Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
File: kR2gx6mUBcRrqthMudk-g0WZyOE.mft (raw, json)
Hash identifier: bLEDfxiIoplIYkYnZeVYLIXZ5LqqglI50DXEP2Ze5aQ=
Subject key identifier: 4C:78:3C:68:22:EF:8C:2C:7B:16:52:3E:50:5F:8A:55:91:02:7D:B4
Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Certificate serial: 019CAC10636A5F4763F9D1886030BB6C0B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 01:01:21 +0000
Manifest this update: Mon 02 Mar 2026 01:01:21 +0000
Manifest next update: Tue 03 Mar 2026 01:01:21 +0000
Files and hashes: 1: 0kE9whcbqDZPFxCT664hh63BKUs.roa (hash: 5C4ga/+QHi4o11rdDpXGfOfWtVfwE8VOC9vvm4vn/b4=)
2: kR2gx6mUBcRrqthMudk-g0WZyOE.crl (hash: jfahb8e+r5MosEXc6KaUkSVhmfpUVwB/dlWVu97YPXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:63:6a:5f:47:63:f9:d1:88:60:30:bb:6c:0b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Validity
Not Before: Mar 2 01:01:21 2026 GMT
Not After : Mar 3 01:01:21 2026 GMT
Subject: CN=4c783c6822ef8c2c7b16523e505f8a5591027db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:14:3f:6e:f7:fb:91:3c:bd:88:79:c1:3a:
cb:5d:79:1b:17:cb:ca:6c:2e:1a:d4:57:31:44:35:
3d:a2:2f:1a:ce:79:a8:fd:4b:43:15:9e:03:ce:38:
98:ad:e9:63:d7:25:07:20:39:a8:6c:20:44:bf:58:
85:46:59:7f:47:07:2f:45:5b:6d:f5:50:50:a5:61:
33:62:04:26:ce:1a:9d:4d:69:87:f4:11:3b:b7:d9:
69:7b:ba:5c:a1:2e:fb:1d:ae:da:e0:56:08:11:09:
5a:de:c8:f7:05:36:3f:b3:e0:e8:80:58:f7:a5:2c:
65:23:2f:b2:3e:bf:dc:db:2c:0b:b1:0f:98:4c:d8:
1c:88:d2:4a:3a:5d:65:a1:f3:4f:0a:a7:ee:37:20:
90:36:27:87:43:7f:fd:ac:78:e0:0d:3b:2b:cf:e7:
12:2f:dc:02:ce:0e:3b:78:94:0e:3e:00:b6:84:54:
18:d9:c9:6d:42:49:03:c2:f9:a3:e3:e9:ec:a3:10:
cb:9d:65:35:5c:88:33:33:5e:28:0b:fc:7a:cf:e8:
9b:4a:82:f4:1c:28:10:56:74:0e:c5:11:10:d5:4f:
c9:19:bd:58:cd:4e:36:f0:82:0a:6e:54:67:58:a3:
f1:61:f6:b8:fc:05:3d:04:9b:0b:a1:30:3e:5f:c3:
3c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:78:3C:68:22:EF:8C:2C:7B:16:52:3E:50:5F:8A:55:91:02:7D:B4
X509v3 Authority Key Identifier:
keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:cf:d2:73:45:09:2f:4a:02:6d:19:55:8f:f0:c4:b5:62:42:
03:5e:bb:39:ec:5c:d7:48:62:84:81:df:8d:7a:fe:f7:58:7d:
b4:bc:a6:21:ee:e8:80:44:f1:d2:13:e6:3b:4d:d6:e0:cb:74:
77:76:79:2e:fe:c4:e9:40:b9:ce:fe:a6:1f:7c:3a:a5:c4:1e:
1a:d4:3c:e2:a3:f5:3e:e5:bb:94:39:f1:b1:be:1a:3e:06:87:
53:5a:76:42:79:a4:f9:32:77:1d:11:54:e3:fa:dc:9d:4d:b7:
5c:37:17:bb:f3:f9:f2:16:74:bb:ee:48:1e:57:a2:82:36:c4:
0c:8a:09:5d:c3:07:84:ae:56:fd:e3:3e:34:53:8e:82:3c:ad:
b3:6c:97:9f:8b:f1:8b:3c:b6:79:24:d7:42:51:35:ee:a3:48:
3e:92:41:e2:ec:28:c0:f2:44:7b:11:0e:79:9c:ef:59:78:3f:
ed:de:da:af:80:0e:3c:fe:be:69:36:67:e8:f0:a3:6e:b6:3f:
a6:76:c6:31:c5:ee:1b:f3:db:3b:6e:64:eb:51:1e:f3:3c:74:
88:c1:92:bb:4c:d8:e2:49:5c:26:8d:12:ca:d8:cd:66:8b:5e:
52:ce:e9:47:db:77:7a:63:95:ca:13:6c:83:a1:5f:1a:60:c8:
ad:1c:c4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:57 2026 by rpki-client