Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: cPKHlJXx/pgCbZW1v4hVArpqJR2G7+tSGfQO2pQcrvk=
Subject key identifier: EE:3A:21:96:C0:5C:06:67:F4:2B:3D:E4:66:96:84:3B:64:55:90:03
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 019E314DE4259C9DE6BCF96333EFF11883BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 1914
Signing time: Sat 16 May 2026 15:00:48 +0000
Manifest this update: Sat 16 May 2026 15:00:48 +0000
Manifest next update: Sun 17 May 2026 15:00:48 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: FVq+GGsfTILwS1KrtQE3l0ciJ/9oTcsTXTEclwL3b6g=)
2: vM4pcQR4cpfxqBvoAa4ezpfAooA.roa (hash: q37j9EaxOdTgZgbNR9N/Sjv4ip1H9vll46kAjU29riM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4d:e4:25:9c:9d:e6:bc:f9:63:33:ef:f1:18:83:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: May 16 15:00:48 2026 GMT
Not After : May 17 15:00:48 2026 GMT
Subject: CN=ee3a2196c05c0667f42b3de46696843b64559003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f7:4b:53:d5:25:0b:dd:55:c2:0c:60:46:bd:
1b:bc:4c:09:c7:75:c2:a5:c4:44:a0:ff:cf:c4:34:
56:0f:51:c8:76:58:6e:02:e8:49:c5:30:14:fc:73:
82:42:50:7f:4c:f0:3e:e3:56:9f:fc:37:5d:43:59:
32:b8:06:e9:d6:68:42:c5:36:b6:56:14:e8:b8:01:
fe:15:54:f2:41:ff:fd:21:b4:c7:b9:83:83:d3:ac:
53:c2:61:3e:88:88:af:8c:8d:ae:73:5d:27:fb:16:
d2:71:46:06:4a:2a:27:4a:67:31:e0:2e:29:d2:55:
d6:56:a5:dc:f9:c6:a3:7d:75:5f:df:63:d0:c6:50:
18:87:c3:27:ca:a7:24:c0:03:f9:06:2a:42:41:3b:
e5:5f:eb:2d:5b:54:77:d1:05:9c:fc:57:34:7e:43:
83:4c:6b:4f:ab:0a:7d:ba:42:03:80:ca:5b:28:9d:
98:40:91:4d:0e:6b:7b:eb:b5:da:6c:ba:d8:67:d9:
59:c4:30:84:62:6e:3a:e8:59:17:f4:7a:44:53:8b:
a9:86:9e:ea:7c:c0:68:7d:f0:09:76:ed:57:fa:06:
1a:8f:22:6f:bd:50:d0:81:48:ff:4e:6a:1c:e5:a4:
64:a8:a5:2b:be:9c:51:7a:ee:87:58:60:5d:c0:5c:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3A:21:96:C0:5C:06:67:F4:2B:3D:E4:66:96:84:3B:64:55:90:03
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f6:8c:be:bb:f2:fd:38:06:4b:32:e2:99:3b:41:31:ec:a7:
a5:c4:44:3a:26:c2:24:46:3a:89:42:10:ce:69:99:f0:d9:de:
b3:0c:1b:aa:d9:2a:4f:d0:a0:71:fb:c8:5a:81:69:56:f5:1e:
b3:45:76:83:df:07:38:d5:74:9e:c6:fa:e8:aa:ae:22:18:dc:
d5:20:80:9f:df:0f:e5:ae:f1:37:fc:57:c0:6d:ba:de:a7:52:
b8:1d:f3:18:5c:bf:88:27:e7:ca:93:76:d2:50:08:f1:8f:4a:
da:11:a2:0d:66:0b:ff:a7:83:53:aa:83:78:97:c1:2d:b7:8e:
df:82:62:49:b6:45:bd:81:be:7d:1e:69:7b:12:99:5f:65:f7:
a4:5f:f2:58:35:92:1b:5c:c3:2d:f3:16:a4:a3:03:31:72:50:
46:f8:20:6c:e6:da:93:ff:91:91:aa:82:18:a9:25:34:b0:ed:
22:d6:49:1b:0d:8d:a9:d6:9f:7c:da:d0:cf:6d:a1:55:d2:f3:
2e:c7:22:51:f4:70:43:6f:fc:92:92:12:77:07:54:28:eb:fd:
dc:4b:18:ec:16:34:df:4e:a9:98:05:07:96:64:64:10:53:f9:
36:0f:0c:58:59:4d:16:14:8b:aa:f0:48:c9:ae:c8:45:9b:b3:
85:3a:8f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:57:29 2026 by rpki-client