Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
File: Kq8k6REaiJ202uCH5ICeEIbjP4I.mft (raw, json)
Hash identifier: Aof0C1A9GPQI2lAYrm9+j194YyIOnDW8JQ/HU6bNZlk=
Subject key identifier: C9:C9:7D:8A:0B:E2:39:41:42:B5:83:CE:65:2C:5A:A0:B2:68:56:42
Authority key identifier: 2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
Certificate issuer: /CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Certificate serial: 019CAAC67491B8C89E027B1144D3483F44B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
Manifest number: 17A2
Signing time: Sun 01 Mar 2026 19:00:58 +0000
Manifest this update: Sun 01 Mar 2026 19:00:58 +0000
Manifest next update: Mon 02 Mar 2026 19:00:58 +0000
Files and hashes: 1: Kq8k6REaiJ202uCH5ICeEIbjP4I.crl (hash: 6QbX73xkroIto3yU72M7ec9M+2aYG0hrRkNM/Sakg08=)
2: oyKh1GZmmmicse4bqcfsPq9PxSg.roa (hash: YSuCQpmgXDGJyq+euD80LcmH0pwmzSboam85gWy8j5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:74:91:b8:c8:9e:02:7b:11:44:d3:48:3f:44:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaf24e9111a889db4dae087e4809e1086e33f82
Validity
Not Before: Mar 1 19:00:58 2026 GMT
Not After : Mar 2 19:00:58 2026 GMT
Subject: CN=c9c97d8a0be2394142b583ce652c5aa0b2685642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:5a:5e:56:a6:0a:ec:bf:7a:65:79:16:3a:
6d:a9:5a:f0:08:63:6c:2f:80:4f:e9:24:3d:5d:da:
62:b7:cb:f7:3e:53:e8:59:8f:83:ad:5e:6e:ae:a6:
98:df:20:ac:bd:d7:dc:00:8a:05:e6:4f:c4:c5:8c:
d3:6e:6d:41:aa:66:54:05:e1:5f:9a:15:1d:c0:00:
62:ee:fd:cb:8a:0a:94:b4:1d:bb:35:a3:f9:3d:25:
bf:25:62:58:4c:89:22:fe:ae:c4:1f:9a:09:5e:4b:
4a:d0:ab:71:44:3b:63:21:57:9b:58:d8:ee:1d:de:
76:49:43:da:13:40:f1:b0:64:d5:17:bb:48:6c:eb:
14:2f:bf:b5:07:40:eb:28:9b:bd:73:0e:3e:aa:a1:
df:cf:f3:7e:25:2d:9a:0c:10:a8:12:77:ec:e2:19:
11:7c:28:29:61:4e:c9:c9:ce:6b:75:6d:4a:2f:db:
99:40:9a:f2:2b:37:97:7f:02:98:9b:ad:64:f6:76:
96:cf:3d:2e:fa:7a:23:2a:ac:de:5e:36:48:3c:ff:
28:40:55:63:ba:1f:21:c1:49:5b:30:0b:78:39:46:
55:db:58:7d:6e:4f:4d:4f:90:29:1f:7f:3e:6c:08:
9d:19:e5:6c:f1:26:16:e3:0f:1c:29:38:19:93:b7:
0c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C9:7D:8A:0B:E2:39:41:42:B5:83:CE:65:2C:5A:A0:B2:68:56:42
X509v3 Authority Key Identifier:
keyid:2A:AF:24:E9:11:1A:88:9D:B4:DA:E0:87:E4:80:9E:10:86:E3:3F:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kq8k6REaiJ202uCH5ICeEIbjP4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c80896-c36e-4627-8353-341c3fa45b43/1/Kq8k6REaiJ202uCH5ICeEIbjP4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1a:9a:a8:4d:84:a0:87:cf:48:a5:4c:0d:d5:ed:97:16:7b:
f0:e5:7d:dc:bf:36:4d:2b:f9:78:c7:e6:2e:5a:af:9e:f1:04:
82:cb:37:68:48:a4:d3:3f:13:96:f8:71:89:be:c1:3f:28:75:
0e:74:3a:83:02:14:dd:60:81:e7:08:50:8f:43:6b:97:d9:49:
ab:7b:9a:20:7d:dd:83:0f:96:4c:07:cd:0e:d1:e3:d5:98:74:
aa:18:8d:2b:11:f0:b5:cc:32:34:9d:1a:f7:35:1b:a0:1b:65:
18:0d:fc:95:e3:64:82:87:2f:5b:38:f7:1f:5d:b9:62:7c:e2:
39:10:99:24:a0:1a:66:53:61:3b:32:de:c8:8b:63:9a:04:97:
9d:f5:26:e0:3c:21:8a:51:35:3a:d6:f1:4f:25:59:1d:04:2b:
2a:e9:b1:b3:9c:e3:d4:a0:fa:7e:c8:69:75:d8:64:82:4d:37:
f7:f3:54:0f:68:a3:5b:0c:a9:7f:b3:3a:c6:f7:07:4f:65:f9:
7f:0c:a2:35:73:2f:f2:9b:99:b2:83:68:f0:69:df:59:f1:35:
f0:bd:31:38:46:56:42:29:77:9c:60:3d:d0:94:6d:ff:47:8b:
29:b4:34:7a:bf:ad:c8:23:b1:73:4f:42:4c:9c:5c:99:2c:c6:
a1:e5:51:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:24 2026 by rpki-client