Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json)
Hash identifier: NubRWNv/CNK8OpMwQyl8thhdZnHDMzdZq4TVd5hANlg=
Subject key identifier: DF:E9:0F:6A:23:5F:66:BA:CC:C0:2A:09:BA:BA:76:9F:B4:F6:42:91
Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Certificate serial: 019D27A8EBE692701DEF1441B30B8BE7D212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
Manifest number: 188D
Signing time: Thu 26 Mar 2026 01:01:14 +0000
Manifest this update: Thu 26 Mar 2026 01:01:14 +0000
Manifest next update: Fri 27 Mar 2026 01:01:14 +0000
Files and hashes: 1: EeZP-5SHSEawYdE6cDHYPsGpsC4.roa (hash: AP7Fyhfq5/WIxTZ9Gig6bft8IGMBLH4JkZ4O2XoWirA=)
2: FiH_Dv9KRA9mEtdQJUxihReFF1c.roa (hash: LloMKXL1qJtQXFFrKg1pWHguOKrDmgj1zA46ZODHmzI=)
3: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: oxO0zOK33vDrInMV4CfNZELz4pbDMXr7nmkL2k50CBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:eb:e6:92:70:1d:ef:14:41:b3:0b:8b:e7:d2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Validity
Not Before: Mar 26 01:01:14 2026 GMT
Not After : Mar 27 01:01:14 2026 GMT
Subject: CN=dfe90f6a235f66baccc02a09baba769fb4f64291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:17:23:cb:bf:36:d9:e6:d7:2d:62:d5:45:d8:
ec:65:47:a6:7c:7d:46:d7:5e:1d:53:1d:3d:52:0f:
6f:f8:d0:cf:8e:e3:1d:e0:cc:88:a8:4e:56:46:5f:
b2:a1:bb:3d:9d:65:dd:eb:b1:95:67:3c:dd:e5:a4:
cb:ce:78:10:86:2b:a5:dd:6f:de:7c:f1:e0:1d:28:
da:95:fe:17:fe:b8:d5:4c:11:4a:65:06:99:dd:6f:
91:fb:50:9c:9b:ea:f8:ec:9e:e4:7d:4b:f4:63:06:
6d:b0:e9:30:75:63:9b:c7:1a:71:9b:d5:3b:0b:d2:
83:50:c3:73:16:7d:d0:9b:58:d0:cd:84:9b:8b:34:
7d:dc:56:ef:31:b0:56:a5:e7:af:96:ca:3d:5a:52:
b5:50:f5:56:8b:4c:34:24:ae:ef:ce:11:ce:29:b3:
78:a1:93:43:95:ba:41:a9:63:7b:b4:6d:79:93:4b:
5e:ac:31:a0:10:92:87:3c:05:a8:55:ba:55:d5:25:
ad:38:f6:b8:80:7e:a1:fb:ec:b7:f7:0f:76:be:ea:
83:f0:3a:30:f7:71:5d:87:23:a2:52:68:30:40:f6:
ec:30:06:f5:7f:66:bc:ef:01:6d:7a:3c:85:19:c1:
78:62:57:29:50:20:ba:75:b7:3a:bd:4d:29:83:63:
23:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E9:0F:6A:23:5F:66:BA:CC:C0:2A:09:BA:BA:76:9F:B4:F6:42:91
X509v3 Authority Key Identifier:
keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8f:76:db:16:76:7f:b5:e4:a8:e1:d9:ed:cf:0e:e4:d5:dc:
c9:5a:bc:2e:86:d8:17:68:aa:ec:42:71:c2:92:bb:6b:62:d5:
a0:74:7b:b3:e7:6d:29:3a:be:41:42:5c:1b:8e:1a:02:98:ed:
7d:58:50:fb:8c:fb:40:4f:3d:da:51:f6:f6:28:b5:82:8e:61:
4f:b9:72:72:27:25:8c:1c:77:a2:12:ac:06:c1:25:34:e4:58:
8e:c7:18:43:54:27:b7:0a:80:ec:fa:55:8b:95:50:89:e7:5e:
8a:a0:7a:4f:23:ea:a4:62:2a:11:94:87:07:c4:c5:73:3a:e9:
8b:dc:ff:87:0c:16:bb:34:4f:49:cb:75:fc:fd:0e:4f:84:45:
b8:21:cd:4b:08:be:b2:73:5e:3f:e0:9c:6e:82:35:52:72:0f:
c9:96:8c:fa:f8:b0:09:7c:b6:22:c2:0b:9e:f6:a2:88:27:7e:
27:cf:af:75:9a:c5:2e:34:24:bc:9c:d4:a2:8f:a8:dc:53:38:
f6:fd:df:eb:f3:79:59:cb:61:64:a3:f1:5d:0a:1b:47:6a:db:
3f:35:e4:ca:20:d4:98:65:d3:c2:f3:a0:f0:fb:19:8e:e3:2a:
fe:b4:a1:d4:be:cd:34:e2:a4:c5:ab:93:74:ab:b0:ba:12:5d:
6a:10:af:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:08:29 2026 by rpki-client