Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: bxHpWWBnh55MFU+cpRcWefJ6QQTvuq2so2dPsL3GIfQ=
Subject key identifier: 68:45:F0:E2:51:30:07:07:A2:3D:65:0E:28:0D:81:43:F7:44:7B:9B
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 019EB7D7DD8C19C722BCEA8CC282424931DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 195D
Signing time: Thu 11 Jun 2026 18:00:37 +0000
Manifest this update: Thu 11 Jun 2026 18:00:37 +0000
Manifest next update: Fri 12 Jun 2026 18:00:37 +0000
Files and hashes: 1: FVFRIPh6vjxNZF9GmdKTzMvxW20.roa (hash: RxEPmyeQKw2S/n6YHyV1FFH2RRQ1FPtU6WCYyBI+QSs=)
2: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: Q1j0Ud8wEpngLt0bj7dTcm2GC9dSJmC7w8ehgFL/HGY=)
3: Ll4El4EPvQjU1m3_NGW31BoMNbs.roa (hash: aAbsXcXAi1Px9rBqFebnRpJI/7J+UKhx99NtmpOY4GQ=)
4: MlnC-jaRpZnIrgB8_eQnTAbVGTA.roa (hash: LraAiuo62bJSCi7FsjMWIePU6+pRqpeuBTDorfg6wzo=)
5: WVi_ybIpobHkUBuINJ5UAOJnWNI.roa (hash: 3fbJIuP8QMGU6Mp39Y5b/MTPHVVyptacQbOnxd8jif8=)
6: YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa (hash: gnWGWFdrNvGan6Zj654ovvMYwlS3b9SdtQbQJSYqz8w=)
7: cKL1r39FOEn9-Io6QM2GHDGad7Y.roa (hash: IVOj6G/Kxw/gIVSF+sBn1ShNhJ2a3NRvKy7Xif0pwjk=)
8: clfdiMu1i07BMzYCaMwkqCSWESQ.roa (hash: nPTdJ+2EENVzerbY85J3Hj4LaW3YuLFq8ExfSo1tXKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:dd:8c:19:c7:22:bc:ea:8c:c2:82:42:49:31:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Jun 11 18:00:37 2026 GMT
Not After : Jun 12 18:00:37 2026 GMT
Subject: CN=6845f0e251300707a23d650e280d8143f7447b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:27:69:fb:0b:ca:fe:3e:a7:23:aa:68:8d:43:
91:33:4b:96:86:b5:f1:a8:59:e7:48:fc:73:ef:14:
b9:f1:fb:dd:ed:e1:cd:85:6a:a9:76:c4:e9:65:21:
bc:5f:d0:85:97:35:7b:b5:3d:8c:b8:02:32:b1:61:
6a:6c:cd:7e:4a:6d:6e:8a:18:ab:4e:40:dd:cf:c8:
18:91:09:6b:69:01:b8:92:59:be:ca:5a:9f:4d:d7:
52:2f:c4:b5:cf:3a:70:05:f1:f5:b2:64:ad:03:0e:
4f:0b:a4:77:cd:27:fe:b2:b8:c1:ee:e1:4c:cb:df:
23:6f:6f:4c:ea:df:c5:1e:10:45:0e:32:f5:72:46:
49:78:f3:5c:32:85:f9:0e:44:3e:29:b3:0d:f1:93:
0c:db:99:9e:f5:0c:fb:3a:3f:b0:79:64:a7:ce:47:
b4:4f:5c:0f:f7:7d:e7:72:dc:dd:cd:8c:44:03:82:
4d:a0:48:94:c9:4c:b9:e3:7e:09:19:1b:b8:ef:a7:
0e:af:1c:1f:8e:e9:64:84:64:ba:7e:a0:ab:97:88:
21:aa:ce:38:e0:d2:a7:61:66:24:01:a1:8f:43:26:
8f:7b:cd:dc:39:fb:60:45:f8:eb:42:27:34:7c:bb:
78:7c:94:0e:c8:ef:e9:f4:e3:03:2f:b5:70:f4:ac:
23:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:45:F0:E2:51:30:07:07:A2:3D:65:0E:28:0D:81:43:F7:44:7B:9B
