Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
File: x2v2t4G8-MKACKjo_d5g564xIqo.mft (raw, json)
Hash identifier: vI5urDyxvNK5Xga5JQnjeIMzKpUxL7DPPCK5Sn/NQu8=
Subject key identifier: 39:96:B2:3E:BC:7E:92:F1:F3:ED:7D:21:D1:4A:29:45:A1:B1:29:52
Authority key identifier: C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA
Certificate issuer: /CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
Certificate serial: 019CA945910005B4518A416602FFC34C3ED4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
Manifest number: 1844
Signing time: Sun 01 Mar 2026 12:00:34 +0000
Manifest this update: Sun 01 Mar 2026 12:00:34 +0000
Manifest next update: Mon 02 Mar 2026 12:00:34 +0000
Files and hashes: 1: Kt2R5igqZ7jgASRyGSnLXSO7qyQ.roa (hash: NygL3NUXK+uQ3D8358PTKE1x4Au6POhod3XQJw59Ke4=)
2: x2v2t4G8-MKACKjo_d5g564xIqo.crl (hash: L+/L/p1tdMVJi5auh0XUJJMWgnR8hXkejawLDjRSsMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:91:00:05:b4:51:8a:41:66:02:ff:c3:4c:3e:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76bf6b781bcf8c28008a8e8fdde60e7ae3122aa
Validity
Not Before: Mar 1 12:00:34 2026 GMT
Not After : Mar 2 12:00:34 2026 GMT
Subject: CN=3996b23ebc7e92f1f3ed7d21d14a2945a1b12952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:23:11:82:1b:74:e9:5e:51:f6:c2:70:46:
09:74:c1:b8:f4:e5:13:fb:4f:97:d6:8d:80:e5:10:
9c:a9:94:cc:4d:00:cb:0b:a2:ef:55:b4:a1:08:19:
ed:71:e3:09:b4:10:e6:cf:b5:38:61:a2:85:dd:4a:
1a:d8:06:c6:14:41:9f:9a:73:9f:e7:5d:89:1b:bb:
6a:c7:bb:2c:f2:da:1e:9e:c9:51:eb:72:06:d7:d9:
41:c7:3c:b2:85:f0:f0:6b:42:31:2b:67:c2:99:b9:
46:fa:e2:80:da:f8:61:6e:f8:71:ea:b9:47:cb:2a:
c1:a7:97:7a:3d:4f:c2:8d:61:0d:e4:10:85:ad:fe:
b5:c6:cb:7e:39:d5:62:5f:ae:3b:7e:22:f0:77:62:
fc:95:b7:9b:df:0e:0e:88:01:98:fb:f1:13:1b:9f:
0b:0c:95:b9:d0:ca:71:97:3d:19:66:ef:eb:90:db:
8b:56:3e:b6:65:0f:26:8a:78:ea:45:33:6a:bf:54:
0c:c6:59:5f:f6:5b:96:5a:51:60:7f:8e:75:7b:3c:
48:15:85:cf:10:0f:ce:4f:03:9f:27:ea:db:4e:0e:
63:a7:7e:c7:40:d4:5b:d6:f6:5b:bb:6d:14:ef:ac:
c5:ce:bc:95:af:17:e5:74:0e:92:84:01:39:08:19:
26:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:96:B2:3E:BC:7E:92:F1:F3:ED:7D:21:D1:4A:29:45:A1:B1:29:52
X509v3 Authority Key Identifier:
keyid:C7:6B:F6:B7:81:BC:F8:C2:80:08:A8:E8:FD:DE:60:E7:AE:31:22:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2v2t4G8-MKACKjo_d5g564xIqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b178bd-b6a5-4610-8c6a-abf4840ea607/1/x2v2t4G8-MKACKjo_d5g564xIqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:dc:53:e2:0b:ee:1d:e6:b5:56:fb:32:c9:54:82:f0:c9:f2:
ba:f4:3f:a0:e2:ec:9d:88:62:6b:90:19:cc:11:3d:41:5e:0c:
1c:63:86:77:8e:e0:1e:8a:8c:aa:7f:ca:ff:2a:93:4e:cb:2c:
b7:cc:1f:b8:92:6d:f7:05:a9:4e:89:d4:f1:d8:ed:9a:b7:40:
0c:df:18:8f:b9:ce:a8:4c:40:5d:69:37:7a:a7:b0:f9:c0:7a:
44:a0:77:7d:81:05:4d:f4:e0:51:81:a7:cd:68:ff:58:e3:c8:
0b:81:3d:e3:dc:70:bd:ac:16:e7:5d:2d:3d:7b:ba:af:53:87:
fd:40:bb:c5:50:28:00:51:a3:e8:79:ff:82:c7:db:37:7a:10:
64:10:5f:74:31:2e:43:79:35:53:52:e1:b9:57:af:bd:b0:f8:
43:dd:f0:8e:e1:c4:8e:fb:e1:24:fe:2f:e2:e4:cd:1e:8c:19:
e1:f8:5d:d8:fe:3d:64:e9:5c:2d:dc:e3:9f:91:75:3f:44:54:
12:ba:f9:22:b9:36:a6:f9:06:f1:82:34:46:5c:06:d6:2c:3f:
d2:cf:11:f3:88:2a:0d:9a:00:15:f2:6a:4b:da:b9:a8:ce:9f:
a1:8a:21:9d:3c:3f:f5:3e:1a:3a:b8:8d:9b:34:88:c0:aa:19:
8d:bc:3a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:35 2026 by rpki-client