Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
File: kR2gx6mUBcRrqthMudk-g0WZyOE.mft (raw, json)
Hash identifier: RlMZZCt4+wStMfHCXI6ldwkj245DL0lmLE/r1uBv3Js=
Subject key identifier: 13:5B:CE:13:9A:84:4F:7B:4C:EF:3C:73:EE:0F:1F:E1:A6:4F:5C:4D
Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Certificate serial: 019D299748DA130E8E78AA9F3CA80892963F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 10:01:13 +0000
Manifest this update: Thu 26 Mar 2026 10:01:13 +0000
Manifest next update: Fri 27 Mar 2026 10:01:13 +0000
Files and hashes: 1: 0kE9whcbqDZPFxCT664hh63BKUs.roa (hash: 5C4ga/+QHi4o11rdDpXGfOfWtVfwE8VOC9vvm4vn/b4=)
2: kR2gx6mUBcRrqthMudk-g0WZyOE.crl (hash: gpbRV4c9EkbQd99HOlpXKwUxTr2PU+CcNjsdn8tXuGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:48:da:13:0e:8e:78:aa:9f:3c:a8:08:92:96:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Validity
Not Before: Mar 26 10:01:13 2026 GMT
Not After : Mar 27 10:01:13 2026 GMT
Subject: CN=135bce139a844f7b4cef3c73ee0f1fe1a64f5c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:34:0f:b3:e3:79:9d:db:fc:cb:b7:6c:35:
06:14:4e:40:38:23:76:f6:c7:d0:73:61:85:ee:62:
81:48:b3:a9:2f:bb:0d:72:d0:b9:18:e6:71:7d:91:
28:aa:98:51:8c:40:b0:6e:0e:b1:3b:79:54:07:5e:
df:29:de:61:79:93:ab:63:bc:b8:a8:86:2c:1d:f2:
9e:8b:67:46:95:6a:c3:3a:73:81:70:ee:c1:1b:a4:
52:50:9c:f0:b9:58:81:52:7c:49:a1:be:5b:a3:f9:
81:b9:53:b7:5a:d8:23:0f:b6:5f:9c:57:70:fc:5a:
6d:59:8c:10:bc:9c:bf:9e:21:97:1c:3a:ab:ab:aa:
4c:a9:a5:c4:c1:c7:31:ac:44:da:5a:51:6f:f5:86:
20:b9:9d:14:92:24:9b:ed:b2:56:75:a0:ab:f0:e4:
c8:01:bf:4b:d2:44:44:c1:93:53:ea:da:e6:2d:95:
e3:04:13:27:0a:ee:60:ae:02:e4:e9:c7:59:0c:33:
2b:cb:2f:99:ec:39:39:f0:dd:76:7b:9c:b3:d7:e5:
b4:c6:01:76:b9:b9:5e:64:73:43:8a:53:46:30:87:
03:87:ff:31:c1:3a:64:ed:a6:a4:81:6a:31:24:51:
9d:a4:5a:c0:3b:1e:7b:9d:87:05:bb:0f:d0:6c:89:
f6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:5B:CE:13:9A:84:4F:7B:4C:EF:3C:73:EE:0F:1F:E1:A6:4F:5C:4D
X509v3 Authority Key Identifier:
keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:96:1f:14:d3:22:49:ed:4b:68:66:9f:fc:20:6d:c7:77:c0:
3b:6a:74:e5:dd:c9:af:ff:8a:4a:a2:b7:8a:ac:d8:07:a3:ba:
35:8d:c5:22:5c:d0:b7:60:80:d3:d1:a1:39:3b:d2:b7:db:7d:
6f:06:17:64:37:e7:4f:a1:c7:c4:69:a1:3c:d9:e8:d8:ad:61:
0e:91:f2:04:df:f6:9d:94:8f:da:c1:0e:06:5f:cf:0f:8c:63:
5b:b5:61:a4:2c:64:3b:b2:ed:d6:48:a4:a5:56:e9:6b:0d:13:
4b:21:1c:96:5a:ce:cf:f8:de:c9:31:16:41:5e:43:2e:d2:4f:
15:d3:63:88:91:92:cc:bc:88:55:93:43:0e:50:d0:a7:9d:4b:
3b:01:9d:9e:57:3f:e2:62:ed:e5:be:b1:d0:e6:d3:d5:6e:f2:
49:f4:a4:6e:9b:2e:1a:9d:42:53:84:2c:e8:f1:83:a3:27:73:
42:19:39:d4:13:19:96:26:47:eb:eb:81:30:ed:8a:7d:9f:2a:
b6:ab:5b:83:db:eb:7c:1e:ff:05:45:86:0b:27:bc:91:a7:6b:
43:ac:7d:f9:38:ff:91:70:86:87:ba:86:eb:b0:34:59:e8:9e:
cf:74:5e:d6:db:a8:41:12:98:d1:f9:eb:86:ab:59:82:d7:23:
a9:39:e1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:27:21 2026 by rpki-client