Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: cHBJzAW+wkekU7ysU3fU4gfh2A6G1QQyQ7C1b9XZ/5U=
Subject key identifier: 75:0E:DD:09:77:DF:D6:08:9E:CA:39:D7:52:05:EF:E4:BC:5C:8D:0A
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 019DCE2BCBB429C911C494306DD9629764BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 18E4
Signing time: Mon 27 Apr 2026 09:01:09 +0000
Manifest this update: Mon 27 Apr 2026 09:01:09 +0000
Manifest next update: Tue 28 Apr 2026 09:01:09 +0000
Files and hashes: 1: FVFRIPh6vjxNZF9GmdKTzMvxW20.roa (hash: RxEPmyeQKw2S/n6YHyV1FFH2RRQ1FPtU6WCYyBI+QSs=)
2: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: gTCH8TUu7YLqAWL+KYUZ3Zf1bs+BNihtS3Fn9Gq2dMA=)
3: Ll4El4EPvQjU1m3_NGW31BoMNbs.roa (hash: aAbsXcXAi1Px9rBqFebnRpJI/7J+UKhx99NtmpOY4GQ=)
4: MlnC-jaRpZnIrgB8_eQnTAbVGTA.roa (hash: LraAiuo62bJSCi7FsjMWIePU6+pRqpeuBTDorfg6wzo=)
5: WVi_ybIpobHkUBuINJ5UAOJnWNI.roa (hash: 3fbJIuP8QMGU6Mp39Y5b/MTPHVVyptacQbOnxd8jif8=)
6: YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa (hash: gnWGWFdrNvGan6Zj654ovvMYwlS3b9SdtQbQJSYqz8w=)
7: cKL1r39FOEn9-Io6QM2GHDGad7Y.roa (hash: IVOj6G/Kxw/gIVSF+sBn1ShNhJ2a3NRvKy7Xif0pwjk=)
8: clfdiMu1i07BMzYCaMwkqCSWESQ.roa (hash: nPTdJ+2EENVzerbY85J3Hj4LaW3YuLFq8ExfSo1tXKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:cb:b4:29:c9:11:c4:94:30:6d:d9:62:97:64:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Apr 27 09:01:09 2026 GMT
Not After : Apr 28 09:01:09 2026 GMT
Subject: CN=750edd0977dfd6089eca39d75205efe4bc5c8d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:d2:c2:dd:0c:b6:93:f0:46:f0:52:1c:bb:
c8:e4:4e:7a:c8:fc:ed:48:fe:06:22:86:b8:4a:34:
39:f8:7c:11:61:47:61:6e:e4:f1:10:4c:ed:9e:52:
3d:ad:b0:55:3e:d2:52:d0:7e:d3:d2:fe:45:b3:72:
c9:c1:a8:80:64:4b:b3:ee:06:c2:98:17:51:bf:a9:
6c:4a:75:27:eb:ab:86:bc:f0:4f:2e:99:2e:85:f3:
76:5e:b3:9b:6a:c8:5e:b0:b8:5a:5b:3f:9b:ca:5a:
07:e2:59:ec:8f:c4:49:9a:f6:e9:48:02:85:53:d3:
28:5a:18:a5:d6:f5:32:c3:09:d9:6d:1b:4f:96:49:
ea:b3:8e:80:46:59:a0:e9:73:82:dc:4a:13:3b:51:
0a:89:8d:09:f4:c4:67:0a:fd:3f:a3:d1:10:f6:e8:
be:4d:33:b1:2a:c2:a5:23:bf:81:1c:8f:87:2c:6c:
2d:b1:fa:be:d4:aa:a1:4b:32:b9:db:60:82:30:f1:
8e:bc:47:d9:90:3a:5e:3a:49:46:cc:c4:33:27:5c:
cf:dc:62:6a:33:eb:ea:60:7c:58:ce:5f:01:d9:dd:
d8:79:36:8f:00:7d:71:dc:59:12:b4:19:04:53:11:
e0:c0:a1:e5:ee:de:10:9b:26:61:22:92:e5:12:2a:
dd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0E:DD:09:77:DF:D6:08:9E:CA:39:D7:52:05:EF:E4:BC:5C:8D:0A
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5b:aa:a9:6d:57:51:e7:ef:42:8a:09:a0:e0:c4:e2:53:48:
4f:de:7b:59:ee:4e:b4:90:5f:21:53:9b:a8:ff:8a:30:b4:52:
99:0e:9b:81:a5:0e:53:f7:9f:85:23:57:7e:e9:d9:cc:23:b4:
3a:81:a7:7a:0c:2c:0d:06:5c:b3:38:b2:5d:6d:20:57:46:d5:
5d:6c:60:fa:f6:37:a1:3d:1e:ef:33:79:48:32:96:22:af:8a:
c1:28:bc:95:62:63:4c:e6:f7:e9:e9:0f:c0:49:1b:29:93:d9:
e3:98:3d:bf:3e:73:1c:25:79:9c:e0:f9:8a:a2:a3:9d:a8:e2:
d2:9c:0e:13:79:bf:78:56:9f:fc:64:4a:e8:c4:a5:00:ff:9d:
66:93:b9:07:7a:ec:33:4c:e8:02:e1:ba:22:9a:f5:c4:8c:15:
a1:7f:67:92:4c:47:64:4a:c3:e9:a9:ab:7c:7d:69:40:6b:d0:
cf:f6:6c:bc:7b:4f:b1:6a:95:59:93:54:40:bf:05:e5:00:b6:
bb:cc:60:c7:0a:fe:5f:72:b7:b4:97:20:88:34:3a:0a:12:01:
6f:21:06:e8:6c:03:4b:01:65:2a:7a:1f:c5:a5:80:f9:97:5f:
57:e4:5d:e0:4a:99:30:82:74:97:f5:60:8a:a9:f5:41:b6:d1:
ef:1f:1f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:30:50 2026 by rpki-client