Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: P2a16TJqk/4YqDcCyVb0J78pUVG46rGAPSnJivSPgys=
Subject key identifier: 7E:F9:21:63:B0:DE:50:A4:B1:7D:77:87:30:AB:4D:AA:12:F3:D0:68
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 01A18E9DEA9F7085C915100DFA61424E920B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 1AD2
Signing time: Fri 30 Oct 2026 21:01:16 +0000
Manifest this update: Fri 30 Oct 2026 21:01:16 +0000
Manifest next update: Sat 31 Oct 2026 21:01:16 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: e6WrAopLrHh6iaqnYru0aweSS13T3hDnDImf5an0AlY=)
2: vM4pcQR4cpfxqBvoAa4ezpfAooA.roa (hash: q37j9EaxOdTgZgbNR9N/Sjv4ip1H9vll46kAjU29riM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:9d:ea:9f:70:85:c9:15:10:0d:fa:61:42:4e:92:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Oct 30 21:01:16 2026 GMT
Not After : Oct 31 21:01:16 2026 GMT
Subject: CN=7ef92163b0de50a4b17d778730ab4daa12f3d068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1a:29:bb:38:eb:ac:e1:8b:a4:f2:d1:7a:43:
10:09:86:6e:f8:9f:49:0f:69:fc:d0:70:2f:f4:00:
16:ac:66:d2:db:d9:3d:46:55:3b:2e:8a:a9:4f:1e:
05:29:1e:45:81:c2:aa:44:51:35:b3:0e:64:2d:8f:
15:98:54:8d:21:e5:2f:42:17:c8:cc:96:80:3d:89:
3b:77:56:7d:4e:1a:c8:a0:b8:fb:bb:13:93:d5:74:
59:c5:c5:9e:31:e9:a0:de:b7:5b:be:f7:36:36:f8:
8b:cc:d2:8a:30:21:15:50:a4:3c:2b:ee:cf:42:84:
7c:d5:27:f3:26:c5:23:43:10:c2:d6:ff:ab:82:38:
16:e8:9f:f9:d0:59:5b:8d:c3:db:63:a6:29:75:19:
47:43:65:f2:5b:3b:72:9f:3c:3e:ec:a7:f3:bf:70:
be:f3:ef:1b:e7:89:c6:0f:40:62:02:ab:d1:24:96:
4f:ea:50:c1:0d:4d:e9:c1:94:29:c7:13:11:2b:ca:
f8:a2:8a:43:97:c5:89:15:6c:28:fd:ba:58:77:ac:
11:6d:e3:9b:44:e6:45:94:bb:4a:a9:8d:65:16:05:
38:e9:a8:d0:b9:7e:07:97:e3:2a:0e:67:dc:42:e5:
ad:da:f7:3e:30:42:73:c1:6f:06:ac:19:97:0a:ec:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F9:21:63:B0:DE:50:A4:B1:7D:77:87:30:AB:4D:AA:12:F3:D0:68
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f7:bc:15:04:46:53:41:50:29:ec:1e:a2:a4:f4:97:24:3e:
1d:e8:a9:6c:42:41:9a:c6:3d:1b:95:73:28:3d:98:11:dc:40:
50:fa:73:55:95:aa:94:a7:89:fa:d9:f8:07:3c:4b:b4:db:19:
95:16:b0:59:ba:9d:39:73:d6:fb:26:24:5b:d3:e6:b3:2c:95:
bc:ce:d5:38:9f:56:ca:4a:18:ba:f5:0e:f1:2c:f6:14:ec:84:
7f:c0:64:41:b4:a4:79:97:97:20:b4:84:a4:64:58:6f:47:8c:
69:ba:94:b5:a6:1c:fa:57:25:2a:d9:f9:36:25:29:8a:74:30:
58:d8:d1:92:e0:f3:5a:98:e0:d0:5a:f9:1b:39:3c:2d:6a:82:
38:df:86:c4:31:da:da:c7:82:44:3e:b9:93:5e:3b:66:ad:02:
ff:9d:f0:75:47:75:b8:32:f3:84:9d:98:aa:1e:eb:9a:47:ca:
db:72:fb:e3:b2:94:c5:43:13:53:e5:45:91:1e:67:00:74:55:
9f:28:b2:e8:1e:22:16:ee:55:5a:e4:2e:f4:b8:8f:f6:96:68:
d9:2d:6e:6d:b4:8a:fd:42:53:c9:03:c6:16:65:b8:66:1e:fa:
41:55:a7:1a:12:b7:cf:75:f3:c6:88:eb:00:f5:1d:16:5c:9f:
d9:09:2b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:22:13 2026 by rpki-client