Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
File: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft (raw, json)
Hash identifier: 8xXumHcu6VRuW1si/b5RJrIoGbHSXl21Yrxx89b+1iA=
Subject key identifier: D5:9C:5E:E7:EA:DF:4E:59:CC:FB:9D:F3:68:4C:E5:CF:54:6E:04:56
Authority key identifier: 93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
Certificate issuer: /CN=936cb336c1beb71d4fbbaae243b23352c6270061
Certificate serial: 019D39409DA2BC7E72476F82BE61D154B667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
Manifest number: 10EA
Signing time: Sun 29 Mar 2026 11:00:29 +0000
Manifest this update: Sun 29 Mar 2026 11:00:29 +0000
Manifest next update: Mon 30 Mar 2026 11:00:29 +0000
Files and hashes: 1: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl (hash: a6Inr1ZKoKlPSJlMYU+yNaKzDQDLZgDjmrUKQekKFZg=)
2: mvepdebQmu_FRJZg6xdj98CWgmg.roa (hash: vtG0XjCKoYFzRLQ8SOB1Ef/RTJntpMOs72e8cd2gM38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:9d:a2:bc:7e:72:47:6f:82:be:61:d1:54:b6:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=936cb336c1beb71d4fbbaae243b23352c6270061
Validity
Not Before: Mar 29 11:00:29 2026 GMT
Not After : Mar 30 11:00:29 2026 GMT
Subject: CN=d59c5ee7eadf4e59ccfb9df3684ce5cf546e0456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:83:c1:1d:8c:2f:a8:71:22:f6:41:ac:81:8a:
ad:35:fc:53:fb:44:00:bc:aa:1b:2a:77:8d:d2:eb:
6d:63:6d:40:e1:21:c6:ac:91:6a:d6:8b:50:04:03:
2e:67:85:67:6a:ac:19:bf:69:34:70:eb:45:1b:25:
79:34:cf:e7:04:d0:85:c5:1f:dc:65:e4:33:46:f4:
3e:84:8d:db:f1:17:dc:6e:0b:fe:d0:5d:7e:87:09:
19:14:d1:36:48:f4:64:a7:83:eb:89:7c:62:9a:61:
d6:4d:3e:47:78:1f:83:60:63:da:53:02:68:91:42:
93:9b:bd:b3:18:1f:c7:0e:90:55:6b:ef:10:36:bc:
3e:01:ce:a8:c0:24:c8:87:f3:f0:4a:fd:10:fa:67:
e8:7f:8b:b1:a6:4d:f6:67:e1:f6:27:f5:02:48:71:
05:f8:6c:67:42:0e:d4:50:9a:1a:75:72:46:ad:8e:
4b:7d:44:c5:9d:38:ba:43:71:3d:2f:6b:da:6c:e9:
1b:2f:b3:cd:46:62:b6:43:d7:fc:32:d2:65:6c:be:
3f:16:b4:d3:39:c3:ab:2e:48:54:2d:34:94:25:bf:
c2:f8:de:e5:fa:a2:b2:e3:eb:07:6f:6f:e1:5c:a4:
df:34:ed:c9:bf:96:99:a0:7a:8f:d5:fb:91:81:6e:
8d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9C:5E:E7:EA:DF:4E:59:CC:FB:9D:F3:68:4C:E5:CF:54:6E:04:56
X509v3 Authority Key Identifier:
keyid:93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fd:e1:12:60:49:70:8a:57:00:5b:45:38:c7:23:80:3f:29:
f6:16:3f:8d:ca:53:b6:e1:a6:b5:f0:f9:35:af:d5:54:06:81:
bb:13:0b:6f:73:1c:d4:03:14:60:fc:53:70:58:4c:8c:46:28:
a1:ce:53:5a:89:f3:82:96:84:ae:18:3e:23:0f:31:16:53:69:
3a:8e:54:5f:c8:4f:43:5d:d4:50:95:3d:61:16:ac:d8:a4:32:
b1:78:1f:d1:3f:49:90:58:41:fd:70:ca:38:43:d9:80:9f:e6:
ef:69:10:f8:2c:24:71:b8:e8:d1:70:22:b9:60:d8:7e:81:6e:
ab:c0:21:80:72:1c:13:f4:4e:bd:f5:58:3f:ce:3e:d3:64:40:
e7:8f:c6:b9:67:14:c0:57:63:c2:ec:49:55:a7:31:ad:69:59:
1e:26:ee:cc:80:32:e5:5a:ed:fa:0a:66:a6:2d:cc:1b:b1:10:
39:8e:f1:9b:7b:30:9c:41:03:e2:4d:ce:51:b8:f0:09:8e:77:
94:dc:98:66:87:b9:6d:9b:61:79:ef:86:43:2f:c3:8e:eb:b0:
bd:f4:04:b4:b1:f5:80:92:38:f7:6a:72:71:b8:4b:92:91:5a:
b5:ca:0f:67:15:bc:e5:ac:39:7a:bf:ef:3f:99:f1:48:8e:63:
c0:05:16:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:50:56 2026 by rpki-client