Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: JutGqac69FV65mhHUBoqluRjMGgoS+PE0fsfDb1Kz0I=
Subject key identifier: C8:1D:17:BC:76:8C:CC:75:81:73:6F:2F:52:EE:00:90:6C:ED:EE:14
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 019D382E7907AB849976CA8322DF775D68DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 06:01:02 +0000
Manifest this update: Sun 29 Mar 2026 06:01:02 +0000
Manifest next update: Mon 30 Mar 2026 06:01:02 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: xS9fkaSn4eTuKOKgwDtM4WBI3o/CSgEftkXE6Sam0os=)
2: vM4pcQR4cpfxqBvoAa4ezpfAooA.roa (hash: q37j9EaxOdTgZgbNR9N/Sjv4ip1H9vll46kAjU29riM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:79:07:ab:84:99:76:ca:83:22:df:77:5d:68:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Mar 29 06:01:02 2026 GMT
Not After : Mar 30 06:01:02 2026 GMT
Subject: CN=c81d17bc768ccc7581736f2f52ee00906cedee14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0f:61:1f:57:8a:56:9c:90:0b:4a:41:1d:3e:
ae:b0:75:06:c7:b8:25:5b:73:ae:bb:27:5c:e0:93:
b8:a3:67:e0:2e:98:49:d9:9b:36:0d:b8:6f:a9:88:
37:2a:c5:db:d0:18:36:a8:58:f4:a8:79:30:48:b8:
d3:e9:b8:6a:31:1f:da:bc:f9:48:a0:50:54:ea:82:
3b:95:17:3c:f3:fe:67:f2:bc:62:88:a0:8d:10:8f:
8e:43:b8:30:90:13:93:b1:5b:f1:be:eb:b5:fc:dc:
f7:de:a1:5d:8b:23:73:50:7d:b4:3d:46:37:5e:1d:
ed:89:83:51:d8:c9:ad:9d:9d:2f:af:dc:58:be:61:
ff:76:41:9a:ce:1d:45:25:21:b5:bb:71:ca:ca:d7:
e8:95:c8:8e:1c:4f:a2:02:45:80:99:db:23:78:c9:
b8:2e:c4:1b:87:c2:3a:5d:4b:6c:98:c5:5a:9c:2f:
c6:e9:ee:72:69:9a:04:07:51:35:ce:c3:1c:c8:d9:
7e:3b:75:ec:60:d5:65:c2:38:28:3e:c6:0e:e9:08:
82:74:e7:fc:8f:b9:eb:bc:40:4d:a9:dd:24:fc:8a:
c6:1a:ad:c1:a2:66:bc:a1:6f:6d:04:79:19:58:76:
d3:89:db:b8:d5:48:82:6b:1c:46:20:66:20:24:37:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1D:17:BC:76:8C:CC:75:81:73:6F:2F:52:EE:00:90:6C:ED:EE:14
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:24:20:14:40:b6:e7:85:13:a6:1f:fa:96:a6:06:2f:93:18:
cf:77:28:9a:58:1a:df:0b:25:5f:95:19:0a:3f:89:ce:18:e3:
e0:42:41:69:7e:d6:c9:83:22:2c:15:f7:1c:76:c0:80:eb:c6:
7d:54:2f:6f:8b:b4:1d:4b:bc:6e:73:d6:81:49:48:ed:4a:f2:
60:7a:b3:76:e6:48:3b:e5:9a:c9:f0:45:70:b5:27:fe:70:ca:
26:33:00:b1:9c:9a:38:09:75:33:af:26:9b:6c:69:01:42:ea:
d3:d3:ed:41:ff:9f:ed:27:22:9f:45:fa:94:e8:ae:98:f9:f0:
14:8e:50:32:42:0e:b1:1c:7d:f6:7c:9b:38:78:28:a1:6b:f1:
45:3a:59:47:2f:c0:fe:40:bf:ea:6a:c2:b7:4c:35:3f:a8:66:
58:ee:e7:3d:3c:a4:18:6f:9f:6c:93:de:58:23:92:99:3a:87:
1b:4e:2c:a0:1d:11:cc:e3:1e:6e:a5:ab:00:01:f2:1b:d0:5a:
93:ef:b8:e9:45:95:50:e4:21:59:37:b2:88:4e:ed:95:93:aa:
e0:e9:14:56:8b:aa:ea:8d:75:7c:05:b2:4b:18:71:c2:e2:e8:
ae:0a:49:07:f5:0d:78:c5:d8:49:5e:21:63:cc:9b:02:89:85:
51:11:87:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LnkHq4SZdsqDIt93XWjfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YWFhYzA1OTk2YTViNDYxNGM2ZWVkYWZmZTdmOGY1Zjlh
MmJjNjcwHhcNMjYwMzI5MDYwMTAyWhcNMjYwMzMwMDYwMTAyWjAzMTEwLwYDVQQD
EyhjODFkMTdiYzc2OGNjYzc1ODE3MzZmMmY1MmVlMDA5MDZjZWRlZTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwA9hH1eKVpyQC0pBHT6usHUGx7gl
W3Ouuydc4JO4o2fgLphJ2Zs2DbhvqYg3KsXb0Bg2qFj0qHkwSLjT6bhqMR/avPlI
oFBU6oI7lRc88/5n8rxiiKCNEI+OQ7gwkBOTsVvxvuu1/Nz33qFdiyNzUH20PUY3
Xh3tiYNR2MmtnZ0vr9xYvmH/dkGazh1FJSG1u3HKytfolciOHE+iAkWAmdsjeMm4
LsQbh8I6XUtsmMVanC/G6e5yaZoEB1E1zsMcyNl+O3XsYNVlwjgoPsYO6QiCdOf8
j7nrvEBNqd0k/IrGGq3Boma8oW9tBHkZWHbTidu41UiCaxxGIGYgJDej/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgdF7x2jMx1gXNvL1LuAJBs7e4UMB8GA1UdIwQY
MBaAFNiqrAWZaltGFMbu2v/n+PX5orxnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYt
ZjUzZWUzMmVkODE2LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy85Mzg0MzAtMDdiNC00NWIzLTk0OTYtZjUzZWUzMmVkODE2
LzEvMktxc0JabHFXMFlVeHU3YV8tZjQ5Zm1pdkdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSQgFEC2
54UTph/6lqYGL5MYz3comlga3wslX5UZCj+Jzhjj4EJBaX7WyYMiLBX3HHbAgOvG
fVQvb4u0HUu8bnPWgUlI7UryYHqzduZIO+WayfBFcLUn/nDKJjMAsZyaOAl1M68m
m2xpAULq09PtQf+f7Scin0X6lOiumPnwFI5QMkIOsRx99nybOHgooWvxRTpZRy/A
/kC/6mrCt0w1P6hmWO7nPTykGG+fbJPeWCOSmTqHG04soB0RzOMebqWrAAHyG9Ba
k++46UWVUOQhWTeyiE7tlZOq4OkUVouq6o11fAWySxhxwuLorgpJB/UNeMXYSV4h
Y8ybAomFURGH/w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:54 2026 by rpki-client