Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier: i53Wf7wrD/GDwOPRFyd1S6ijq7eYARbHUGer4AYqMU4=
Subject key identifier: 9B:35:2E:33:32:FE:C1:29:65:46:65:62:E1:84:16:5F:74:A0:15:1B
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial: 019D1458C168B860BB94ACEB0647B0C891CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number: 1883
Signing time: Sun 22 Mar 2026 07:00:54 +0000
Manifest this update: Sun 22 Mar 2026 07:00:54 +0000
Manifest next update: Mon 23 Mar 2026 07:00:54 +0000
Files and hashes: 1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: fA3c7SDlw+85YP660g7DZn0DvNRYonZb0MJQw7ntHAQ=)
2: Q97r5DpOzAiwP4rhjuyHyUDSJ20.roa (hash: 9OXjDqXqUBHg5Xmpj9SZ8E0O+G30jS5FTAp/zLKlpOg=)
3: bn5DIEB7h417zigDbxPNaTfKJVE.roa (hash: 1UP3MaF3B8GgUJNYJAJfcEuya7S1x4U9A8CMZh0i1KQ=)
4: cyOHDX6p-R7TeKl3AMCjyWmNpk4.roa (hash: W3OD3F+yUOacAe6j9rvFirA6hItGmVMl9cfQaStd7go=)
5: nqDs6IBSsGkgCywT3ZE4Bi2t0zg.roa (hash: jSua4IrdLnQ0ENUU/6d8+tEc1mSQ1r36KeH+Mj/aKtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Mar 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:14:58:c1:68:b8:60:bb:94:ac:eb:06:47:b0:c8:91:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Validity
Not Before: Mar 22 07:00:54 2026 GMT
Not After : Mar 23 07:00:54 2026 GMT
Subject: CN=9b352e3332fec12965466562e184165f74a0151b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:7c:34:8e:8e:19:89:d5:82:53:07:2c:90:
7c:92:c9:d7:a8:a9:fd:c1:ca:0c:d1:15:3b:a4:b3:
0f:25:cb:c1:46:2a:c2:af:50:e6:38:c4:f3:2b:b4:
ca:02:ec:ed:83:fa:1f:dd:a0:96:a8:8f:db:eb:09:
d0:45:fe:04:37:cc:b0:19:98:85:1f:f0:b5:aa:a1:
c9:fb:58:a9:41:16:e9:16:ac:67:31:11:7e:23:2f:
26:b3:85:b4:69:c2:4c:7c:6b:28:65:61:39:97:bc:
56:5d:57:8a:1c:ae:8a:8e:8f:70:15:3e:8c:23:51:
99:5a:21:dc:18:2f:32:9e:82:ce:89:c2:72:d2:9d:
4b:17:ad:f2:6a:d9:cb:38:94:46:bb:cd:5a:90:80:
9e:8b:07:ef:5a:d1:c1:38:20:25:72:2c:a9:b7:71:
f3:41:c4:ba:cf:e2:0a:b2:35:53:4c:76:4e:b8:cc:
64:b9:25:42:96:8f:9a:96:3a:d5:a2:d4:91:1a:57:
e0:40:d9:1c:4c:1c:bc:2a:91:23:11:66:95:40:e0:
de:57:cd:98:a5:da:29:6e:f9:f5:f4:97:79:be:39:
59:b0:9d:2a:10:49:98:d3:2c:aa:48:41:98:b7:35:
8d:00:d8:e7:ee:f4:5e:1a:52:7d:ad:e7:00:39:cc:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:35:2E:33:32:FE:C1:29:65:46:65:62:E1:84:16:5F:74:A0:15:1B
X509v3 Authority Key Identifier:
keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:46:82:65:9f:22:ba:dd:67:3c:ff:2d:67:8a:5c:89:2a:41:
61:a6:c4:56:f6:7d:3d:af:cf:ad:b9:91:50:5c:9d:9c:6d:ca:
b8:f7:0e:7c:4c:05:d7:0a:61:ad:50:30:62:fa:92:f8:ff:c8:
b6:d1:d3:18:ce:e7:44:d5:ae:d3:76:35:11:1f:84:46:74:49:
df:43:ed:5c:09:81:87:ff:4e:9c:ec:be:07:c6:1e:78:e4:b6:
32:92:c6:76:bb:63:e7:a7:f0:9f:25:db:b8:16:67:c2:35:67:
fa:66:42:5a:69:d1:f5:da:6f:e6:42:d8:04:2f:25:4e:51:e4:
69:7e:bb:fa:71:98:28:1a:fd:f4:e7:28:f9:19:75:8f:d0:3f:
6a:44:0e:41:43:05:70:14:57:21:bc:5a:35:e5:4e:81:a4:a5:
ab:b0:fc:16:4d:05:d1:46:13:31:6c:ec:01:26:73:8c:d3:99:
cb:dc:10:89:6e:1c:f9:ba:81:5a:c0:26:30:fc:9b:fe:47:e7:
c9:29:0d:35:cb:eb:62:90:be:93:8b:79:fb:cf:ed:eb:e7:f1:
ce:06:60:38:3d:5c:1d:2b:5e:91:3d:87:c2:43:dc:f3:5a:98:
f9:87:e3:9d:88:f5:7b:12:f5:98:27:ce:28:d7:f3:7e:40:c8:
39:f0:da:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 12:03:46 2026 by rpki-client