Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: /YsoNcYCJzNF71RZvcoKQpmEF3xHxWS2YbPPS30+2t0=
Subject key identifier: 1B:F5:95:38:E2:8C:F9:C4:96:FE:B2:0D:81:4D:80:9E:3A:F1:A3:05
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 019E1C0FD2CE7F14CD8C0E94214ED3751420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 12:00:59 +0000
Manifest this update: Tue 12 May 2026 12:00:59 +0000
Manifest next update: Wed 13 May 2026 12:00:59 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: 49+OrxUsGMyBRh7lIA28/Ixv2dCGpPiqy5ENc3hTUxc=)
2: vM4pcQR4cpfxqBvoAa4ezpfAooA.roa (hash: q37j9EaxOdTgZgbNR9N/Sjv4ip1H9vll46kAjU29riM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:d2:ce:7f:14:cd:8c:0e:94:21:4e:d3:75:14:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: May 12 12:00:59 2026 GMT
Not After : May 13 12:00:59 2026 GMT
Subject: CN=1bf59538e28cf9c496feb20d814d809e3af1a305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ab:18:10:ca:ec:c0:a1:75:7f:b3:cb:b4:3e:
59:e1:05:36:bf:7f:bf:df:7a:4d:3e:ed:f9:13:a1:
c1:35:ff:9c:4e:18:2a:73:e0:0f:15:25:f2:1c:62:
52:3c:94:45:19:41:f0:07:1a:80:34:76:e3:eb:dc:
38:bb:00:d0:c8:34:eb:25:da:b0:82:bd:52:b6:8f:
a9:76:2b:b2:57:b4:0d:2d:d0:27:3b:a5:00:b8:ad:
3a:3c:da:ad:0d:01:ee:2b:d1:d2:7a:fe:91:a7:4a:
44:24:0d:d7:6c:d5:d0:c2:76:24:59:01:ae:3d:d6:
b3:07:58:91:c8:a8:02:51:aa:03:cb:ec:cc:50:be:
70:eb:42:9a:cf:2d:5e:d6:80:c4:e6:2d:b0:7c:7b:
06:f8:57:88:59:45:95:1b:6e:8e:b3:6f:38:44:64:
fb:9e:d1:56:02:b2:40:a1:c1:a4:0c:a0:cc:7b:74:
e7:b4:38:21:44:82:17:74:5a:ba:57:f2:c3:1b:7c:
04:bd:b0:bc:12:ac:90:0f:44:95:ce:d8:d9:17:20:
76:72:71:c7:8d:30:d3:8b:8e:3a:21:7e:a2:03:ad:
1c:49:47:34:f4:97:a1:85:d0:8d:98:05:b1:2e:6c:
1f:5b:83:de:50:1c:54:d2:70:73:3f:80:e6:45:f9:
88:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F5:95:38:E2:8C:F9:C4:96:FE:B2:0D:81:4D:80:9E:3A:F1:A3:05
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fd:34:e3:19:7e:ef:e1:2f:2d:2e:1c:63:3b:5f:0e:ba:d9:
86:de:27:58:e1:ff:2a:d8:e5:77:a7:2d:e0:84:5d:92:68:ad:
bd:f8:c0:d5:23:00:bb:c1:c4:88:72:fc:3f:fb:f3:ac:5f:d0:
df:5b:fb:74:81:0c:4c:da:d3:b1:46:cf:c1:b7:9f:f4:bc:30:
04:92:b8:17:02:0d:be:22:76:bf:2c:ba:ca:5c:2f:36:d4:27:
29:eb:55:06:bb:a8:d2:76:fd:11:91:2a:de:35:b5:1b:f3:27:
4a:2d:4a:e2:a4:24:56:6d:ce:27:b2:35:99:80:61:9e:21:53:
28:f2:9b:8d:d7:9a:ba:21:91:88:62:8e:86:2a:f2:84:77:c2:
75:c4:23:3e:1a:b0:4a:16:44:3f:93:81:ab:fe:06:f6:e3:29:
88:11:9b:ee:28:e7:d8:8f:cc:ff:8e:6a:52:11:14:5b:c4:a5:
34:40:5b:76:f1:96:51:8e:28:e1:81:b8:a4:33:6f:1b:b1:37:
95:31:80:fc:8b:18:90:11:fb:52:aa:58:4d:c5:ec:99:ef:12:
aa:8f:57:4e:cb:f0:90:4d:06:ad:b4:e7:b3:81:a7:b4:d0:c7:
3b:e1:48:f6:50:d3:21:f4:52:47:7e:55:b5:5a:9e:c5:4c:ff:
c4:e3:ec:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:10 2026 by rpki-client