Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
File: k2eWXig08Yk8-oYxpIQHHmotRbc.mft (raw, json)
Hash identifier: yx6n9apRU8DIyaX4Gs45uaU2N4h6lzPjt2HlcCcWOd8=
Subject key identifier: 1A:2D:1B:9C:67:65:17:FD:74:65:09:F3:A8:1E:29:65:B5:90:1C:20
Authority key identifier: 93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7
Certificate issuer: /CN=9367965e2834f1893cfa8631a484071e6a2d45b7
Certificate serial: 019D26CCCB5DF6EE28A5679063863090604D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 21:00:48 +0000
Manifest this update: Wed 25 Mar 2026 21:00:48 +0000
Manifest next update: Thu 26 Mar 2026 21:00:48 +0000
Files and hashes: 1: 3fvhaREkDO3VuOLRA_E1GBh4S-o.roa (hash: 6l9NRbgdW7DenxB2SQaQrFd5f9A2yMdFBNA5O54Sj28=)
2: RqeC-lEqwwGbXv0c_iSkOjlh-8o.roa (hash: vCkYLArZ5ul+aeZortHWIKKfOyz0MPr4+c1YhQ6yU6U=)
3: co-bLev1SnaGT-usk3NbjNZkD94.roa (hash: ZOkzjyj++1QpPpvtfzZuQWqrOOLowemna0EBSpzkij4=)
4: ekiBmXa0RGSr4fmLj-IxxPgeiEM.roa (hash: eWX+tVgJTLF60b66uE6DtiWXS3La4MG/eQB2P2txTgI=)
5: ilAJiyKbsAqFOQ_JKqGlXPXfCf8.roa (hash: xwlf3yj66pEBtvP5TAwZQdxxK7t2w8JC8Li0eh0CjRU=)
6: jBH-v3-X3v7RfFgWsNo2M_eSSNQ.roa (hash: pfJ9Bw5t7xlaIi72dAOVKIwZo35zjWk05kKgh9K9GuI=)
7: k2eWXig08Yk8-oYxpIQHHmotRbc.crl (hash: Alc8Hfsvx/Svfh1FX3mIrAf4IX7pZoA0uDPTJPWmy8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:cb:5d:f6:ee:28:a5:67:90:63:86:30:90:60:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9367965e2834f1893cfa8631a484071e6a2d45b7
Validity
Not Before: Mar 25 21:00:48 2026 GMT
Not After : Mar 26 21:00:48 2026 GMT
Subject: CN=1a2d1b9c676517fd746509f3a81e2965b5901c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:e9:54:cd:50:3e:f5:25:43:c5:61:24:e3:
07:17:3c:ef:a2:8e:bf:a7:d8:dc:41:e9:3c:45:25:
0c:95:a4:f6:dc:dd:a7:84:8b:d8:99:23:48:30:99:
dd:5a:6d:ce:f6:d8:d0:f0:b6:52:90:70:c1:0e:3f:
75:4f:e3:c1:5f:0e:b9:40:99:29:67:65:5f:4f:8e:
0b:80:4b:97:fe:38:dd:71:6e:d0:f4:f5:09:57:e4:
a7:30:6a:54:96:fe:a9:fe:4c:18:70:a9:15:8d:b0:
f3:64:aa:d6:82:e1:a2:6e:44:03:e7:3b:0c:7f:a0:
05:a6:78:c6:74:13:dd:c0:0b:14:c9:dc:b3:9a:fe:
11:89:99:c8:d3:3e:99:56:b7:ed:f5:fb:5b:47:b7:
08:b5:08:f4:18:b3:b5:89:75:c6:c2:74:69:37:6e:
e4:4a:8d:52:3f:61:6b:db:09:49:41:31:1e:b0:c4:
bb:34:ee:5c:e8:59:2d:cf:b6:0e:92:0a:bb:c8:4f:
29:d4:ba:58:bf:e6:9f:11:22:79:92:6d:f1:f6:08:
84:12:72:4e:1e:a4:e9:37:49:98:50:3f:84:2a:af:
af:dc:18:b7:d2:0b:2b:d8:2d:eb:11:bb:df:ce:d3:
1e:e0:d4:87:19:af:7d:9d:bd:ed:44:67:61:a7:20:
2a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2D:1B:9C:67:65:17:FD:74:65:09:F3:A8:1E:29:65:B5:90:1C:20
X509v3 Authority Key Identifier:
keyid:93:67:96:5E:28:34:F1:89:3C:FA:86:31:A4:84:07:1E:6A:2D:45:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2eWXig08Yk8-oYxpIQHHmotRbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/k2eWXig08Yk8-oYxpIQHHmotRbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bd:ec:cd:b6:06:50:bb:01:74:32:80:c5:ae:8c:1c:e0:19:
49:f4:e7:56:03:b2:ea:ba:bc:2f:0b:59:0d:d4:e0:ad:33:e5:
86:85:37:63:cb:a3:99:6e:e1:16:01:21:2d:c0:bb:f0:ce:1e:
79:63:72:ae:87:d7:21:37:e4:b0:8b:78:38:a5:a1:1d:75:b1:
e6:28:c9:54:eb:f1:e1:45:f7:79:3a:96:ec:c3:85:75:04:4f:
13:0c:a5:bb:5e:08:23:29:ee:df:30:53:01:f6:48:b8:c1:71:
a3:af:67:d9:ce:0e:0c:5a:df:8d:df:5b:ff:8e:0e:05:31:3e:
28:f4:b5:44:75:47:50:45:22:ae:40:9f:0f:4f:b2:05:3e:df:
dc:51:b1:67:aa:c0:b1:8b:c4:05:09:62:7a:e0:22:9c:59:bc:
7c:b7:dd:15:79:96:f3:03:29:f9:45:9f:47:a4:44:d1:2c:ef:
4d:44:1d:e6:e3:31:71:76:ae:75:6d:31:87:f9:40:71:41:4e:
21:9f:70:8b:1d:a5:3a:fc:30:ae:77:14:f4:e0:f9:78:b4:b9:
4f:1b:52:41:97:e1:9e:ef:65:f7:24:3b:c6:19:3f:d3:55:52:
69:89:f4:0b:fb:d4:19:b7:68:7a:db:67:4e:1e:af:e9:fa:03:
c4:ac:cc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:39 2026 by rpki-client