Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
File: 2KzzS-KwTHzO8iIejR_LbKu0FZE.mft (raw, json)
Hash identifier: pv+Yi0C9gMjkR4C/WuVWF1IbaPGfVF2wtLXDcsYfzPA=
Subject key identifier: E9:99:82:E7:1F:CA:3C:D9:C9:75:85:83:81:2F:FC:A0:6D:E7:88:B7
Authority key identifier: D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
Certificate issuer: /CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Certificate serial: 019D389BF18D2F0AC23E631DEE831D3CCA22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:37 +0000
Manifest this update: Sun 29 Mar 2026 08:00:37 +0000
Manifest next update: Mon 30 Mar 2026 08:00:37 +0000
Files and hashes: 1: 1VZy0G-wHQ_TX2BXwKD4dH12AVw.roa (hash: mifTRRl6FrcrdgjIAd+uxzGUQnWJ54FTfDl9SZZKo7c=)
2: 2KzzS-KwTHzO8iIejR_LbKu0FZE.crl (hash: VsWBTC+LZW6dn8DPE19xvfdHuvyit/9pARBR//xMf2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:f1:8d:2f:0a:c2:3e:63:1d:ee:83:1d:3c:ca:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8acf34be2b04c7ccef2221e8d1fcb6cabb41591
Validity
Not Before: Mar 29 08:00:37 2026 GMT
Not After : Mar 30 08:00:37 2026 GMT
Subject: CN=e99982e71fca3cd9c9758583812ffca06de788b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:40:98:39:ba:7d:fd:16:62:ff:63:c8:f3:
3d:89:cc:1f:58:19:1b:cd:a4:0d:c3:b4:75:cf:28:
c6:d7:8c:44:44:e3:33:57:62:cf:b3:9d:6d:e8:9c:
5a:ab:ce:65:6e:5c:d0:c0:55:29:c8:1e:89:dc:6e:
a5:04:6f:a4:c6:42:c9:31:17:89:6d:de:14:2d:ca:
62:61:36:2f:de:a6:7e:98:66:7a:a9:03:2b:3d:b2:
de:70:3f:ec:0b:8a:a7:f4:7c:49:3f:c5:9d:b4:d6:
ed:39:a6:86:a1:fc:6b:d3:91:a6:78:29:17:b1:8e:
8a:50:97:76:1b:06:47:bb:f2:46:d9:93:c1:57:0c:
b4:c8:a8:b4:ae:11:16:48:29:c4:e6:56:46:02:37:
9c:76:2a:1a:e9:22:47:67:7a:c0:96:3f:fa:8a:3e:
22:7e:c6:19:aa:df:01:8d:bb:36:a7:7d:2a:15:29:
f2:51:74:76:25:40:af:da:71:2a:c8:00:1a:4a:6c:
00:4c:27:b0:0e:41:7c:61:79:56:36:2e:c6:c9:0d:
b6:58:bf:8b:10:b8:49:39:24:ae:6d:be:d0:53:2d:
26:92:c2:df:b8:5e:97:62:b0:eb:91:27:35:58:bb:
a7:c7:db:35:fb:1f:89:c9:bf:8e:09:58:a6:38:29:
a3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:99:82:E7:1F:CA:3C:D9:C9:75:85:83:81:2F:FC:A0:6D:E7:88:B7
X509v3 Authority Key Identifier:
keyid:D8:AC:F3:4B:E2:B0:4C:7C:CE:F2:22:1E:8D:1F:CB:6C:AB:B4:15:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KzzS-KwTHzO8iIejR_LbKu0FZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3df341-017c-4660-8cf7-44d64b9da459/1/2KzzS-KwTHzO8iIejR_LbKu0FZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a4:16:87:33:83:d1:a9:33:f2:30:15:7a:c2:ba:e5:87:04:
69:cf:37:c8:29:f7:6d:55:9c:19:c9:81:0a:67:be:23:20:cc:
a5:d1:1e:65:09:a0:61:c5:11:c3:3e:9a:18:8d:b5:f4:21:c2:
fa:43:80:c2:ab:d0:85:5e:54:01:9e:00:5e:7d:9a:27:c3:76:
a4:2c:1d:95:06:e9:89:0a:0d:4d:52:f6:48:24:d8:72:4f:14:
b8:ed:50:f3:9e:0a:9e:83:e4:1b:a5:64:84:f0:58:cc:f5:a2:
a5:e6:e2:80:bf:66:02:fd:8b:df:9e:d3:0b:59:d3:44:5c:4f:
d2:5b:73:de:1a:84:5a:8a:7c:ff:92:72:0c:da:07:84:d6:38:
7b:2d:21:ed:b3:89:0e:70:ad:89:c8:57:ad:0c:09:02:90:bc:
98:64:e0:ed:a9:40:fb:dd:ac:ed:f2:05:51:11:8b:9c:9e:a3:
c0:fb:96:68:e4:ec:2e:dc:48:4e:de:03:03:3c:74:ca:ca:b8:
23:03:2f:97:11:1b:2f:c7:d6:eb:52:9a:21:d8:52:a1:1e:15:
6a:2d:57:8a:40:9b:68:cf:aa:b9:45:06:77:47:46:c3:d2:35:
cc:7c:1c:70:e6:c2:1c:7f:2d:33:10:b8:06:b1:90:f9:93:e5:
47:e4:17:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:34:37 2026 by rpki-client