Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
File: 2KzzS-KwTHzO8iIejR_LbKu0FZE.mft (raw, json)
Hash identifier: ip0wkuoNKQKcJbAHp2DqqEne9Y7vVWmU/aeVUpVHgYA=
Subject key identifier: 93:1E:A3:4A:E0:AC:3F:94:7C:08:B6:DE:9E:37:F0:0D:11:E3:40:C3
Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Certificate serial: 019E2FCDD4A18FBD56E33614CD47C3442FE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 08:01:18 +0000
Manifest this update: Sat 16 May 2026 08:01:18 +0000
Manifest next update: Sun 17 May 2026 08:01:18 +0000
Files and hashes: 1: 1VZy0G-wHQ_TX2BXwKD4dH12AVw.roa (hash: mifTRRl6FrcrdgjIAd+uxzGUQnWJ54FTfDl9SZZKo7c=)
2: 2KzzS-KwTHzO8iIejR_LbKu0FZE.crl (hash: Tk3Q5WAqiO+8MFNDf7YNaA7SMwZW/iyEBY5zUP85VCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:d4:a1:8f:bd:56:e3:36:14:cd:47:c3:44:2f:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Validity
Not Before: May 16 08:01:18 2026 GMT
Not After : May 17 08:01:18 2026 GMT
Subject: CN=931ea34ae0ac3f947c08b6de9e37f00d11e340c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:2e:f2:5e:85:18:c5:96:04:e1:fc:4b:27:29:
82:fb:dc:c6:d6:f7:9d:12:c5:b5:68:d1:c3:ca:52:
60:48:da:9e:0d:ba:5e:eb:d2:b0:6a:d9:54:28:ad:
f5:11:f6:3b:35:30:5b:ed:ec:0d:09:be:b0:64:0d:
d2:a9:48:08:ec:bf:b1:db:2f:aa:8b:9d:a7:96:49:
3b:54:1a:9c:72:21:fa:97:30:b6:f7:f4:05:b3:71:
e0:7d:36:26:5d:52:a6:5e:b7:a6:9a:a1:7f:51:4e:
7c:3d:8b:82:c5:fd:41:49:81:ba:ec:29:55:aa:77:
9a:fa:f5:92:48:f8:df:26:ac:9e:67:a7:6d:9b:40:
c6:35:aa:73:1f:15:36:3f:52:3e:ac:36:60:c1:a7:
fd:21:2c:bb:9e:9c:b5:b9:21:4f:28:71:8b:94:5f:
f2:04:fe:7c:d6:e2:db:35:f1:56:cf:0b:b6:a2:74:
0f:56:fe:7b:a8:63:64:43:82:69:98:76:90:e8:af:
4a:78:18:74:7e:bb:67:a5:98:29:66:30:fd:1e:84:
1f:03:fe:9a:4c:cc:9b:d9:55:cf:f2:66:95:0f:93:
c6:19:e1:b9:46:9c:ff:a8:ff:2a:f7:bd:fb:ac:e6:
1e:41:89:83:04:74:eb:cb:19:55:17:a5:c6:1b:4b:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1E:A3:4A:E0:AC:3F:94:7C:08:B6:DE:9E:37:F0:0D:11:E3:40:C3
X509v3 Authority Key Identifier:
keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3f:e2:78:77:f3:ac:48:57:dc:30:b9:a9:4b:33:70:d0:0b:
a4:e2:af:dd:22:09:f9:1d:cd:7e:42:d4:f0:01:31:f3:43:dd:
93:59:d5:1b:19:4d:06:79:6c:27:5f:f8:4c:19:8e:0e:41:ca:
bc:4f:57:2c:1b:34:90:7c:ec:85:5b:52:20:3d:a6:11:f9:e2:
7e:3c:f0:32:af:71:14:bc:ce:4d:ee:4e:8a:42:fc:44:d5:eb:
14:cd:e7:b2:8e:f2:19:de:b0:6c:0f:3c:61:e4:f2:66:d6:ac:
36:1e:45:b3:c7:2d:f5:47:57:a0:d0:23:b3:5b:4f:64:90:e8:
51:e0:e5:57:19:16:b6:01:63:ad:76:94:d2:d8:62:0b:e6:fe:
b3:25:56:b0:0e:bf:b3:6f:f5:40:1a:5a:f8:24:25:e7:87:ea:
96:ec:50:b9:6d:97:8d:a4:63:37:d1:06:e8:6b:b5:bf:24:14:
cd:19:ed:93:cc:5d:0e:28:32:a7:f1:91:6e:48:7b:3a:ae:e8:
1b:cd:5a:0c:85:b6:d9:a9:c6:4c:05:54:02:1d:6e:50:90:49:
b7:e5:d0:42:d8:77:d4:b7:e6:58:2f:99:01:36:8b:d5:01:ec:
8e:4d:0e:f2:10:6f:6b:08:0b:a1:97:b9:9a:d8:07:f7:6c:8d:
04:a0:01:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:33 2026 by rpki-client