Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: Wsq/KQ23fdAA87hp+i9Vv0NXee0L5Aoz/q8WeLaiYyQ=
Subject key identifier: 2B:6E:DA:64:20:E3:2F:88:EF:30:00:6F:C5:4E:52:5F:D0:0F:AB:08
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 019D38D371BF467C97AD2530331118EC1C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 14FE
Signing time: Sun 29 Mar 2026 09:01:14 +0000
Manifest this update: Sun 29 Mar 2026 09:01:14 +0000
Manifest next update: Mon 30 Mar 2026 09:01:14 +0000
Files and hashes: 1: 1AaGajGK39FJ1DfqM02pviOUgxE.roa (hash: REcEZv2mwfjfjwH6vxcx0ox6WJ+EFSfiMB5BRMtnFng=)
2: P52Z19ZFS5PcHmr747_30HPjt0A.roa (hash: Q+07EEoc98NoCKMiauQ6zERb9JXZfHA9LGDMQqCoPfo=)
3: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: 68obe6Cy0e3OwohT8ZhNTcUD15vChhzUX6/kF10Fw/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:71:bf:46:7c:97:ad:25:30:33:11:18:ec:1c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: Mar 29 09:01:14 2026 GMT
Not After : Mar 30 09:01:14 2026 GMT
Subject: CN=2b6eda6420e32f88ef30006fc54e525fd00fab08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9a:cd:9c:6d:5a:62:86:da:94:e0:dc:e8:6e:
15:73:dc:20:3f:af:bf:a7:68:5b:2c:6a:f1:88:b2:
45:83:54:e8:f9:34:f8:d1:7f:3c:6d:d8:1e:8b:6a:
42:11:ce:03:84:77:53:70:71:19:4a:ad:30:fc:4d:
29:d2:65:88:56:0a:ee:5a:b6:ed:32:63:aa:29:06:
00:97:cc:8f:56:df:9b:b6:b8:85:2f:d1:3d:65:6e:
7c:95:20:0a:a4:b6:4d:09:8e:ae:c6:75:0e:be:ba:
42:74:5c:d0:81:f7:03:7e:0a:bc:e5:62:fa:78:ac:
54:7e:50:6a:20:fb:02:77:b8:e7:93:8b:a4:fe:df:
61:23:3d:62:ec:a4:17:c0:a7:28:0d:65:7d:0a:0f:
7e:4b:9c:6e:10:cc:ae:63:09:b5:8d:c4:7b:6e:23:
51:27:c4:73:1c:b4:ae:29:66:b0:9e:da:12:b4:46:
c2:f2:86:f4:16:54:79:1f:a9:c8:1a:ab:65:ba:40:
1b:2d:43:89:9b:90:50:0b:29:0c:8d:95:fa:82:72:
ba:dd:9d:0b:b7:83:18:1f:ec:68:b0:f1:d6:1d:a9:
3b:4b:d6:e7:74:72:c5:c1:76:76:43:6f:01:6e:be:
c9:ad:56:40:53:3a:34:69:13:75:4f:7b:17:21:21:
d6:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:6E:DA:64:20:E3:2F:88:EF:30:00:6F:C5:4E:52:5F:D0:0F:AB:08
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:83:4d:fa:a2:94:64:53:f0:11:21:f8:39:fc:3c:da:cf:f1:
63:e0:11:0b:08:b1:be:1d:c2:20:d9:0d:e7:d8:fd:05:df:4a:
e4:0f:a5:ed:2b:dc:37:11:54:06:a0:1a:e9:43:13:1c:b7:e6:
ac:ba:39:6e:3d:55:75:be:88:e5:d4:54:3e:83:a7:b3:77:35:
93:3b:f5:2b:5f:cc:cc:bb:92:10:c5:28:85:20:91:13:1a:c0:
14:41:ec:35:7f:1a:84:74:f7:9c:11:68:63:ff:15:52:25:b7:
16:2e:32:21:3e:2a:63:e5:1c:97:cf:89:48:06:8a:df:68:42:
49:c7:c1:22:6e:e8:b4:6f:c9:85:10:d1:69:20:e4:63:35:11:
65:45:47:45:a6:de:ab:d1:bd:b1:46:05:73:cc:26:63:0e:0c:
bf:f4:5e:5c:93:4d:5f:da:e9:f8:c7:82:e8:9f:d1:22:0c:b5:
ed:1f:80:2d:7e:c2:17:90:36:c0:46:87:d2:95:ee:97:d9:82:
b5:a9:51:c8:16:92:3e:9d:4f:11:5e:43:a1:40:da:1f:6a:49:
e1:49:6d:a3:35:6d:12:dd:70:f6:ef:08:80:3d:9a:d3:e1:ee:
10:55:70:92:22:63:d5:70:f8:4e:bc:eb:10:51:05:5c:5d:37:
35:b3:45:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:56:44 2026 by rpki-client