Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
File: v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft (raw, json)
Hash identifier: 0jOtdSeE+McRfm1+9X2C0pdtEU/RV1vXinq0Qp15U3s=
Subject key identifier: AA:56:1F:0C:10:50:33:EF:3D:30:19:D8:DF:7C:3D:DA:28:01:F7:D0
Authority key identifier: BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
Certificate issuer: /CN=bf628b93661e905887359fc8e9a1888075db3cd8
Certificate serial: 019D27A890FD1D2B9A9ADD40A3D6CA4AC0A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 01:00:51 +0000
Manifest this update: Thu 26 Mar 2026 01:00:51 +0000
Manifest next update: Fri 27 Mar 2026 01:00:51 +0000
Files and hashes: 1: 5PEM24BMPrcvxY-cL8Z6QKGwr1U.roa (hash: 9iefR/dFPM3ozUCII4KvIo+RC9gYE16NJW6hpn8+KmU=)
2: v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl (hash: 62XeihGtj8bsDlF9d6O0TVR3hfVz+ruw6vk83yXGuTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:90:fd:1d:2b:9a:9a:dd:40:a3:d6:ca:4a:c0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf628b93661e905887359fc8e9a1888075db3cd8
Validity
Not Before: Mar 26 01:00:51 2026 GMT
Not After : Mar 27 01:00:51 2026 GMT
Subject: CN=aa561f0c105033ef3d3019d8df7c3dda2801f7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:03:d4:d7:ba:84:73:64:cf:bf:d7:b1:63:c6:
be:2a:14:c5:dd:aa:af:17:e7:04:45:cf:69:d6:a8:
e9:fd:4b:94:45:b1:60:c3:46:d3:fd:e5:ef:98:f2:
34:72:36:9a:15:a0:3e:2d:ee:89:f8:83:4b:bc:a3:
f7:3e:1e:77:f5:6c:1e:19:a2:2f:53:b3:5d:9a:52:
e8:60:fa:22:13:e7:de:ec:0a:5c:68:fa:28:5c:16:
48:87:48:90:bd:95:16:cf:1f:bd:b9:aa:07:20:de:
6e:90:3f:a9:3f:fc:2e:65:e6:02:21:29:65:6b:2b:
f6:b1:0c:99:8a:19:9f:35:a9:ab:3d:72:2d:8f:d3:
e9:a7:13:a8:49:f3:f5:5e:2e:a0:da:20:ea:f4:75:
eb:fd:45:15:db:68:fe:4a:74:c5:4e:bd:30:84:80:
97:53:03:85:56:ea:fb:99:e6:6a:15:1a:f7:97:c1:
24:3d:e7:d1:b9:06:28:e9:de:cc:2d:2b:cd:53:06:
5d:35:41:0a:36:c6:c7:b6:bc:e2:4b:ff:87:6d:d8:
fd:e1:0a:90:5d:04:24:4c:c9:f2:17:30:44:72:49:
53:b5:98:7e:53:70:6c:11:3a:a5:00:c1:c9:e7:73:
eb:9e:21:ed:01:2f:3a:9b:29:13:eb:99:df:09:6d:
39:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:56:1F:0C:10:50:33:EF:3D:30:19:D8:DF:7C:3D:DA:28:01:F7:D0
X509v3 Authority Key Identifier:
keyid:BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a2:94:41:c7:84:74:2a:df:f6:c2:7b:68:a7:79:d4:48:85:
62:c9:e7:47:56:08:08:3d:78:de:cd:ce:80:45:c9:a2:59:c1:
fd:de:51:4a:bf:01:da:ea:aa:86:8f:08:01:a5:f6:92:30:1e:
04:ee:39:91:89:e3:18:01:a1:3f:41:d2:9e:bf:e3:b0:95:29:
8c:14:71:9f:99:e5:81:ee:eb:ca:7b:e8:a3:2f:46:fe:ac:c9:
67:35:0e:d6:d1:a4:ab:2a:34:e6:f5:46:14:4d:06:15:ea:98:
cc:3b:c9:02:13:2b:69:2e:de:c7:3a:64:0f:54:70:47:be:aa:
76:5f:af:e1:6e:71:04:1b:6e:94:08:04:12:b2:94:1f:20:83:
ce:5c:4c:c8:a1:71:b4:59:ed:87:26:2a:99:7d:be:4e:3a:fd:
5f:cd:d6:67:34:55:93:11:ba:4b:fa:1e:a9:84:1e:8b:41:cc:
c0:c7:8b:a1:8f:92:2c:2b:90:f1:fe:cd:f5:aa:3a:fb:2e:6f:
61:d2:6d:2e:dc:f7:f1:ce:96:79:1d:99:47:43:db:dd:cb:a5:
8b:cd:8d:be:c5:f4:7b:1e:87:c2:33:45:cd:7a:bb:cd:12:e0:
2b:7c:8a:5a:84:7d:a3:32:34:b5:6a:42:19:da:28:cf:2b:cd:
51:92:e8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:17 2026 by rpki-client