Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
File: 2KzzS-KwTHzO8iIejR_LbKu0FZE.mft (raw, json)
Hash identifier: Phuf2yYCU76dNv1qZ0Cj48gjhMcPXOX+QRc9i/Dx8KQ=
Subject key identifier: 41:A4:07:C3:62:CE:09:35:58:E4:66:90:6E:53:07:8F:83:95:EF:BF
Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Certificate serial: 019D273AF6C8DE758DB7087E08D25B285E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 23:01:08 +0000
Manifest this update: Wed 25 Mar 2026 23:01:08 +0000
Manifest next update: Thu 26 Mar 2026 23:01:08 +0000
Files and hashes: 1: 1VZy0G-wHQ_TX2BXwKD4dH12AVw.roa (hash: mifTRRl6FrcrdgjIAd+uxzGUQnWJ54FTfDl9SZZKo7c=)
2: 2KzzS-KwTHzO8iIejR_LbKu0FZE.crl (hash: Bht668pihz7xMbZuCar9EfCwXtq8E9b3EUOFSqNCW9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:f6:c8:de:75:8d:b7:08:7e:08:d2:5b:28:5e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Validity
Not Before: Mar 25 23:01:08 2026 GMT
Not After : Mar 26 23:01:08 2026 GMT
Subject: CN=41a407c362ce093558e466906e53078f8395efbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:eb:d5:04:8f:fe:24:7e:69:fd:1d:02:b1:
b3:ea:91:91:a6:67:f4:84:40:0e:42:07:25:35:2f:
30:ef:d2:e8:d8:cc:6d:4d:13:e7:53:93:8b:5c:79:
7f:29:21:03:30:b0:ac:d9:ec:a1:d0:95:2a:6e:19:
18:e6:14:97:c7:d4:a8:ee:c2:40:fc:cc:43:35:55:
c9:2f:bd:85:35:9a:fd:36:01:2c:db:32:a3:3b:ad:
87:05:31:e9:bf:1f:34:9a:9d:01:d5:bb:77:81:fc:
f5:56:ec:79:e6:62:ed:9e:e8:fb:39:89:db:24:f1:
d4:dd:ac:8c:7e:e5:7c:a2:a3:70:12:ff:34:06:6b:
79:43:b7:c6:b9:c7:ae:67:96:3d:7c:1a:36:40:24:
16:c0:c5:12:0e:f6:d4:16:87:65:dd:e2:79:92:53:
be:5b:28:3e:e8:ca:e6:48:86:08:27:db:23:41:d4:
72:2d:2b:a3:f9:c0:68:7a:07:17:54:43:10:dc:91:
41:0f:5e:36:ce:0b:04:90:75:11:ce:2b:85:45:0c:
c1:36:59:b0:d6:1d:9f:71:ce:32:cf:08:ab:ea:50:
67:5c:58:e0:d9:26:7b:c1:d6:16:3b:58:00:86:a0:
9e:6e:3b:30:ec:fd:7a:42:70:d4:ee:69:f9:07:52:
33:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A4:07:C3:62:CE:09:35:58:E4:66:90:6E:53:07:8F:83:95:EF:BF
X509v3 Authority Key Identifier:
keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:39:8a:90:fb:66:85:50:1e:24:6e:c0:30:e2:64:79:74:21:
9b:18:7e:aa:d1:58:2b:0a:a4:91:fc:1e:fb:22:5e:eb:ca:06:
8e:41:ad:9e:06:39:91:c7:78:96:1d:46:47:c3:cd:70:f8:6b:
20:92:b4:52:26:54:d6:d4:05:d7:6b:5f:86:c2:4a:bb:fa:4c:
15:b7:e3:53:24:ae:ed:76:70:44:2a:24:00:d7:57:c5:b7:71:
e3:f7:ea:73:ef:fe:02:29:93:eb:6f:5a:83:0d:68:3f:d5:f0:
e2:2e:67:68:f3:0d:96:6a:87:d9:53:2b:44:81:44:76:7d:3c:
0b:6d:d3:40:26:33:39:63:8f:50:70:3a:dd:dc:56:f2:96:d5:
1f:07:20:e4:d5:a7:a3:64:9b:71:e4:5a:53:d0:38:59:3c:4e:
2c:34:fe:65:49:4f:a7:de:63:45:39:54:8b:42:66:b2:72:f8:
ea:00:07:80:10:c5:25:8a:91:39:7d:31:8f:ba:86:c5:d3:e8:
6c:86:02:0d:0c:99:eb:97:56:1b:fd:51:22:45:75:af:7e:d1:
d3:29:fa:27:b6:33:72:37:8e:14:e2:71:11:23:5d:8b:ef:c3:
bb:64:c3:b4:42:d8:c6:43:40:52:b2:66:43:58:53:5d:0d:a3:
cf:bc:14:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:38 2026 by rpki-client