Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier: a9HmWiPuuSDaOYQc02lK0IubxMynZzuDfjg0Vg7bVW0=
Subject key identifier: 9D:10:33:DA:C6:D5:CD:30:DB:B0:D9:12:A8:C4:6A:67:9C:8B:54:3A
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial: 019D27A933A3DA313AF46E4FCE4A2B5CF150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 01:01:33 +0000
Manifest this update: Thu 26 Mar 2026 01:01:33 +0000
Manifest next update: Fri 27 Mar 2026 01:01:33 +0000
Files and hashes: 1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: 7OeuVhS7SsBn8BPVmBNmXWab69i6YAbN4C37oum5JMg=)
2: Q97r5DpOzAiwP4rhjuyHyUDSJ20.roa (hash: 9OXjDqXqUBHg5Xmpj9SZ8E0O+G30jS5FTAp/zLKlpOg=)
3: bn5DIEB7h417zigDbxPNaTfKJVE.roa (hash: 1UP3MaF3B8GgUJNYJAJfcEuya7S1x4U9A8CMZh0i1KQ=)
4: cyOHDX6p-R7TeKl3AMCjyWmNpk4.roa (hash: W3OD3F+yUOacAe6j9rvFirA6hItGmVMl9cfQaStd7go=)
5: nqDs6IBSsGkgCywT3ZE4Bi2t0zg.roa (hash: jSua4IrdLnQ0ENUU/6d8+tEc1mSQ1r36KeH+Mj/aKtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:33:a3:da:31:3a:f4:6e:4f:ce:4a:2b:5c:f1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Validity
Not Before: Mar 26 01:01:33 2026 GMT
Not After : Mar 27 01:01:33 2026 GMT
Subject: CN=9d1033dac6d5cd30dbb0d912a8c46a679c8b543a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:ab:d0:18:70:f9:95:5e:dd:b7:0a:37:01:
87:e4:04:f9:65:ba:79:45:29:0b:b7:95:da:a9:8c:
29:b9:ff:81:43:06:d9:ce:b9:8e:60:17:38:86:52:
14:4a:ed:8f:c8:e0:36:ae:ec:3b:ed:33:a2:a2:6f:
90:e5:d7:95:0d:a7:7d:08:c1:be:d2:d9:cf:40:1c:
13:12:bf:1e:1d:7e:3e:7e:ff:41:16:bc:1d:8e:ce:
9f:fc:5b:53:42:03:61:7b:0d:ae:32:3b:c6:60:2f:
3a:e8:63:07:cc:45:7e:e0:5f:81:0c:ce:6c:a7:3a:
c6:dc:3c:09:2e:1e:a8:a7:90:72:3a:ac:b0:ef:de:
68:d4:e9:68:49:d8:8f:da:36:a3:73:ef:5a:d5:d0:
60:97:95:1e:59:71:a4:3b:33:69:f7:b5:55:07:fb:
1b:96:89:9f:cb:81:63:15:ce:d6:eb:1c:8a:f2:50:
d3:30:aa:b0:b2:e5:2a:79:c7:56:d5:8a:88:62:8a:
6a:03:4f:98:ce:7c:ce:03:17:81:34:76:73:fc:31:
83:3e:1f:9b:53:eb:2d:e1:6c:a3:bf:5e:b7:a2:ae:
95:60:5a:2b:00:5d:aa:71:ca:3f:a9:41:f6:d1:9f:
9a:f3:e8:c0:c8:cc:40:ff:83:6c:e1:e1:48:89:1a:
77:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:10:33:DA:C6:D5:CD:30:DB:B0:D9:12:A8:C4:6A:67:9C:8B:54:3A
X509v3 Authority Key Identifier:
keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f2:4c:d3:e6:d8:d5:e0:70:1c:c0:18:6a:88:1b:00:54:15:
b0:bb:fd:7f:32:91:21:5d:f7:53:96:10:f4:00:d2:e2:4b:9d:
55:9f:3f:c3:2c:54:3c:00:08:b3:3a:e3:95:64:7f:2c:57:73:
a4:fa:6d:2a:7a:b0:e1:9d:c5:ad:e8:b8:fb:c9:f6:c2:2f:3a:
fb:9c:d7:54:b2:a5:54:9f:87:c4:6c:25:67:a1:b7:f5:71:44:
66:e2:ad:a5:48:73:71:b9:ed:3b:9d:95:a2:69:ca:8d:69:61:
07:89:47:30:88:54:7f:72:3c:7f:fa:df:87:55:c4:8d:bc:34:
1d:c6:07:7c:fb:32:3b:03:62:1c:6b:49:cb:fd:0c:9a:93:54:
80:ec:5b:af:85:5b:90:1d:ee:9d:b1:da:02:29:25:f6:81:95:
73:fb:f5:ff:6e:0a:5d:53:db:1f:f2:5c:7c:16:c5:4f:b3:57:
68:73:3c:c2:21:ba:c5:fb:ad:3b:63:1f:18:d0:7c:da:9a:4a:
66:e9:80:50:7e:2f:4d:f8:ee:be:bc:07:80:f0:45:a6:dd:b9:
a1:67:04:53:93:ab:80:5f:41:22:b2:b4:68:af:12:9a:16:af:
52:71:fd:89:89:d2:29:42:42:1f:4a:61:13:b5:f2:ec:9b:80:
ac:61:39:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:11:13 2026 by rpki-client