Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier: 4q+HdNf4G99pnF/ebaaDMWUdeObsvHPf3qXpUeYYGDQ=
Subject key identifier: 7C:BE:D0:1B:ED:2B:CA:7E:A3:6B:E1:ED:DA:76:D1:A8:E2:57:BF:A0
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 019D389C15B04B7D1A9EDC53F2412D52305B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number: 1162
Signing time: Sun 29 Mar 2026 08:00:46 +0000
Manifest this update: Sun 29 Mar 2026 08:00:46 +0000
Manifest next update: Mon 30 Mar 2026 08:00:46 +0000
Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: xAAlrW0x+sh3Kjv66GpmJ17BlzZX0RrBswYzH67XJ1Y=)
2: 9GE2MSYkYwJdnPGl5UxGhSlswCw.roa (hash: Eh4Z6Mq41FKE8k4QaeXWXSTKimihJnuRTJR0xYvIdDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:15:b0:4b:7d:1a:9e:dc:53:f2:41:2d:52:30:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: Mar 29 08:00:46 2026 GMT
Not After : Mar 30 08:00:46 2026 GMT
Subject: CN=7cbed01bed2bca7ea36be1edda76d1a8e257bfa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:54:09:00:7d:01:2a:65:44:5c:10:da:71:
1d:84:9e:19:82:fa:b6:36:5a:ee:83:6c:3d:8a:3c:
e5:fb:2a:8e:10:9f:bd:da:20:70:cc:35:2a:84:ce:
ec:4f:6a:00:f6:dc:ac:2d:67:d1:f8:7b:fd:15:b9:
62:d9:ec:f5:de:e9:e8:a7:b5:30:88:7d:9c:8f:0d:
d7:10:af:9e:7d:f6:23:a4:20:21:bb:8a:38:6e:b0:
58:1f:31:c5:bf:05:a5:85:69:f5:0c:1a:52:04:11:
c3:cc:9e:8b:b1:b2:6e:a3:80:b8:c6:0c:72:9a:f6:
9f:fb:d7:d2:be:77:07:81:cb:77:95:d9:d2:89:7c:
98:fd:74:c8:f8:20:67:a3:91:3f:9a:70:9a:67:08:
f4:85:40:6e:60:a0:04:f9:12:57:17:8d:41:2d:f4:
01:9c:d6:8a:4d:89:42:f3:17:97:47:ee:56:d8:a9:
00:e6:2e:9d:5d:a2:0e:a4:31:d2:3b:2f:69:6c:67:
ce:4b:40:43:f1:13:ef:d2:c5:a1:91:13:ab:b8:5f:
15:5a:da:6c:e7:af:01:a6:dd:c8:54:4a:82:29:74:
65:f8:44:64:53:51:21:36:9f:b9:66:cb:60:22:9c:
53:e7:65:f4:e4:37:17:64:52:c1:f7:02:9f:9a:b9:
0d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BE:D0:1B:ED:2B:CA:7E:A3:6B:E1:ED:DA:76:D1:A8:E2:57:BF:A0
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3a:e6:13:64:29:f7:97:fb:de:78:75:f2:4f:17:e8:44:c5:
0a:b4:d4:66:67:af:53:ab:7c:47:33:7c:8a:a5:87:fb:4d:18:
33:7a:0f:b8:f8:75:da:92:e7:54:31:b8:4c:77:73:05:82:18:
b0:a6:cb:a7:e9:29:e7:2b:e3:d3:11:f3:ed:d6:67:49:af:9b:
7a:c4:c6:ab:72:a9:01:63:41:0e:84:e8:b4:c3:ca:f0:17:ae:
1c:79:90:ce:c3:13:19:e5:4c:bd:3d:35:28:c3:38:8a:d9:f9:
50:73:24:b0:af:cc:7a:28:2f:8c:6e:c8:cd:ce:c4:40:19:dc:
30:42:e0:ba:1c:b8:24:a0:89:f8:e1:44:34:74:62:41:69:d1:
09:31:22:24:db:c5:e1:4f:e2:ff:42:86:09:97:4c:0f:77:3c:
42:04:5b:be:83:aa:d4:51:f5:30:fa:c4:b2:d8:86:11:ac:75:
6f:60:12:ee:42:2a:4e:73:a5:a0:7c:5b:8c:d0:0b:5a:52:1f:
92:28:18:a9:a4:25:ae:0d:9e:7d:b4:74:ee:94:ca:71:ad:ea:
63:82:94:95:e8:c1:7f:ce:36:99:89:f1:8c:98:1a:12:9d:b2:
e0:bc:e4:1e:86:cd:15:48:5a:59:dc:09:6a:1c:94:94:08:2b:
ef:66:58:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:03:58 2026 by rpki-client