Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
File: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft (raw, json)
Hash identifier: tbzZrlOzyx1Zsk9yN/gDKl9+LjiEbR3iZAviZjrJjik=
Subject key identifier: 10:B7:BB:CE:16:4C:C7:C0:1B:3F:57:FA:10:CE:18:62:D9:A2:13:FC
Authority key identifier: 2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
Certificate issuer: /CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Certificate serial: 019CAA8F5EFEE3898F6CB2DD7AD946528BA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 18:00:48 +0000
Manifest this update: Sun 01 Mar 2026 18:00:48 +0000
Manifest next update: Mon 02 Mar 2026 18:00:48 +0000
Files and hashes: 1: Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl (hash: Ewo5KBeRsBJ9jWGFW0azY6GJvxKdFbkRM9anoP6LIbA=)
2: xa8hNYnY5YtZ3lvhBoGXHaoWdZs.roa (hash: cfTBRZqteMXbej9rAKnDcge1IuDIIPwXFt2wZ9TtEP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:5e:fe:e3:89:8f:6c:b2:dd:7a:d9:46:52:8b:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e6a7bdb11c4ffd77718081510c91431178cdb
Validity
Not Before: Mar 1 18:00:48 2026 GMT
Not After : Mar 2 18:00:48 2026 GMT
Subject: CN=10b7bbce164cc7c01b3f57fa10ce1862d9a213fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b8:cf:f3:83:7e:ad:ec:f9:de:2e:1a:d1:18:
90:53:c1:6f:27:60:a5:c2:84:47:ea:48:d6:f3:e9:
c7:1a:df:85:e1:7c:b7:13:a0:31:71:b1:dd:dc:03:
1b:a1:13:b4:21:8a:b5:06:b8:b8:4d:1e:29:26:31:
2c:d7:1e:d4:a9:32:a5:f2:f8:e7:6f:21:72:3e:5d:
34:b1:df:93:c5:ab:ce:f2:54:4d:c7:72:f8:4c:15:
de:db:1b:3d:29:0c:03:a6:05:cc:2a:df:f8:98:0c:
d0:db:6f:ca:7a:64:14:07:53:89:bb:42:77:00:8d:
1a:06:db:88:fc:5d:4b:fa:2d:cc:c9:1f:a0:4d:fc:
56:58:64:41:0a:10:4d:ba:6c:19:f1:3f:87:0d:5a:
22:65:25:8e:15:97:bd:ca:c4:f3:9d:35:ab:d3:f3:
b7:f8:52:fe:d4:41:9c:23:3a:9d:f0:92:40:bd:77:
41:3e:0f:be:a4:51:92:e4:2d:55:65:1d:fc:7c:93:
25:98:e9:0a:62:3c:1c:f7:f2:77:1b:4a:7f:67:fc:
ac:e9:ee:8b:86:70:48:81:23:5d:75:d0:69:78:24:
69:af:87:92:3c:5a:c3:a8:5e:1f:41:ce:3d:d1:eb:
db:9c:df:b1:80:18:91:55:47:5e:52:b4:12:78:0d:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B7:BB:CE:16:4C:C7:C0:1B:3F:57:FA:10:CE:18:62:D9:A2:13:FC
X509v3 Authority Key Identifier:
keyid:2B:0E:6A:7B:DB:11:C4:FF:D7:77:18:08:15:10:C9:14:31:17:8C:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2d238e-b31c-4ea0-98cc-c4febc3d6e52/1/Kw5qe9sRxP_XdxgIFRDJFDEXjNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e8:c1:2c:18:c0:d0:31:5a:e7:4b:ee:e2:a6:49:58:8d:48:
7d:0c:8f:a2:d2:c7:40:9d:44:15:bd:dc:6e:8d:0b:9b:bc:27:
cb:e8:1d:a4:06:14:82:41:3e:ff:97:09:34:ae:86:e7:48:7d:
79:5d:f1:f9:0d:59:3a:7d:36:58:55:e7:a5:c4:b5:41:1f:75:
1a:0d:5c:d1:82:1c:6e:72:f4:4c:1f:09:e2:5b:55:d0:59:ec:
28:78:b8:78:df:7c:ff:6b:1b:a0:00:33:b9:79:aa:8a:d3:9a:
1b:fb:14:f9:64:58:29:85:c5:86:83:41:71:2d:67:1c:e7:ae:
59:98:3e:10:06:6f:de:96:52:77:13:5f:c1:f3:91:42:14:90:
38:d0:d5:38:10:10:b6:82:ad:16:59:87:64:d7:c0:66:8e:0f:
96:fd:47:99:91:01:f6:0f:f2:ad:d0:2f:73:b3:1d:68:9a:55:
00:e9:80:34:f4:02:3b:a0:14:1e:7b:1e:da:2e:af:7b:60:4d:
9d:82:1a:21:d8:2c:f1:18:a1:df:1f:af:01:3b:03:93:de:2b:
db:ed:55:b6:84:9c:f5:90:fa:27:f1:23:db:25:8b:a7:53:9b:
7b:53:3d:4b:87:cd:5b:5f:2a:1b:b2:e0:dd:7f:1d:89:08:9d:
4d:0c:81:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:19 2026 by rpki-client