Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
File: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json)
Hash identifier: m2RvnlF2bTn9dOE4Rtr+W2G8RIHiNKEUx66U70TkXLQ=
Subject key identifier: 9C:FA:C4:0C:69:E8:B4:AF:37:9F:52:C5:14:5C:39:C8:C2:E5:D7:E9
Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
Certificate issuer: /CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Certificate serial: 019D2961210DAF25142D80A68E0CA998942E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
Manifest number: 1837
Signing time: Thu 26 Mar 2026 09:02:04 +0000
Manifest this update: Thu 26 Mar 2026 09:02:04 +0000
Manifest next update: Fri 27 Mar 2026 09:02:04 +0000
Files and hashes: 1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: ujSAE0lyMUDeKLK0/vwZqOKRnb8AodTeREZzg/dQLYk=)
2: ezywn8EPx5ODLOytvX7dXsPm7gc.roa (hash: geqaFC8LHCTX2LcxH4kfFFCGPOyVbzF9N0haayABzHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:21:0d:af:25:14:2d:80:a6:8e:0c:a9:98:94:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Validity
Not Before: Mar 26 09:02:04 2026 GMT
Not After : Mar 27 09:02:04 2026 GMT
Subject: CN=9cfac40c69e8b4af379f52c5145c39c8c2e5d7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:d1:c2:ec:4a:9a:66:cf:ba:d9:43:b8:3b:
f6:cc:d2:31:ed:e7:0d:54:62:e4:8a:c0:3c:06:7d:
c6:b8:f0:a7:7d:d5:70:20:8b:ed:57:af:32:dd:d5:
0b:8e:2c:a3:1a:29:8f:57:53:11:47:09:78:11:b5:
42:de:de:2c:e9:7c:4b:33:6f:d7:07:18:52:ab:0d:
aa:58:f8:d0:42:e1:05:3d:35:1d:d3:34:b3:4c:c2:
d4:10:36:b0:f8:1a:d6:1d:1b:a8:31:0e:c6:9e:7e:
88:8f:73:90:09:07:24:93:29:3d:f1:de:e0:65:ab:
ca:98:89:de:83:67:5a:e6:fc:33:75:db:49:40:aa:
ab:94:23:f8:a9:f7:45:fa:29:16:51:62:37:53:0c:
92:f1:88:69:76:f2:e0:3b:21:79:ca:47:93:34:e8:
9f:ad:52:07:14:2d:6f:8f:03:7c:f4:87:3a:5d:23:
f3:e2:51:1c:41:0d:ca:bf:8f:83:12:44:75:73:be:
74:2f:81:53:ee:44:c1:4b:17:33:d0:cb:e5:90:95:
44:01:07:05:df:37:38:99:ff:c4:0f:c9:18:54:17:
2f:d1:fb:fd:70:28:18:2a:b2:94:b0:be:36:2a:22:
d1:cc:03:1d:da:02:da:57:e2:8c:ec:82:e8:67:0a:
c0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FA:C4:0C:69:E8:B4:AF:37:9F:52:C5:14:5C:39:C8:C2:E5:D7:E9
X509v3 Authority Key Identifier:
keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b3:2a:e9:e2:1d:d5:da:ee:0c:d8:83:ed:a5:75:19:4a:57:
63:83:06:61:4a:55:71:30:06:59:40:50:e6:c8:f0:2b:0a:0d:
98:e9:a5:56:4b:33:a2:80:13:c6:00:17:f0:a0:56:b1:61:bf:
43:a8:18:92:78:8e:3e:25:ad:3b:f8:f8:67:6f:9d:68:dd:9b:
d8:4e:80:32:98:a0:e8:30:ba:cd:f4:4a:59:5c:12:18:4f:db:
ca:f6:ca:72:b6:a3:f8:c7:df:84:34:e3:8e:b5:a1:25:5d:46:
65:2c:bb:92:e1:ac:e1:6a:ee:e5:90:3f:da:de:20:77:91:cd:
cf:07:c5:37:b1:01:51:2f:21:c9:c7:0e:f7:42:0f:23:65:24:
2b:34:b4:1f:56:7b:b1:86:cd:26:71:be:1a:78:70:58:38:9a:
65:af:d5:63:2d:fc:86:ca:0d:85:78:1c:8d:e1:f5:22:bd:ec:
b7:42:0f:c9:90:ec:98:8f:c8:50:a9:98:cb:b0:75:51:f3:ba:
35:61:d1:d3:50:b4:14:f0:49:70:49:7f:25:e3:07:e8:12:ad:
c3:34:25:88:2a:1e:54:41:7d:15:ee:f7:06:19:1c:fc:a1:a0:
60:b7:40:ab:5b:b3:22:b8:e5:83:84:04:81:15:8f:e8:a8:4f:
dd:04:16:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:13:27 2026 by rpki-client