Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
File: Kq8k6REaiJ202uCH5ICeEIbjP4I.mft (raw, json)
Hash identifier: 2jCZmW3fSbTKfBXdTIx8uYh/P50T7bNSe++0ZRwMusA=
Subject key identifier: C4:C7:00:86:CE:09:6E:C8:81:00:6F:A7:9D:18:6F:F8:1D:4E:F2:5A
Authority key identifier: 2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
Certificate issuer: /CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Certificate serial: 019D33E44FE26913DBDFE925800B66998FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
Manifest number: 17E9
Signing time: Sat 28 Mar 2026 10:01:33 +0000
Manifest this update: Sat 28 Mar 2026 10:01:33 +0000
Manifest next update: Sun 29 Mar 2026 10:01:33 +0000
Files and hashes: 1: Kq8k6REaiJ202uCH5ICeEIbjP4I.crl (hash: 0fxnlcwxbIizxX9F8zc7wDA/ciylAghQoEe/RPCnHxM=)
2: oyKh1GZmmmicse4bqcfsPq9PxSg.roa (hash: YSuCQpmgXDGJyq+euD80LcmH0pwmzSboam85gWy8j5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 10:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e4:4f:e2:69:13:db:df:e9:25:80:0b:66:99:8f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Validity
Not Before: Mar 28 10:01:33 2026 GMT
Not After : Mar 29 10:01:33 2026 GMT
Subject: CN=c4c70086ce096ec881006fa79d186ff81d4ef25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:39:7f:30:d3:29:e9:5c:74:31:78:b6:fe:
a1:b2:e1:aa:b1:a5:0b:fc:d4:a8:10:db:58:ee:56:
d7:63:14:23:52:db:17:0c:d3:f0:da:e9:e4:b2:71:
33:a5:94:da:e5:ae:c9:55:c2:51:0d:01:46:62:06:
fa:4b:2a:94:e4:34:3d:6f:d1:55:aa:f8:83:d4:27:
f3:de:da:8a:6a:d0:3a:66:f7:72:24:99:b8:48:02:
49:aa:8c:25:64:6f:75:75:0b:8f:26:70:c8:b0:c9:
c9:89:ad:68:a9:e2:7f:69:35:81:34:59:b9:b7:d0:
98:cf:ac:a7:d9:a4:a4:94:d1:37:60:f0:98:f0:60:
93:65:cf:1c:d1:5c:87:29:6e:0d:a5:a5:92:13:30:
55:70:f2:87:c2:6b:f0:26:a2:a8:98:62:b0:9e:64:
23:55:45:4d:a1:9c:25:49:57:e2:0c:56:8f:e4:7b:
82:ed:0a:39:3d:e6:32:15:1e:91:82:46:49:cd:9b:
82:a4:b5:b4:c8:ae:65:f5:0d:74:13:a9:a3:20:a0:
92:0f:09:70:90:61:e2:9c:7f:64:d0:fb:75:5e:6a:
e0:3a:ea:db:6a:80:5c:78:03:ec:1f:da:7e:10:6b:
e8:ae:d6:30:6d:7a:fd:72:e7:9a:05:13:a1:9a:80:
4c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C7:00:86:CE:09:6E:C8:81:00:6F:A7:9D:18:6F:F8:1D:4E:F2:5A
X509v3 Authority Key Identifier:
keyid:2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:40:c0:ff:db:40:b7:fa:3f:bc:80:9a:75:ad:44:6b:71:7c:
5c:7a:25:48:5d:90:34:ad:04:34:0a:a4:ed:95:66:a0:de:c0:
84:6f:2f:e8:0a:97:74:46:f7:4f:4c:b2:ce:ee:82:2b:77:8d:
d5:47:75:52:fc:92:b6:a6:8b:39:8c:43:60:3e:14:a9:57:a7:
5a:7a:85:fd:be:d0:ae:3f:d7:a7:b9:93:01:7c:ea:65:40:e5:
3c:61:e8:16:e2:d0:3b:ed:5b:c8:fc:5d:d2:59:98:11:62:2d:
34:d6:73:9f:2c:c0:92:61:b0:a9:80:e3:31:19:96:4f:a0:78:
23:f3:bf:55:2a:27:1a:6a:14:cf:c4:e0:d4:db:52:ad:4d:fd:
92:76:1d:a8:16:06:9a:e4:96:5e:9f:a8:cb:25:92:c8:84:0e:
19:c3:c1:96:bf:b4:dc:98:fc:ce:2a:fa:94:90:94:28:23:30:
90:03:33:b4:5a:72:74:c9:21:bc:81:cb:5b:fc:56:6a:a8:91:
65:2d:ca:25:50:b4:3a:bf:fe:68:41:ec:a0:a2:e3:6d:af:e3:
10:82:37:b4:0f:25:61:95:95:6e:4a:80:29:25:8a:fc:c5:85:
d1:1f:34:dc:e4:2c:3a:6b:1b:81:23:a4:4f:1a:cb:5b:98:17:
9e:19:a6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:05 2026 by rpki-client