Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
File: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json)
Hash identifier: JpaGkte9P6+dvWypVWsIrBUYkaUgNdXsj5fS83aSnxw=
Subject key identifier: 8E:7C:4B:F2:CF:51:9E:27:7E:08:FC:B1:19:D2:E0:77:09:AD:A6:A6
Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
Certificate issuer: /CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Certificate serial: 019CADC7FF25E07CA8C7B88D9F6169583AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
Manifest number: 17F7
Signing time: Mon 02 Mar 2026 09:01:31 +0000
Manifest this update: Mon 02 Mar 2026 09:01:31 +0000
Manifest next update: Tue 03 Mar 2026 09:01:31 +0000
Files and hashes: 1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: hc1Gs8nawoygXNIOoZGRYGJCNJqZT/VbPq8pkN8mG/4=)
2: ezywn8EPx5ODLOytvX7dXsPm7gc.roa (hash: geqaFC8LHCTX2LcxH4kfFFCGPOyVbzF9N0haayABzHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:ff:25:e0:7c:a8:c7:b8:8d:9f:61:69:58:3a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Validity
Not Before: Mar 2 09:01:31 2026 GMT
Not After : Mar 3 09:01:31 2026 GMT
Subject: CN=8e7c4bf2cf519e277e08fcb119d2e07709ada6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:65:04:5f:31:8c:fd:86:26:5a:0c:55:ce:
34:6d:9f:24:72:b9:ab:c7:77:89:85:47:69:e6:8c:
b5:b2:82:bc:11:bb:ce:94:5b:1b:10:4d:b6:d4:c9:
6e:bc:0b:f9:82:50:5e:29:cb:ff:60:cc:7d:17:30:
22:9a:0a:6e:3a:1e:3b:95:5b:a1:6e:45:0a:64:02:
87:87:4b:81:fb:4c:a1:bb:fc:d4:90:37:45:6f:6b:
18:6a:ab:20:f4:5b:44:a7:06:f1:c6:c8:cf:03:91:
92:b6:c8:d0:53:ff:5c:3e:19:db:a0:90:9b:7a:49:
7c:2d:e6:9e:d4:91:8a:87:0c:2e:d5:70:93:f1:1b:
9c:ef:06:78:4f:f6:aa:0c:e6:18:2c:ef:27:78:e8:
43:ab:2f:37:70:b6:ef:4e:d4:a5:a9:7a:10:cf:ae:
1d:4d:37:d2:be:99:0b:e4:6d:7e:9f:fd:53:18:ed:
1d:b4:b6:78:c8:09:07:83:63:a7:3f:dd:52:6e:a6:
04:a5:a6:74:c5:28:6b:2d:e1:e0:2e:75:26:af:c1:
70:42:3f:a2:ff:0e:7d:ba:96:a1:d7:4c:78:2e:ec:
9c:d4:a0:18:88:b9:f5:98:ae:16:63:99:26:c8:b6:
80:d7:02:88:d3:e2:23:62:8e:8c:90:39:cf:92:2c:
7f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:7C:4B:F2:CF:51:9E:27:7E:08:FC:B1:19:D2:E0:77:09:AD:A6:A6
X509v3 Authority Key Identifier:
keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d5:10:da:bd:c5:7b:4b:dd:8f:e6:c3:47:2d:b5:f1:aa:10:
bf:e7:28:94:8c:ee:a1:e7:37:e7:fc:d9:9f:8e:e0:61:64:31:
78:68:ee:87:cb:bd:41:c6:35:2f:5a:cc:6e:3b:79:17:56:71:
be:d1:a1:d3:02:e7:79:91:a8:cd:3a:ee:94:51:00:e3:7b:4b:
98:7a:ad:ad:5e:2d:60:37:3f:54:73:8b:71:07:7b:31:16:c0:
51:93:94:ef:b9:6f:dc:2d:1b:4f:ab:80:e5:c9:9a:38:5d:84:
43:86:3d:18:64:af:a5:82:92:f7:e8:6f:83:c8:35:12:87:63:
e5:1e:84:45:0e:ce:06:74:46:37:56:8f:46:ea:aa:91:17:38:
25:ee:34:d0:3f:7a:89:7b:cf:3c:f3:02:69:87:ee:5b:4b:7b:
c9:b2:3c:73:81:a5:cf:05:15:12:75:cf:d4:29:6f:82:4d:56:
6a:09:70:71:a6:dd:35:5f:80:61:2e:1b:26:1b:5d:03:db:fe:
ea:5e:0a:98:8a:6a:77:de:a8:e3:71:42:c7:69:cd:9a:ec:ce:
51:e5:59:dd:d8:e6:9e:19:9e:61:49:da:40:4b:11:e4:a6:09:
06:99:93:dd:13:a0:80:73:d5:aa:a6:8d:b6:1f:5d:d0:f2:d9:
c6:db:85:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:59:43 2026 by rpki-client