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:27:30:e5:43:2a:b3:74:4c:dd:d7:21:db:77:11:84:8f:09:
dd:8f:76:50:bb:99:50:a3:58:e3:da:9a:54:d0:8c:3f:3f:dc:
dc:88:28:6b:7b:4b:0d:71:0e:59:12:40:fc:fa:aa:20:3c:3d:
8c:f8:ad:3a:f7:71:16:69:5b:4f:9a:de:3a:dd:ff:18:c7:74:
06:fd:d5:59:75:de:7e:c4:f6:d5:9e:d7:f8:c3:5f:6a:d9:e3:
3c:b6:f9:e2:9f:b9:e9:e7:52:46:25:f5:28:6d:d1:74:a1:6f:
3d:bb:74:3b:6b:99:7a:ca:a1:8f:f6:24:ea:2a:b0:26:77:e2:
21:7e:77:54:33:b1:4b:fa:18:d3:49:48:df:b2:64:8b:62:dd:
08:87:11:6a:93:06:d7:b9:63:f6:d4:a4:e8:e0:18:a7:d8:9b:
cb:56:f3:f9:cf:52:2e:f6:26:b1:eb:1b:9f:61:8f:04:48:50:
7a:33:3b:48:9c:be:e4:6a:d2:7a:ca:0d:f3:42:03:bb:d5:7d:
de:00:8c:ac:5a:87:86:68:4d:f0:f8:fe:96:8f:0c:09:62:41:
a8:0d:e9:67:b2:74:8e:87:5d:87:fd:5a:8f:eb:c3:60:46:99:
8e:a0:84:70:65:22:71:e2:a4:7a:21:a5:17:a8:b4:e0:7a:58:
ca:b9:16:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63192MGccivOqMwoJCSTHcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzY0ZGMyMWNiNWZkNGQwYmNiMDJjYzJiNDNmZDc1MWZk
OTFlMWUwHhcNMjYwNjExMTgwMDM3WhcNMjYwNjEyMTgwMDM3WjAzMTEwLwYDVQQD
Eyg2ODQ1ZjBlMjUxMzAwNzA3YTIzZDY1MGUyODBkODE0M2Y3NDQ3YjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSdp+wvK/j6nI6pojUORM0uWhrXx
qFnnSPxz7xS58fvd7eHNhWqpdsTpZSG8X9CFlzV7tT2MuAIysWFqbM1+Sm1uihir
TkDdz8gYkQlraQG4klm+ylqfTddSL8S1zzpwBfH1smStAw5PC6R3zSf+srjB7uFM
y98jb29M6t/FHhBFDjL1ckZJePNcMoX5DkQ+KbMN8ZMM25me9Qz7Oj+weWSnzke0
T1wP933nctzdzYxEA4JNoEiUyUy5434JGRu476cOrxwfjulkhGS6fqCrl4ghqs44
4NKnYWYkAaGPQyaPe83cOftgRfjrQic0fLt4fJQOyO/p9OMDL7Vw9KwjSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhF8OJRMAcHoj1lDigNgUP3RHubMB8GA1UdIwQY
MBaAFCrGTcIctf1NC8sCzCtD/XUf2R4eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAt
MDk3YzNjMWMyNTQwLzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9kZTFkYjQtZWM3OC00ZTQxLTk1NzAtMDk3YzNjMWMyNTQw
LzEvS3NaTndoeTFfVTBMeXdMTUswUDlkUl9aSGg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGScw5UMq
s3RM3dch23cRhI8J3Y92ULuZUKNY49qaVNCMPz/c3Igoa3tLDXEOWRJA/PqqIDw9
jPitOvdxFmlbT5reOt3/GMd0Bv3VWXXefsT21Z7X+MNfatnjPLb54p+56edSRiX1
KG3RdKFvPbt0O2uZesqhj/Yk6iqwJnfiIX53VDOxS/oY00lI37Jki2LdCIcRapMG
17lj9tSk6OAYp9iby1bz+c9SLvYmsesbn2GPBEhQejM7SJy+5GrSesoN80IDu9V9
3gCMrFqHhmhN8Pj+lo8MCWJBqA3pZ7J0joddh/1aj+vDYEaZjqCEcGUiceKkeiGl
F6i04HpYyrkW3Q==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:53:55 2026 by rpki-client