Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
File: x2v2t4G8-MKACKjo_d5g564xIqo.mft (raw, json)
Hash identifier: hq2iGjkzg+GBVjyQ1hOaAooQolWw0Z9mrnnw7TKksBA=
Subject key identifier: 6E:3F:61:F1:06:8C:C6:E3:C5:00:0C:0A:BE:CD:F1:F9:71:28:42:15
Authority key identifier: C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA
Certificate issuer: /CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
Certificate serial: 019D26CD4D1412AE3F88AE225D03D7767E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 21:01:21 +0000
Manifest this update: Wed 25 Mar 2026 21:01:21 +0000
Manifest next update: Thu 26 Mar 2026 21:01:21 +0000
Files and hashes: 1: Kt2R5igqZ7jgASRyGSnLXSO7qyQ.roa (hash: NygL3NUXK+uQ3D8358PTKE1x4Au6POhod3XQJw59Ke4=)
2: x2v2t4G8-MKACKjo_d5g564xIqo.crl (hash: 6gfdUEFXeIig8SUdkp/feTfQW7pAcZhac7u5I5+5GPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:4d:14:12:ae:3f:88:ae:22:5d:03:d7:76:7e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
Validity
Not Before: Mar 25 21:01:21 2026 GMT
Not After : Mar 26 21:01:21 2026 GMT
Subject: CN=6e3f61f1068cc6e3c5000c0abecdf1f971284215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:7a:d2:87:06:0f:ce:3e:7f:40:dd:05:bf:
84:7b:d8:f6:36:54:f5:16:fc:ed:5d:a4:11:85:c0:
5b:b3:ee:da:10:4f:9f:ac:3d:81:26:5d:f3:55:a3:
14:e3:05:08:0d:a2:91:a0:4d:c7:de:49:d4:32:20:
16:67:9d:fe:a0:c6:b1:4f:5d:cf:ae:00:ad:d9:64:
06:f0:f5:55:fa:28:a0:68:a2:82:58:f9:4b:ca:a3:
b9:85:71:1b:04:d3:7b:1e:83:44:ca:26:f6:c4:c0:
35:89:45:1f:e4:87:16:49:c0:7b:4f:d9:b5:5a:56:
b7:e3:06:cd:32:dc:ef:e9:26:8e:78:63:45:f8:6c:
f7:35:13:b1:be:69:c5:4c:d1:d1:4c:d5:fc:52:ee:
77:89:c6:9f:fe:a0:35:b7:1a:98:32:01:74:58:eb:
83:58:3d:36:8c:46:58:e8:78:18:06:63:35:2a:7c:
8e:02:6d:93:57:05:26:b7:f0:50:69:43:c0:b3:66:
40:9e:84:8b:e6:91:55:d2:ad:4f:e8:49:37:56:20:
c1:fc:a8:ff:82:3e:37:e9:ca:b8:78:ca:66:c7:16:
b7:a6:18:cd:14:ac:48:2e:c2:6c:b9:dd:22:d2:eb:
1a:5f:7d:d6:5e:8e:a1:56:fd:f3:49:ca:fc:4b:63:
cb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3F:61:F1:06:8C:C6:E3:C5:00:0C:0A:BE:CD:F1:F9:71:28:42:15
X509v3 Authority Key Identifier:
keyid:C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:47:e3:21:e2:65:ef:56:04:7f:34:7a:39:db:94:8c:30:d6:
2a:27:41:bc:0d:e3:63:08:2a:bf:01:ac:3e:fe:ea:17:14:b2:
d9:98:6b:16:56:f6:9d:a1:00:54:ea:0d:09:31:6b:70:85:d6:
4c:70:2f:cc:fc:5d:73:57:01:78:b4:46:44:f7:b0:52:5d:0d:
e7:e5:12:eb:9a:ae:6d:bb:67:53:0e:9d:bd:2e:1f:16:52:1d:
ee:28:94:76:c6:9c:70:eb:42:7c:61:9f:75:0d:d6:94:3d:b8:
b3:a0:d5:eb:19:d0:4b:05:09:bf:3e:24:38:78:a7:46:7c:9f:
1e:cb:58:38:cd:21:60:fe:97:fd:b0:67:66:05:10:85:10:51:
42:b2:d6:f1:da:1e:28:81:c7:54:da:cc:63:ac:14:74:2c:c6:
ce:ff:7f:90:00:3c:5d:1a:fb:b6:9a:90:43:ea:7e:93:4c:d8:
b7:c6:e9:a5:68:10:22:a1:7b:8c:04:90:0e:eb:5b:d1:56:87:
0d:85:53:ce:d9:c0:99:54:96:2d:da:59:b3:52:99:12:f9:a4:
9f:f7:7a:75:f2:92:e6:e9:c0:9c:03:a3:c3:a1:e4:93:e1:60:
e5:3d:34:33:39:87:b6:f5:89:d8:3e:41:ce:9d:6b:04:fd:a2:
c4:aa:5b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:41 2026 by rpki-client