Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: pgORhxoMolxMMLbPO34slPWhV40SDUeV62+DBHrdqV4=
Subject key identifier: C4:8F:3E:52:CF:BE:D1:22:2B:CA:E4:EB:CC:49:59:53:5C:13:AE:A6
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 01A14CF4AC8B096538F80171D07FCF211F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 1AB0
Signing time: Sun 18 Oct 2026 03:01:05 +0000
Manifest this update: Sun 18 Oct 2026 03:01:05 +0000
Manifest next update: Mon 19 Oct 2026 03:01:05 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: V5Lw7kWKFMtQIV2seqGfs0N4DRyqry9cJTIwewaDxyA=)
2: vM4pcQR4cpfxqBvoAa4ezpfAooA.roa (hash: q37j9EaxOdTgZgbNR9N/Sjv4ip1H9vll46kAjU29riM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4c:f4:ac:8b:09:65:38:f8:01:71:d0:7f:cf:21:1f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Oct 18 03:01:05 2026 GMT
Not After : Oct 19 03:01:05 2026 GMT
Subject: CN=c48f3e52cfbed1222bcae4ebcc4959535c13aea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ba:25:81:fb:80:0e:0b:9d:e4:22:09:34:46:
aa:51:71:cd:f5:77:10:5c:9d:d3:36:c2:e4:45:fd:
c3:03:fd:1a:4c:9c:ef:7b:30:8d:cc:af:47:57:91:
4e:2a:f6:09:b9:8f:59:7d:31:b3:52:ea:44:1c:cc:
b1:31:df:e1:54:6a:c4:fa:07:4b:07:42:6b:f0:a5:
f1:77:a5:9a:75:0b:3f:ca:e7:93:64:f2:f0:a4:24:
e4:bf:2f:a8:e4:8b:8a:3c:7d:a0:90:28:98:d2:9a:
74:89:26:9d:c3:df:f1:12:b5:05:0f:0f:a9:eb:44:
40:5e:15:b3:8c:92:87:5e:5b:7a:e3:e4:3e:5c:3a:
9d:bf:71:3c:d1:c5:50:9d:6e:94:1b:a2:b7:f3:5a:
8a:e8:20:39:b7:b7:6a:b8:d8:eb:38:f9:58:48:18:
f9:79:35:b9:75:76:ab:f2:5a:58:2b:bc:b2:0b:26:
37:e3:ca:f1:45:34:56:a4:91:d6:f7:37:c5:9f:a3:
10:ec:9d:37:6a:6c:c1:4f:bb:9e:d1:fa:56:18:5d:
31:ac:b7:1d:c1:e6:b7:7a:1f:7a:6b:91:be:69:58:
2f:b3:e1:d4:f1:df:c8:82:cf:eb:38:cf:3d:68:b0:
0a:83:1b:b4:f5:5a:3e:4a:71:98:b1:60:a4:81:56:
8a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8F:3E:52:CF:BE:D1:22:2B:CA:E4:EB:CC:49:59:53:5C:13:AE:A6
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:90:74:0d:46:15:aa:fb:11:9c:03:b1:71:a4:9c:13:4d:1c:
93:32:bd:a9:15:42:e3:5b:4c:b8:88:dc:42:b9:97:2f:d6:52:
38:38:37:cd:65:26:1d:aa:ba:8a:90:b0:20:a0:ea:16:92:d3:
74:0c:19:35:ad:67:3f:f2:1e:37:89:80:99:62:5b:5b:96:ce:
44:04:ba:e0:8c:77:88:d9:e6:07:47:19:60:a5:c5:50:b2:43:
c5:ed:70:f8:2a:67:9a:87:1c:b1:ef:78:10:2c:5e:fd:f7:87:
78:15:c1:68:3b:8b:9c:92:80:80:fa:1c:52:f3:5f:64:ca:b5:
29:f4:d2:56:1c:22:e6:54:c0:02:39:bc:40:15:20:c7:5b:09:
53:6b:dd:44:4f:7c:4e:5f:6b:b0:53:3b:43:d9:eb:b9:9a:af:
64:d4:98:fa:aa:89:e1:5e:c7:cd:13:9a:4d:e8:7d:87:d5:64:
bd:dd:4e:38:cf:16:f0:66:2c:1d:5e:18:7a:5e:85:a9:83:48:
85:fc:4e:32:68:57:06:23:d9:44:bf:e6:0c:a9:fa:4d:84:e6:
c9:57:ed:1b:12:a4:81:d7:df:06:0b:83:2e:00:f0:49:9b:05:
5f:72:71:65:3a:18:98:03:b9:5a:ee:80:3b:65:52:01:33:6f:
80:7d:fb:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:40:50 2026 by rpki-client