Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
File: kt2u3zcPNa-LXut_hubPr6zojU4.mft (raw, json)
Hash identifier: aFDqboAVEVMKcrr89gOb+iE2WhsxpAjeDG00Hn/2wAg=
Subject key identifier: 45:CC:A5:0B:0E:38:84:F8:69:B9:9D:19:3B:54:3E:47:31:7A:45:A3
Authority key identifier: 92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E
Certificate issuer: /CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
Certificate serial: 019D39415B8AAC281EBFEE820585442F4EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
Manifest number: 08E2
Signing time: Sun 29 Mar 2026 11:01:17 +0000
Manifest this update: Sun 29 Mar 2026 11:01:17 +0000
Manifest next update: Mon 30 Mar 2026 11:01:17 +0000
Files and hashes: 1: MOaflZrDMd7wGNURntzbZLdXUmA.roa (hash: jhSZsx+nbyUc0xlTzJSRe1x2K+X/3793enEacjp2ebc=)
2: kt2u3zcPNa-LXut_hubPr6zojU4.crl (hash: 0IlDcTmqXt0VCyjnmFDcuDlYgYlwZV6DK1sZtmby2ZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:5b:8a:ac:28:1e:bf:ee:82:05:85:44:2f:4e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
Validity
Not Before: Mar 29 11:01:17 2026 GMT
Not After : Mar 30 11:01:17 2026 GMT
Subject: CN=45cca50b0e3884f869b99d193b543e47317a45a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:9f:34:60:30:48:29:e6:c7:87:3d:1e:38:
96:8f:4e:34:2a:36:06:d9:9c:66:ae:ad:85:61:14:
57:88:48:3c:da:3f:40:c5:7b:50:99:f7:ac:df:5c:
28:1e:e0:3e:d7:fb:e2:4e:b0:6b:24:d2:5a:1e:ae:
a0:99:3f:d8:03:f3:59:65:f4:e7:75:6e:21:4b:3f:
df:d8:bf:23:fd:3a:e4:a2:54:3a:b6:6b:21:3f:08:
02:c7:e1:7c:db:15:a1:c6:48:63:54:1d:cc:45:ba:
7d:2e:b6:b6:5a:ef:04:97:fa:08:03:98:dc:25:9b:
cd:cd:22:b3:83:e5:cc:82:29:fc:6b:5f:83:89:55:
69:4c:7a:ed:7c:8b:68:e9:ab:c3:64:ce:3a:ab:82:
3f:ec:12:83:83:53:2f:cf:03:e8:a1:75:68:87:09:
21:f0:10:ba:db:67:48:20:ce:1b:37:c8:54:70:46:
0e:4f:a9:b6:e6:64:4b:a6:be:5b:b2:af:bb:2a:6f:
76:df:8c:60:94:a4:67:e9:fb:a7:ae:6c:b5:30:cb:
fe:7d:f3:a8:b7:aa:b3:9b:20:e2:6c:20:85:4c:30:
27:d1:70:bf:8b:54:90:9f:20:f6:81:9a:36:54:26:
2b:98:88:b8:5b:4e:ea:6c:68:1e:b5:c2:ff:8b:fe:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CC:A5:0B:0E:38:84:F8:69:B9:9D:19:3B:54:3E:47:31:7A:45:A3
X509v3 Authority Key Identifier:
keyid:92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d7:5d:52:50:17:4c:bc:2a:dd:b0:42:59:02:7d:91:e0:b9:
f1:f2:40:98:06:c4:a8:58:f3:9b:b5:54:3f:ec:12:ff:6a:cc:
b7:f6:c2:35:01:2d:27:12:f0:e7:d1:c3:94:db:91:4a:b2:88:
97:7a:3b:a2:58:49:4d:dd:7a:f5:8f:8e:86:81:d6:9b:cc:d4:
37:b5:a5:80:a2:10:08:23:ec:46:19:13:8e:bc:02:0a:ab:06:
1c:af:8e:4d:97:bc:94:87:e6:1d:23:86:2e:ab:e8:b4:18:4a:
63:9d:51:08:79:4d:28:dd:7a:66:14:38:15:b7:23:92:58:c3:
2d:ee:7c:88:ba:11:d8:9e:b3:f8:a1:04:45:11:5a:29:40:f3:
1d:be:26:8a:7f:ac:e1:12:63:00:7d:7b:d2:90:72:e7:35:77:
df:6a:d7:18:21:dd:ae:81:b0:95:b4:ec:53:de:44:1a:98:6e:
5b:86:2a:d3:17:74:ad:f2:9c:16:d5:ab:17:9f:a8:29:56:02:
94:28:42:57:10:e4:f0:f3:31:a9:7a:de:6b:cc:34:0b:66:f6:
63:06:f3:71:4b:d3:ad:cb:a5:b0:94:8e:8c:32:ef:10:65:9c:
1e:36:fd:a7:1d:f6:81:8e:ea:c8:cd:3b:76:f4:4c:2c:7e:b1:
a5:6d:d7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:31 2026 by rpki-client