Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft
File: mk2qT2rA5rwQK2iECirGu1QbQPw.mft (raw, json)
Hash identifier: PSxzWxYbWaBlpHR3ixWTa0/KCHKV+m0dVUBC1dCp9Ts=
Subject key identifier: B1:0F:91:12:45:9A:AD:91:1B:B0:6C:74:12:11:61:42:FC:09:E8:B2
Authority key identifier: 9A:4D:AA:4F:6A:C0:E6:BC:10:2B:68:84:0A:2A:C6:BB:54:1B:40:FC
Certificate issuer: /CN=9a4daa4f6ac0e6bc102b68840a2ac6bb541b40fc
Certificate serial: 019D2A0466F717F07CA047A63144E8FFCD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mk2qT2rA5rwQK2iECirGu1QbQPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft
Manifest number: 087E
Signing time: Thu 26 Mar 2026 12:00:24 +0000
Manifest this update: Thu 26 Mar 2026 12:00:24 +0000
Manifest next update: Fri 27 Mar 2026 12:00:24 +0000
Files and hashes: 1: KIWGoOwTd_0to3ZfSp61C8HKyu8.roa (hash: zO+QGlqWRre1WYpcK0kFybtzqC8LgSXdzrWLa3l1LOU=)
2: mk2qT2rA5rwQK2iECirGu1QbQPw.crl (hash: pwyakpDIRKgWdorjbiuFpHZpj8plOlD6hOWbws/Ah6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mk2qT2rA5rwQK2iECirGu1QbQPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:66:f7:17:f0:7c:a0:47:a6:31:44:e8:ff:cd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a4daa4f6ac0e6bc102b68840a2ac6bb541b40fc
Validity
Not Before: Mar 26 12:00:24 2026 GMT
Not After : Mar 27 12:00:24 2026 GMT
Subject: CN=b10f9112459aad911bb06c7412116142fc09e8b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a6:f7:d2:4a:4a:bc:43:05:55:2d:58:b9:05:
1c:67:44:58:51:be:73:03:1f:93:80:28:05:3c:01:
3a:26:11:6e:f2:4a:fa:70:05:b1:11:52:97:2b:c9:
19:57:e3:e9:59:44:5f:fb:73:91:36:35:2d:bb:06:
00:09:85:91:a3:70:d8:67:85:bb:19:e8:9f:bc:eb:
03:68:a3:cf:2b:dc:38:06:19:82:87:71:33:4a:63:
08:49:87:3e:0e:b4:1e:ef:83:51:cc:11:dc:4f:50:
64:6a:54:de:e0:1e:8a:9a:a8:ff:f1:fc:18:56:e8:
76:43:26:0c:02:44:b4:67:2a:ff:80:a0:90:3d:d7:
58:89:9a:02:1f:5e:76:38:0e:05:43:9a:7f:ed:96:
42:21:8e:34:0a:fb:2f:e5:d1:ad:dd:48:a3:31:d2:
9b:dc:47:6d:8d:09:73:7d:3b:67:3f:60:28:9c:c0:
a6:05:c6:43:b2:df:a5:f5:84:3b:f8:ef:d4:20:2c:
a6:83:98:1b:0c:c1:24:19:98:47:de:c5:9b:e7:75:
d5:cf:57:eb:ab:19:df:cb:a7:77:ce:6b:c9:be:4d:
12:cb:5d:e6:3b:eb:a1:67:90:bc:c2:48:9c:63:71:
10:38:cd:c4:42:bf:27:55:57:91:29:a0:bf:49:32:
c1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0F:91:12:45:9A:AD:91:1B:B0:6C:74:12:11:61:42:FC:09:E8:B2
X509v3 Authority Key Identifier:
keyid:9A:4D:AA:4F:6A:C0:E6:BC:10:2B:68:84:0A:2A:C6:BB:54:1B:40:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mk2qT2rA5rwQK2iECirGu1QbQPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/cd4624-620a-4cb2-a416-6be92b1aa8b3/1/mk2qT2rA5rwQK2iECirGu1QbQPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ae:89:2c:8a:f1:d5:68:ba:a0:e6:1c:58:2c:92:53:0c:c1:
da:92:29:aa:ac:ec:1f:1d:38:f8:f1:bd:14:00:e9:4f:80:fe:
9d:2a:5d:6b:ee:9d:69:df:c1:e2:f5:26:61:00:c5:42:36:49:
73:e8:97:72:a9:a5:9c:58:9a:ca:d2:5f:cc:07:95:04:f9:c2:
a2:62:9a:4f:c1:66:a2:57:36:04:36:b7:fb:91:c1:d0:9f:0b:
3a:0a:9c:88:19:64:41:fa:66:48:6e:52:49:fc:df:61:7b:36:
c5:de:9e:fc:fd:99:37:b0:f7:d5:36:06:a5:8a:31:11:13:84:
ec:db:f4:5e:29:a8:e4:ee:75:2f:1a:98:f2:29:59:d9:9a:ee:
1d:e3:db:10:72:9b:ef:0d:9b:4b:c1:5e:42:12:f3:02:7e:2b:
e5:bf:29:a4:4b:90:0b:7b:e7:29:71:66:51:83:ab:5d:a7:d0:
b5:50:02:f3:f3:0d:b1:82:9d:d6:42:1d:78:93:33:bb:95:46:
01:a5:1a:c6:5d:3e:df:84:81:18:15:26:0e:ef:cb:38:c5:dd:
68:cf:37:be:4c:ab:25:d6:da:e9:e9:14:27:39:63:b4:a3:a5:
fc:32:f2:b4:19:a0:c6:06:51:93:f3:e4:3c:51:aa:d8:1a:08:
ba:60:ad:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:15:30 2026 by rpki-client