Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: Rd11pPFp6plGi4//Px6tEcE9A5Iyg4vy3KNwbmiopo4=
Subject key identifier: 64:2C:FA:61:7F:D6:88:CD:31:8D:8A:50:5E:12:6E:B2:9D:E9:1C:53
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 019D2704B187EB72C1D05D6DA6CCCF273990
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 11E2
Signing time: Wed 25 Mar 2026 22:01:52 +0000
Manifest this update: Wed 25 Mar 2026 22:01:52 +0000
Manifest next update: Thu 26 Mar 2026 22:01:52 +0000
Files and hashes: 1: 39jtKCjlUN84oiSNf6WcfKXutcI.roa (hash: j3QkvAZ9jfUhKAEv42rUncts5G9mchS++JOlncvf+58=)
2: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: 4oQ+8401X5wqAbyjWN20KmhbDmD88ALVKQ4FeJI+fd8=)
3: gEJ0St6-Q6X616CehkYkAAcUVUU.roa (hash: xRtGhqToXHk+tebor8v12gpWXnwDMSVJLn1tv9kRK/M=)
4: kfIkh8JRl0CLg8N2X34fKzfAAIY.roa (hash: LNo3ChQs7isxQdfvX/1Vp1a9WnepBnzSUSjWncB8U/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b1:87:eb:72:c1:d0:5d:6d:a6:cc:cf:27:39:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Mar 25 22:01:52 2026 GMT
Not After : Mar 26 22:01:52 2026 GMT
Subject: CN=642cfa617fd688cd318d8a505e126eb29de91c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:f7:c6:b4:31:ac:83:08:77:41:8f:92:b3:
6c:de:93:c7:49:cd:36:3d:03:70:cd:5a:16:16:fe:
d5:16:ee:4a:7e:92:3c:d9:cd:71:8c:1a:04:06:70:
87:79:96:4f:9c:d0:6d:91:0d:c4:8a:df:30:a7:83:
d5:8a:f7:06:2e:77:5f:26:f5:7a:97:53:09:98:aa:
13:4d:26:bb:78:49:f7:e9:eb:9d:1f:8a:d4:22:8a:
3b:a0:f1:57:9e:dd:d9:a8:df:60:a8:bb:69:40:7d:
85:ce:75:00:81:ad:77:0b:71:07:6e:c9:98:37:54:
d7:f7:c1:d7:59:ac:fb:ca:6c:13:45:1e:dc:5a:21:
cb:e6:99:b5:78:90:fd:e5:75:51:15:ee:52:17:27:
9c:a3:c9:99:15:f6:29:dd:03:9c:27:95:9a:1f:7a:
c6:73:95:7b:54:bc:66:0c:43:ce:0f:ee:47:aa:f3:
8d:a6:5f:81:8d:40:3a:7d:39:fb:fb:06:38:2f:70:
c0:4e:4e:ba:11:c4:37:71:45:e9:11:87:50:11:ce:
50:96:a1:7e:1b:c4:03:d1:0c:9a:b3:86:29:78:a0:
65:cd:5f:99:a5:9c:76:f8:41:47:90:ee:70:08:d0:
8a:54:44:4b:f8:7f:33:8e:1e:78:fc:1e:c9:d3:89:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2C:FA:61:7F:D6:88:CD:31:8D:8A:50:5E:12:6E:B2:9D:E9:1C:53
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:44:5a:dd:26:27:ec:be:07:25:44:cd:50:55:07:f7:43:d1:
e4:d9:0f:34:58:6a:5e:81:6f:3f:7f:c9:25:d6:1d:53:13:cb:
b4:49:4b:b6:ff:79:9a:8f:9b:25:0b:84:b1:b1:84:69:2a:ed:
c2:08:2e:eb:44:05:5e:00:a8:92:c5:d1:15:17:41:82:e6:9c:
e9:f1:d0:35:60:be:ea:0a:f4:4d:15:3b:52:9d:b6:cf:b8:bd:
58:28:98:6c:8f:c2:b9:8a:27:29:00:f0:19:7a:03:85:0f:94:
34:e9:82:fa:bf:6c:bb:a6:7e:40:0f:db:2c:08:0a:32:3c:d6:
13:b6:bf:f4:b4:f2:e4:de:5a:ee:fe:25:80:a3:90:75:c0:a7:
62:bd:6f:d0:bd:ca:0b:a2:e7:de:cf:fd:7c:3d:fd:14:74:37:
d7:62:64:3e:9b:ce:fa:00:1b:d8:d3:79:17:0a:6e:c2:f8:21:
39:a7:1e:58:32:07:1c:b7:86:0e:61:8b:36:8e:e9:33:4b:2f:
56:13:cd:b1:1d:e5:12:1a:6c:db:47:27:ee:ac:bf:25:8a:cb:
23:22:64:9c:d6:c7:3e:e9:2d:30:dc:84:78:39:44:2e:de:61:
b3:c5:d9:7b:92:41:2a:5f:7b:b0:92:4b:a3:c8:28:54:64:db:
c3:30:5d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:24:16 2026 by rpki-client