Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: kWb/0NPR7DURudFFvtZGo4NgdRJ2pmEV+3ecDIEHPYQ=
Subject key identifier: 9A:E9:05:5A:5C:B6:EE:7C:3B:57:5D:A4:06:F1:0B:A2:02:67:67:1D
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 019D38665ED455C8EC721E992CD4CAA1B47E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 11EB
Signing time: Sun 29 Mar 2026 07:02:06 +0000
Manifest this update: Sun 29 Mar 2026 07:02:06 +0000
Manifest next update: Mon 30 Mar 2026 07:02:06 +0000
Files and hashes: 1: 39jtKCjlUN84oiSNf6WcfKXutcI.roa (hash: j3QkvAZ9jfUhKAEv42rUncts5G9mchS++JOlncvf+58=)
2: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: ucBnUqKlal5pFcFom1piRvs9cRvZjE880IVUokNSdZ8=)
3: gEJ0St6-Q6X616CehkYkAAcUVUU.roa (hash: xRtGhqToXHk+tebor8v12gpWXnwDMSVJLn1tv9kRK/M=)
4: kfIkh8JRl0CLg8N2X34fKzfAAIY.roa (hash: LNo3ChQs7isxQdfvX/1Vp1a9WnepBnzSUSjWncB8U/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:5e:d4:55:c8:ec:72:1e:99:2c:d4:ca:a1:b4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Mar 29 07:02:06 2026 GMT
Not After : Mar 30 07:02:06 2026 GMT
Subject: CN=9ae9055a5cb6ee7c3b575da406f10ba20267671d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:04:2d:9b:40:02:bc:0f:c9:82:f6:0c:9c:34:
29:81:5c:09:37:1a:de:36:23:83:06:46:18:bb:ff:
de:fb:07:06:78:26:4a:08:04:c2:91:3b:8f:37:b4:
cc:e2:7e:96:18:fe:89:d3:98:7a:7b:7e:9b:b0:b8:
96:8c:fc:f6:b6:7c:1d:b5:36:cd:c9:a0:f6:e4:4e:
54:b2:52:eb:e0:a0:00:33:51:a4:9f:65:85:44:ad:
12:ed:f2:2d:b0:8f:2f:af:52:7e:c8:b2:24:86:1e:
c7:d9:07:fb:eb:6b:ce:3a:ab:9a:13:bb:f7:7e:08:
63:ef:ce:94:90:42:1c:4a:ed:52:a3:01:52:8f:5a:
6a:7c:3f:eb:a6:8f:90:a0:3d:49:95:1f:71:03:d2:
e1:a4:7f:67:75:6a:fa:c8:7e:22:52:31:5b:48:b0:
e7:fb:15:2e:80:4b:75:91:86:33:a0:e6:f6:90:1a:
44:c4:74:75:2d:1b:d3:0d:77:17:8b:e5:c2:e7:04:
1b:63:22:b6:95:06:ac:ed:cb:78:72:e3:73:7e:87:
69:19:13:27:1e:73:80:81:cf:c4:3d:04:b4:da:d2:
1e:0f:ca:0c:b1:a7:2d:88:93:88:ed:6a:68:d1:27:
d1:7e:5b:e2:bf:13:75:32:2f:04:a3:55:41:5c:d7:
8a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E9:05:5A:5C:B6:EE:7C:3B:57:5D:A4:06:F1:0B:A2:02:67:67:1D
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:2b:e5:2f:2d:5d:77:1c:ba:5b:9d:ec:2e:66:46:68:7b:0c:
ed:71:a4:ca:6f:e8:86:fb:d5:a3:f0:a9:13:d9:41:92:da:4f:
74:65:dd:56:65:86:aa:d9:22:5c:1f:aa:ef:54:25:d2:9f:60:
34:f6:53:65:4b:19:19:fc:f9:df:2b:71:d7:e3:4e:56:56:40:
8d:30:7f:8f:73:d3:a7:5d:7a:6f:d8:4c:88:d6:eb:a7:dd:35:
aa:f3:d7:9c:56:46:86:99:cf:49:95:56:ec:d7:9c:c6:83:f9:
48:18:50:2b:fd:b2:8f:95:0e:af:51:15:fb:af:14:a5:41:14:
f9:5f:04:34:c6:8d:cc:09:68:7a:2d:27:40:2f:11:5b:e5:84:
47:49:94:0c:4a:f6:c3:bc:9f:89:69:b2:69:ec:d5:19:bd:e5:
e3:13:98:e6:d2:29:43:7f:99:38:80:99:31:17:c8:f4:c9:90:
59:de:5c:09:de:a4:cf:63:1c:92:bb:65:38:da:a7:d5:b9:c1:
54:b9:ab:81:53:76:ba:e4:f5:e4:bc:49:5d:62:bf:cd:6c:aa:
61:7c:f4:7f:03:de:e5:eb:a3:2c:a2:44:3c:32:a0:05:15:f1:
99:18:e3:b4:3b:61:e8:04:13:1d:6f:1d:60:cd:d8:db:75:0a:
7e:29:49:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:18 2026 by rpki-client