Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
File: Kq8k6REaiJ202uCH5ICeEIbjP4I.mft (raw, json)
Hash identifier: tQS2jX2XfHeIjpaUhfZKhvcd0WL4JEOgjsmQl9/OV4w=
Subject key identifier: DA:CC:56:CB:3F:1D:3E:59:5A:F3:1F:D4:3A:CB:4E:8C:3B:7D:6C:75
Authority key identifier: 2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
Certificate issuer: /CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Certificate serial: 019D9A3EB81D84137C651B6AFE428FE0C5F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
Manifest number: 181E
Signing time: Fri 17 Apr 2026 07:01:34 +0000
Manifest this update: Fri 17 Apr 2026 07:01:34 +0000
Manifest next update: Sat 18 Apr 2026 07:01:34 +0000
Files and hashes: 1: Kq8k6REaiJ202uCH5ICeEIbjP4I.crl (hash: G3stsgKwmN4Fu5Zk/vesISEyLLotsDQk7ncv5EgMcCg=)
2: oyKh1GZmmmicse4bqcfsPq9PxSg.roa (hash: YSuCQpmgXDGJyq+euD80LcmH0pwmzSboam85gWy8j5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:b8:1d:84:13:7c:65:1b:6a:fe:42:8f:e0:c5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Validity
Not Before: Apr 17 07:01:34 2026 GMT
Not After : Apr 18 07:01:34 2026 GMT
Subject: CN=dacc56cb3f1d3e595af31fd43acb4e8c3b7d6c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ea:33:a0:3d:70:58:fe:a7:82:c7:b0:e9:aa:
8f:74:23:75:6f:77:02:1b:05:60:73:8d:d7:89:25:
30:23:2e:5e:8c:99:f1:0c:25:fe:dd:f2:e7:f5:20:
e0:3b:bd:84:9d:86:c6:70:f8:c0:5b:97:2b:7e:f0:
ea:b1:82:b8:79:12:01:c9:34:fc:66:7b:c8:d7:4c:
51:93:2b:05:5d:07:d5:a5:f1:68:fc:b2:e4:2c:59:
a1:d3:94:1a:c8:57:6a:57:d7:45:4c:64:39:3f:dc:
24:f8:95:5d:c8:2b:a3:66:17:5e:d5:f8:99:58:1a:
90:b8:0b:a4:3d:c2:51:19:53:33:91:09:d9:c4:b4:
7b:60:b9:6b:e0:c2:e2:a5:a1:5b:b1:6e:27:c7:5b:
f4:d8:23:9d:72:a2:0c:41:b7:69:dc:b3:db:cd:31:
9a:31:69:a8:7b:2a:ca:3c:a6:09:7f:c1:a5:12:e6:
08:d2:0d:00:56:e8:bc:94:f5:51:8f:e5:d7:51:21:
42:93:42:84:e1:13:15:1a:38:b7:a2:a9:3e:5a:90:
70:5e:4a:27:f1:00:9e:f0:bd:e6:c1:4e:42:43:de:
f5:51:a0:c4:57:43:6b:f1:7a:92:1f:9d:8d:b3:23:
f8:c3:c2:14:38:42:c7:3b:f5:c3:07:3b:b3:f3:23:
f1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:CC:56:CB:3F:1D:3E:59:5A:F3:1F:D4:3A:CB:4E:8C:3B:7D:6C:75
X509v3 Authority Key Identifier:
keyid:2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ce:b3:8e:92:e0:bc:38:cb:20:64:ff:99:88:45:cd:be:e6:
48:37:5f:09:04:04:c4:73:22:b4:ab:73:87:37:59:37:ad:41:
d6:01:d1:9b:c0:25:f8:6a:d9:8e:a1:81:e7:e2:0e:04:e6:26:
51:a5:06:f4:c5:e9:7b:37:c3:60:ee:bd:80:29:0c:6d:ff:06:
85:54:77:ab:b7:48:de:98:6b:3b:bc:40:e3:2d:70:e5:39:5e:
cd:29:f0:62:75:a2:15:89:e1:51:94:c4:b6:9d:4e:dd:0e:b4:
55:0c:04:f3:01:09:ac:b1:36:08:a9:54:03:27:ab:13:55:32:
fa:2c:6f:00:38:b6:57:4b:af:29:cf:b8:7a:bc:8e:90:b8:65:
2d:2d:d5:cd:69:2d:9e:44:8b:49:40:a8:d9:b0:93:0a:5d:df:
7d:c3:5e:1b:73:a5:28:91:82:fb:25:1a:fd:6a:0b:7e:1f:68:
fb:88:22:1d:93:21:fa:1e:05:3b:c5:ac:91:6e:d1:18:04:30:
b0:dc:7c:e4:e3:7a:b3:7c:4c:46:06:0f:f4:da:9a:f6:30:e8:
ab:48:3a:4d:b3:3e:e4:39:c7:b9:9b:39:9b:e6:60:a4:70:0c:
c9:d3:71:ca:56:b2:43:a4:de:ed:bf:87:48:33:1d:b8:e3:19:
b1:a4:40:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:09:46 2026 by rpki-client