Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: TaGPgOZ3mh2/XkIJhFmEC5HZvfuX4rbsPNQsUJwEWT0=
Subject key identifier: 6E:B4:F0:C9:8C:F3:EE:25:B9:DD:0E:88:1B:6C:32:AC:62:9C:5F:48
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 019D26CD438C6FC7B816AEE6F6E943AF1477
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 21:01:19 +0000
Manifest this update: Wed 25 Mar 2026 21:01:19 +0000
Manifest next update: Thu 26 Mar 2026 21:01:19 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: CVz9r94Gzg3M+WTTQ/y1JlgzhZRHN6s2fveWsIc95VM=)
2: vM4pcQR4cpfxqBvoAa4ezpfAooA.roa (hash: q37j9EaxOdTgZgbNR9N/Sjv4ip1H9vll46kAjU29riM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:43:8c:6f:c7:b8:16:ae:e6:f6:e9:43:af:14:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Mar 25 21:01:19 2026 GMT
Not After : Mar 26 21:01:19 2026 GMT
Subject: CN=6eb4f0c98cf3ee25b9dd0e881b6c32ac629c5f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:91:e0:17:32:73:2d:4c:25:a0:23:5a:2e:66:
0e:db:51:5f:c9:26:d4:c0:fe:36:72:9c:4b:3d:98:
e3:fb:8f:f9:10:22:e7:08:d5:83:2b:be:03:3c:b3:
15:60:3c:74:0d:a6:15:d7:b8:34:76:3d:0d:08:73:
31:e9:cc:d4:3a:5c:b7:98:59:78:3e:a3:1f:d2:f9:
7c:1c:7f:83:1f:52:e7:2b:c7:5b:9c:a5:2e:7f:18:
1d:b1:8e:76:0e:21:ce:de:60:ef:38:32:2a:7c:30:
bb:79:59:a8:f3:67:03:c9:7a:8a:d7:da:5f:31:c2:
7f:ea:dd:cd:ce:dc:6d:12:fb:28:23:cd:bc:8b:7e:
b9:25:d3:8f:3e:8f:e5:87:c0:98:35:3e:5f:16:bd:
01:0c:64:19:48:4a:c5:5b:e2:42:ae:f0:f2:16:4a:
78:7c:86:9a:17:8f:4f:a8:15:4d:59:ae:b7:ed:61:
14:11:da:05:b3:63:a8:80:46:d5:56:02:87:e2:38:
ba:1c:cf:d6:82:9b:1c:79:d8:e5:78:9a:05:b8:d8:
a5:c6:4f:6f:3f:76:99:4a:2b:c2:62:a2:d4:85:a0:
5b:18:25:4e:a3:60:f5:b9:27:67:9b:85:c5:be:81:
47:db:38:e3:8c:d8:27:a3:fb:45:36:d1:cf:79:91:
0b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B4:F0:C9:8C:F3:EE:25:B9:DD:0E:88:1B:6C:32:AC:62:9C:5F:48
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ab:77:ce:bb:01:10:1a:6a:34:54:df:0c:bd:43:33:33:6e:
cc:fb:2a:67:a5:bc:4f:22:81:b0:a1:f4:b7:2a:6e:7f:12:a6:
a4:d0:73:4d:c4:ef:b9:60:8d:3c:1d:3b:5c:15:0a:a3:62:63:
9d:d8:95:b4:f7:db:ac:72:30:4f:61:10:82:93:5e:26:67:cc:
bd:10:3e:4a:65:5b:52:dd:1d:3f:cc:67:22:11:75:cf:7e:9d:
bc:73:71:3a:38:b0:5d:f8:0d:6c:64:4a:eb:8e:1f:32:8d:6b:
ee:e6:2b:6a:24:e6:a5:91:83:a1:93:49:bd:39:2c:8c:28:04:
8c:a2:88:ea:cf:b6:17:d8:25:f1:e1:8e:55:cd:a4:60:45:94:
ea:00:7f:58:48:aa:d2:d3:36:c3:f1:21:5a:f2:15:d0:df:0f:
5b:d3:02:69:75:ad:c7:6c:2f:24:1e:16:95:3f:b0:92:a5:9a:
71:27:2f:6a:6e:32:62:7b:57:7a:68:16:d7:6e:e9:3b:b9:c6:
e6:fd:e0:b9:f8:31:88:49:35:04:3b:66:27:b6:a0:1c:4b:2f:
f6:4e:53:ae:8c:53:2e:ad:73:d9:0f:00:b9:01:86:86:c0:be:
24:55:38:f0:3b:10:4c:8e:bc:0b:fe:55:42:95:bd:45:46:ec:
b3:88:f0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:42 2026 by rpki-client