Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
File: inK2D1-0kwAWzrhgzBdKUxNfFhY.mft (raw, json)
Hash identifier: Vl0ni1H8Avwjs9I4NCc1UPv5rCxYRcVtmFPFNjYUIXw=
Subject key identifier: 40:29:3B:71:A7:B0:0C:0F:14:5D:BB:33:1D:41:60:24:A1:49:32:2D
Authority key identifier: 8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
Certificate issuer: /CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Certificate serial: 019D3752D913163B1FECF589582A82AB3843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 02:01:09 +0000
Manifest this update: Sun 29 Mar 2026 02:01:09 +0000
Manifest next update: Mon 30 Mar 2026 02:01:09 +0000
Files and hashes: 1: PguFJecoQt--LyHW2Dxlv0ZZ3t0.asa (hash: 0DuH9ZfW8f/p2+Moq7rG/7mXkezlodPdLgpnaG/Lc0I=)
2: cSJtDg9vgEHyxl9pdyznOaSGrWg.roa (hash: 76q9DQ4PdJdy77vI2HX3g1+OVo3qLamEUqimf88VMZA=)
3: inK2D1-0kwAWzrhgzBdKUxNfFhY.crl (hash: FUXV80/PUKqAS8FJu6ynhMEcZcz3Ytsik7lpEFN3ni8=)
4: nyn8nP7M60E_Gz5chelL2mp7sBg.roa (hash: no7cv4ijMcaVa1AjDdpe2zKmm1N/3cLT1g+7PMJ12Ew=)
5: x5mGmJWW7VG2d9fAFZDjA0LUA6M.asa (hash: VX9BMxwn8E44ljUNBHA9sm5zOwxMI5hsQlaAlIe0HNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:d9:13:16:3b:1f:ec:f5:89:58:2a:82:ab:38:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a72b60f5fb4930016ceb860cc174a53135f1616
Validity
Not Before: Mar 29 02:01:09 2026 GMT
Not After : Mar 30 02:01:09 2026 GMT
Subject: CN=40293b71a7b00c0f145dbb331d416024a149322d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:65:8b:9a:d9:bb:70:0a:d6:46:fb:01:92:dc:
f5:3c:de:3d:35:8f:5d:09:d4:97:d6:d0:9b:78:74:
77:04:2d:79:73:b8:2c:b7:8e:1a:ba:99:e3:9e:ae:
8c:20:7d:9d:24:41:ba:2d:82:ed:e5:5a:62:c0:14:
9c:f2:85:44:b7:76:e3:56:4d:b3:d6:37:e3:0d:77:
47:6e:cd:56:0d:22:64:36:75:86:4b:df:40:5a:c6:
0b:a1:e8:a0:7d:ba:cf:7d:f7:8a:ff:1e:a2:8d:09:
c7:7a:b7:80:19:d0:b5:98:58:81:d6:cd:17:20:c4:
55:6c:f0:63:cc:8f:25:7e:cc:3f:0c:d5:27:10:aa:
0c:f5:70:16:35:3e:f8:a3:92:a4:e1:42:83:7a:c3:
fd:ff:a1:07:6f:06:1c:e8:6d:39:ed:00:eb:04:ae:
b3:71:4b:15:85:12:cf:66:5d:c4:db:84:ce:85:9a:
0c:e6:9e:be:e7:fc:f3:e1:f1:ba:5a:33:24:57:b3:
cd:46:a6:2f:2a:fe:4d:61:30:eb:57:1d:b8:53:aa:
f0:57:29:8a:a0:fc:9b:d5:2b:e6:e8:5b:b3:46:88:
e1:42:f3:aa:e9:51:41:f1:cf:62:39:96:0b:c8:e1:
10:20:5f:4f:67:50:7e:78:d0:fb:eb:b3:6a:65:8f:
62:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:29:3B:71:A7:B0:0C:0F:14:5D:BB:33:1D:41:60:24:A1:49:32:2D
X509v3 Authority Key Identifier:
keyid:8A:72:B6:0F:5F:B4:93:00:16:CE:B8:60:CC:17:4A:53:13:5F:16:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inK2D1-0kwAWzrhgzBdKUxNfFhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/41fe89-08d6-44f8-b754-e08505c91066/1/inK2D1-0kwAWzrhgzBdKUxNfFhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:99:7b:63:66:92:c3:c6:e8:0b:be:82:e7:a2:58:84:fe:7f:
7f:7d:ca:da:2c:62:f4:7a:4a:9f:3f:7b:7d:5d:1a:f3:05:31:
31:c7:b1:f1:09:ae:0c:83:39:68:a0:f9:d6:35:22:90:2f:b3:
c7:26:de:44:f2:66:bf:0e:51:ca:9b:af:24:5d:ba:78:d7:5d:
2f:41:72:be:60:90:6f:af:e5:a1:c0:64:74:99:f7:38:73:a8:
6a:a1:0e:58:12:b8:60:be:45:68:2b:68:27:87:0d:2c:c9:31:
eb:4c:8e:8e:02:36:5a:5b:54:fe:4d:ce:6d:c9:da:c8:75:af:
67:5d:71:a3:44:0b:87:08:82:6d:7f:06:1c:3f:27:3f:06:ed:
a8:cb:87:d4:b3:6e:e9:74:66:99:e2:bc:4b:de:f6:77:fe:5f:
f8:f9:52:9c:f3:87:30:38:33:d5:11:53:15:c4:99:9d:a6:77:
1d:7d:b9:13:ec:a2:24:f1:8d:5c:43:9a:07:18:fd:77:43:b7:
40:77:e4:d4:04:5a:ff:76:1f:cd:be:0b:70:ee:86:d9:66:b9:
59:22:66:01:f1:9a:ed:c8:3c:b9:5b:f3:0e:21:1a:e4:73:22:
6a:83:da:52:57:15:7d:6a:03:8b:ce:e7:62:3d:d2:bd:4d:85:
06:75:55:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:51 2026 by rpki-client