Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
File: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json)
Hash identifier: /EkDZYrbp+B8wnNjTS5eRZio93xFFbUa3NbgnT9JjKw=
Subject key identifier: C6:65:5D:B8:79:91:09:45:34:99:00:3B:80:22:0E:E5:2C:07:21:98
Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Certificate serial: 019D28168A6E72D5F0CDDF55A28E177DF557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:00:58 +0000
Manifest this update: Thu 26 Mar 2026 03:00:58 +0000
Manifest next update: Fri 27 Mar 2026 03:00:58 +0000
Files and hashes: 1: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: LwntFWMKLaigcEww6B/Q9Wz/JCCttRqFB0lbrq0PHrA=)
2: xa8hNYnY5YtZ3lvhBoGXHaoWdZs.roa (hash: cfTBRZqteMXbej9rAKnDcge1IuDIIPwXFt2wZ9TtEP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:8a:6e:72:d5:f0:cd:df:55:a2:8e:17:7d:f5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Validity
Not Before: Mar 26 03:00:58 2026 GMT
Not After : Mar 27 03:00:58 2026 GMT
Subject: CN=c6655db8799109453499003b80220ee52c072198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c3:35:e3:fc:88:50:eb:a1:40:d9:9f:06:ad:
57:fb:09:c7:8c:47:71:50:da:7d:93:62:a8:59:e2:
b8:87:08:59:a1:99:42:86:5c:ca:b7:96:bc:d4:25:
4d:3a:69:04:a1:5b:ea:eb:8f:84:65:de:99:d0:b4:
a1:a2:a3:f4:3c:28:00:9b:88:c5:d0:e0:d4:85:21:
17:e5:ff:de:49:e6:d1:00:23:37:dc:a4:46:66:3c:
eb:24:41:2a:60:5e:5d:a5:a1:3c:3b:28:e2:74:68:
60:4f:a8:f9:2a:08:62:87:7d:3e:0c:27:ba:a2:59:
75:71:18:40:73:10:4b:43:c8:ce:dc:83:f0:e5:e8:
23:d9:f9:63:a9:8f:7b:c0:9d:a7:c5:8d:c8:27:03:
ca:37:31:77:f5:81:a0:95:6c:f4:4d:52:6b:e6:f0:
6b:d0:e8:4b:3f:4f:dd:9f:e9:27:d7:08:71:db:19:
e4:bb:bb:ee:25:67:4a:75:0a:8e:a3:8b:f4:dd:1d:
39:bd:0e:56:86:eb:d9:b3:00:6d:b7:f2:47:0f:f9:
44:50:5f:5a:1f:32:75:f2:48:ee:aa:4f:f1:ac:35:
aa:89:c1:15:97:b9:15:0e:68:aa:d9:f1:3b:30:47:
50:4d:0a:91:fb:5a:3d:75:23:df:55:37:f6:09:b5:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:65:5D:B8:79:91:09:45:34:99:00:3B:80:22:0E:E5:2C:07:21:98
X509v3 Authority Key Identifier:
keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:25:e8:b0:75:78:65:c7:9f:3c:96:a6:e6:a1:d0:04:a6:c5:
24:22:94:01:fb:df:49:f3:83:8b:ee:c3:91:6a:06:9c:96:e4:
6b:da:44:40:b6:c3:08:c6:9d:c0:c1:5e:a6:af:7e:be:c4:51:
be:81:ec:d3:83:68:af:25:60:96:29:45:58:f9:cb:a0:6f:47:
ea:6e:a8:98:c4:af:ab:0d:0d:f2:10:26:12:46:93:3c:3a:81:
60:1e:82:9a:36:7a:f9:12:f8:41:5c:ae:99:bf:20:94:10:6c:
3a:dd:38:49:6f:e1:b2:0c:db:d9:fe:79:a5:55:3d:2e:3c:cf:
b4:36:e6:be:96:a3:ff:59:4e:63:05:59:96:4d:60:82:cc:e7:
d7:2e:5d:9c:71:5b:63:f1:3e:e7:f4:b1:20:d3:bb:a3:26:26:
50:5c:e0:42:ff:1f:39:f6:7d:ab:21:48:0e:5b:36:4c:c9:bb:
2c:f3:cd:f7:65:a4:a9:dd:c3:c3:95:8f:15:e5:aa:9e:59:f2:
a1:5a:b9:db:d5:9c:08:fc:13:d7:25:01:f6:e8:a2:4c:fa:44:
03:6a:ec:eb:41:cf:14:4a:cf:f9:7c:fd:fe:c7:9b:8b:33:b6:
23:8e:76:bd:6e:42:cf:3f:ea:4d:82:36:d6:6e:a4:63:15:38:
43:9b:20:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:54 2026 by rpki-client