Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
File: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft (raw, json)
Hash identifier: kDAKXUdgekDVvZtjY4C5MWQT/7bpJJuzyyG63JWtf3o=
Subject key identifier: 28:92:CE:BA:13:E2:23:8D:15:59:E3:D8:2A:5B:10:E4:02:5B:75:27
Authority key identifier: 93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
Certificate issuer: /CN=936cb336c1beb71d4fbbaae243b23352c6270061
Certificate serial: 019D9BBE4C741712E0FB75A831545CA4D212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
Manifest number: 111D
Signing time: Fri 17 Apr 2026 14:00:33 +0000
Manifest this update: Fri 17 Apr 2026 14:00:33 +0000
Manifest next update: Sat 18 Apr 2026 14:00:33 +0000
Files and hashes: 1: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl (hash: 25YUNJxjVaxorFibJrWHNoYWyTKT5yl0FE3rsdcvsj0=)
2: mvepdebQmu_FRJZg6xdj98CWgmg.roa (hash: vtG0XjCKoYFzRLQ8SOB1Ef/RTJntpMOs72e8cd2gM38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:4c:74:17:12:e0:fb:75:a8:31:54:5c:a4:d2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=936cb336c1beb71d4fbbaae243b23352c6270061
Validity
Not Before: Apr 17 14:00:33 2026 GMT
Not After : Apr 18 14:00:33 2026 GMT
Subject: CN=2892ceba13e2238d1559e3d82a5b10e4025b7527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b5:04:cf:5d:0e:1c:b4:86:2b:59:a5:1e:aa:
06:f6:ac:bb:0e:1a:b1:65:f2:09:2d:42:33:9a:02:
e1:c7:6d:09:8a:97:9a:21:ed:d8:c2:41:94:b1:e0:
d0:cf:b2:77:e4:85:8f:e4:6c:14:81:18:35:4b:39:
e9:43:88:8f:05:d7:06:1b:9b:11:ee:a1:8e:f3:8d:
87:0c:66:56:ad:54:90:7f:72:9c:a6:b7:ac:73:83:
0f:b7:53:12:3b:2d:cd:e6:30:aa:af:31:9d:62:90:
02:cf:37:c4:fe:c7:84:bc:14:d8:a6:59:5b:f8:ba:
77:26:8f:a5:64:dc:0a:32:bf:13:2f:50:ed:02:42:
7f:ba:49:84:58:fd:78:8e:a2:10:0f:11:ed:21:dc:
a2:d8:f5:4c:ef:9d:f6:43:fc:e6:13:46:3b:26:6b:
87:9b:e6:a2:62:97:b3:15:a5:09:58:f6:7c:35:8e:
31:2b:fc:5d:91:fd:a9:71:d0:cc:e8:81:23:ef:e1:
d3:fd:73:a2:6f:0a:48:c0:60:cf:aa:cb:bb:ca:5b:
be:c2:ab:b1:f9:be:d2:a2:2b:28:50:b1:65:36:be:
d3:9d:43:fd:54:a8:a5:e8:0a:18:0f:fc:1f:2d:8c:
12:02:5d:7d:a8:c9:a2:3e:e5:5f:63:78:18:41:37:
66:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:92:CE:BA:13:E2:23:8D:15:59:E3:D8:2A:5B:10:E4:02:5B:75:27
X509v3 Authority Key Identifier:
keyid:93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:6c:9a:63:f4:02:d3:b8:95:9e:01:98:f2:c0:4b:7e:c4:e5:
19:76:93:56:58:61:82:92:2a:19:67:4c:87:57:94:86:c7:e1:
e1:94:11:9e:21:7d:68:2a:56:6f:df:0f:74:ca:04:dc:ac:d8:
fd:a5:28:a8:6b:09:44:e7:4e:89:af:a3:79:bb:c4:21:bd:86:
48:f2:08:8d:df:e6:f6:33:66:fd:81:49:1b:1d:ba:30:f1:9a:
41:b3:98:b4:05:3f:14:0e:a1:6f:bb:2a:d0:ce:4d:6b:08:bf:
3a:4c:dc:0e:3c:e4:e1:4f:6f:c8:5c:4c:fc:5e:57:dc:7e:fb:
62:c6:b7:aa:e2:a4:53:1c:3a:61:04:9a:d1:ca:13:af:c9:93:
14:84:f9:05:6a:98:7f:8d:59:43:e1:bb:5d:71:b2:25:ca:f5:
67:f9:70:70:9c:b6:ea:ef:ac:4f:a0:d7:9b:ef:7e:7b:6e:cb:
bb:50:48:c5:b9:e5:c2:b5:1a:c4:71:a0:4c:cc:4d:37:5e:f5:
cf:23:09:82:40:2c:81:fd:a9:75:72:a9:03:0c:38:33:54:b1:
a0:90:2e:19:96:25:95:24:44:5c:e2:db:06:ee:e4:96:1b:18:
cd:5b:46:a0:c2:c4:76:f5:66:be:3b:57:96:1d:d5:e7:41:8d:
90:25:ec:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:01:47 2026 by rpki-client