
Eyg4Yzk5NmE3YzNhN2RkNGE2NzNhNDhjNWJlZmIzZDkxZGY1OTIxODlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstmKz/CQQ0mGb8vgh87B+zdDvl28
mi4Bi8QyzWbxgvzcoXxXRcb6ma4Xqwi+aj4xlNtdFwzOhD0Co0ZkSjohAxOHcraq
bv5bm3ytZWaGyk/QVJkKobNbB0nSmXqiDUek0wxGE7D7zZlNBZbr+jGMCZ9RUKj9
vW/+p2rSC0Z6L7S1WHP0C2aDAwkB3wqVs01fkycxk3Zpy5toZT1kDSriaz3Gkhtb
NWHFj0NuCKTW97kdjsBVccftpg1aiQczgVoEBrrNc8RPzOsQBAxbdGhKwmZlUc5U
gYMFZZ4pH19q5juNsqZAg6ODweYcQh8bH5SJvUN36Y8xbtvB3yaHk8JSswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIyZanw6fdSmc6SMW++z2R31khifMB8GA1UdIwQY
MBaAFCrGTcIctf1NC8sCzCtD/XUf2R4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAt
MDk3YzNjMWMyNTQwLzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAtMDk3YzNjMWMyNTQw
LzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdw4kLhUL
yNU2OhDb7GItHsUd1SyvWHi1eMcnK34Yi6i3vsoKp/nlzreIbatWNBhA6NdI/sZc
AHc1kYKBmNwp0jLqOGA1wdk3zAlsDECmQZrIhcUmO/p+X85EV2hTTBQBSA6K7hiO
a4AhXMEg9C/RO3TlsvqGlhZ+JDu0tG70usfsYDs/qvqCvqVgtcKLi5nXTSxx3xmL
/VeVwy31UcwMrAk4j811VaV+wMpSSP9fvK6uOphio0prK50MT4inr2n6Y7u9AGT+
NBNcb4hJVkG+xCqYtp5esK08IM50NorV8dTQX3OHesVNYfU50V6qL5t4HoOik977
KDUq0gtIKyl/Qw==
-----END CERTIFICATE-----
Generated at Fri Mar 13 12:29:36 2026 by rpki-client