Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: xtbuWCmk62nt83QXUMkxtQuWCMjSETVJJZYuHCJ20sE=
Subject key identifier: DD:3D:F6:41:5A:07:07:05:A2:89:F1:63:A9:1F:86:D8:EA:74:26:AA
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 01A089E7FD2AE466D56E7965B48E2FB6D8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 06:01:17 +0000
Manifest this update: Thu 10 Sep 2026 06:01:17 +0000
Manifest next update: Fri 11 Sep 2026 06:01:17 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: QFub15kVhb5U6MD59FmRyTL2Y8OUv0Rp1vmDA9NWjRE=)
2: vM4pcQR4cpfxqBvoAa4ezpfAooA.roa (hash: q37j9EaxOdTgZgbNR9N/Sjv4ip1H9vll46kAjU29riM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:fd:2a:e4:66:d5:6e:79:65:b4:8e:2f:b6:d8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Sep 10 06:01:17 2026 GMT
Not After : Sep 11 06:01:17 2026 GMT
Subject: CN=dd3df6415a070705a289f163a91f86d8ea7426aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:60:a6:85:f4:09:d7:b6:d4:30:27:0f:c4:c4:
24:cf:bc:af:7d:50:ec:b5:cd:c0:d9:da:46:ce:49:
0f:79:d0:18:d1:44:ad:9d:4f:61:f2:07:ed:59:55:
0a:7b:97:76:61:08:14:74:02:e4:d5:b6:a5:64:2d:
ef:f1:24:00:ff:f3:33:4b:9a:24:6c:cf:5e:33:5b:
ba:ff:f4:73:11:ca:74:13:ba:41:c5:27:dc:f8:03:
43:dd:7f:97:ad:bd:c3:0d:41:2b:32:aa:12:ee:55:
3c:e1:ea:c2:6c:c2:76:0e:43:f6:76:cb:d1:77:ea:
d2:12:e8:67:94:51:12:fe:f9:d9:ba:47:d4:01:d7:
e0:02:c3:04:f8:39:0a:d7:00:67:5d:e1:d6:fa:fd:
05:9e:d2:3e:4b:93:ee:ae:53:9f:d9:cd:23:66:cc:
53:2c:8c:85:f1:cf:0d:01:1f:ff:18:ec:90:0f:8a:
44:65:7e:fc:70:7f:ce:a5:fc:cc:a3:8f:e9:fc:62:
af:09:50:18:35:f3:fc:59:25:8c:e5:32:38:d6:b7:
d3:08:8b:31:c3:21:38:df:b3:3f:ca:d4:14:0a:90:
fb:25:53:3d:ae:8f:56:d8:fb:d2:48:67:7b:cc:4b:
ec:22:a0:25:53:29:9d:e1:d1:01:e6:81:d4:22:57:
ee:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:3D:F6:41:5A:07:07:05:A2:89:F1:63:A9:1F:86:D8:EA:74:26:AA
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:7a:7a:1e:f4:61:c6:f2:b6:b8:5c:55:19:6a:c7:29:de:a4:
b7:80:67:44:48:e2:99:30:af:69:ed:4e:98:d9:5e:8a:62:37:
05:21:2c:5c:b8:19:01:91:58:49:db:1a:e9:8b:64:34:bb:d1:
d7:60:d4:65:16:a6:31:fe:c8:eb:7b:af:c6:c9:8a:72:05:82:
a8:d4:ef:3f:a8:35:b2:83:1b:d1:d4:f2:9e:af:c6:c7:c4:d1:
11:94:f8:78:35:c4:76:1f:e0:e2:5c:ee:9d:87:ec:f0:46:ac:
d7:35:3d:45:bd:65:68:44:56:12:df:14:5e:cf:53:54:6a:c9:
74:ea:34:4a:03:39:09:3a:7a:68:e7:47:be:23:28:22:77:d7:
68:4c:58:00:51:bc:84:0e:d6:5b:00:2b:c7:e1:63:d3:c5:bd:
7d:e4:60:1b:f7:03:50:e9:b9:4c:42:a4:da:b9:4e:0f:34:96:
15:da:96:f7:b2:05:b7:c7:7b:7f:ba:e7:d1:71:85:f6:34:d5:
b4:fe:17:ec:88:3c:8b:36:b7:a5:63:7d:da:ef:08:68:6f:70:
b4:5d:bb:a7:50:5e:7c:3e:c1:15:b9:f4:e8:92:9f:cd:dd:0b:
30:a8:5f:26:d0:c4:38:80:4f:a3:0d:59:cc:74:a4:bf:1c:db:
37:b1:d6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:24:52 2026 by rpki-client