Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
File: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft (raw, json)
Hash identifier: QDELRGBiHvxhJ5mZ+f4I/HDXU0MCdMvrgsxFldvS9/I=
Subject key identifier: B6:E3:8B:B4:2C:EC:92:07:71:07:B7:0E:04:7E:2F:41:F6:53:00:6A
Authority key identifier: D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
Certificate issuer: /CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Certificate serial: 019D9AE3104F4803C07F472058B4A95B7C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
Manifest number: 0614
Signing time: Fri 17 Apr 2026 10:01:05 +0000
Manifest this update: Fri 17 Apr 2026 10:01:05 +0000
Manifest next update: Sat 18 Apr 2026 10:01:05 +0000
Files and hashes: 1: 2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl (hash: mOCsfnN0Km3Dy8nHjMvF33ReXfAm+NW7uHANYgtfgiQ=)
2: DvIctBZSmJLEtaUcD7bCK6NQCY0.roa (hash: oCuijjXHgGm50a2aRFIYkyg82b9NCKAQLaPxn1yaYag=)
3: boj2I10q-Vtxm1mDxVZdZ8e5Bl8.roa (hash: DUZK7UDn7wM47XNLA1A7zjQp12qeza+x17ykgXtiqyU=)
4: ndIFovkOM59q_GrNUdf0rAGkzdk.roa (hash: IjeHyVSgVr9enrcMavU9+Zitjl1p4kguwLZr/wm0Fuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:10:4f:48:03:c0:7f:47:20:58:b4:a9:5b:7c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d882a197340d3584e6ac17c1fb2a9900ae4f603c
Validity
Not Before: Apr 17 10:01:05 2026 GMT
Not After : Apr 18 10:01:05 2026 GMT
Subject: CN=b6e38bb42cec92077107b70e047e2f41f653006a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:d5:8d:5d:6f:fc:23:65:88:2a:08:f4:fd:
15:66:f5:4e:fd:83:49:59:03:f7:e4:d6:fd:f7:03:
11:a6:ed:8d:b9:90:f7:cf:c6:8a:3c:3b:61:c0:8e:
46:b0:ac:a7:db:9b:71:93:c6:ca:3c:35:7d:d4:b3:
59:76:3e:ec:4c:f3:2a:1a:bb:36:93:13:83:0a:f9:
69:e9:cd:59:e3:55:cc:59:2c:6e:7d:61:f5:80:3f:
61:c8:22:fb:fd:67:f8:2b:cf:32:7e:e2:16:e2:31:
d5:39:72:64:53:41:85:98:33:af:19:25:1a:ac:ef:
65:eb:ed:6c:4e:bb:3b:6c:d4:b5:94:04:b7:3a:63:
60:9b:39:6f:ca:b0:c4:c4:05:e6:54:3f:2b:f2:f0:
13:3d:26:38:71:36:33:4a:61:96:a1:c6:76:3e:6b:
c0:37:37:b8:32:29:85:ba:f1:99:c5:ca:ee:a9:4e:
ce:19:da:ef:bf:63:1a:84:1c:09:1d:c9:6d:2b:c6:
0f:03:60:a4:5e:1f:dd:61:72:e1:e4:af:c4:4d:95:
e4:8d:39:f1:d3:1e:9d:f3:6c:12:8e:f9:a2:7d:f5:
8b:7c:1e:2b:3a:1c:99:1c:b7:76:ff:a9:4b:d5:27:
c9:95:84:d7:62:37:73:56:a8:45:56:da:f5:81:0b:
72:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E3:8B:B4:2C:EC:92:07:71:07:B7:0E:04:7E:2F:41:F6:53:00:6A
X509v3 Authority Key Identifier:
keyid:D8:82:A1:97:34:0D:35:84:E6:AC:17:C1:FB:2A:99:00:AE:4F:60:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2IKhlzQNNYTmrBfB-yqZAK5PYDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/841c43-0269-4289-8fa5-b05ae5ca2d5e/1/2IKhlzQNNYTmrBfB-yqZAK5PYDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:72:8b:07:54:3f:2f:0b:2c:73:9f:6e:61:21:0e:8f:4b:a3:
62:4e:54:56:c2:85:2b:d5:51:8d:a4:a1:14:15:6b:8e:df:d2:
5f:12:a4:b8:a3:4a:19:7b:45:f6:3a:6e:ce:0a:67:3d:c0:98:
61:10:ef:25:7f:ea:43:a2:3d:53:04:6b:f2:6b:6c:1e:c7:c7:
44:8b:d0:0c:c2:b4:de:c3:66:9b:5e:a5:ec:58:b3:ab:03:47:
c3:66:a7:fb:dd:cf:d8:e8:4d:3b:8f:eb:c9:54:d2:da:db:22:
d2:12:e7:54:a0:47:ab:8f:ad:3a:59:9d:03:a0:de:09:f8:4c:
a8:30:9c:79:51:14:28:aa:9d:af:bc:26:7d:5a:66:81:f9:89:
be:8f:2e:ea:50:e1:a2:13:11:a6:cd:2a:8e:35:4d:26:fb:d6:
c2:f1:20:af:a7:ef:df:9a:e3:b0:9d:e5:e6:37:55:04:48:cc:
c0:8d:6c:80:64:fc:73:7d:96:ed:9a:88:5a:63:53:ad:51:a5:
ce:0c:d5:3f:47:58:a1:5f:37:aa:c4:f2:c9:ed:1a:6d:30:11:
04:3c:20:1e:e5:8c:29:9e:2a:57:06:e6:43:49:53:22:0d:a3:
0f:78:d2:1a:59:d8:7c:c1:7d:9d:5a:99:b1:87:ca:9a:80:f1:
9f:65:98:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:04 2026 by rpki-client