Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
File: 2PkNpCoz_9kWTQwFsN5PZWKHB24.mft (raw, json)
Hash identifier: 9qL8lU57Cra3zBASnGfAUpmY8fgA/UuAgv0mRA+sUdM=
Subject key identifier: DA:49:70:8F:A2:19:8A:24:66:74:F6:F7:F0:36:AC:CF:E9:02:00:77
Authority key identifier: D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
Certificate issuer: /CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Certificate serial: 019D992B08D75658AB72DDBEAA19DB2D6328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
Manifest number: 1194
Signing time: Fri 17 Apr 2026 02:00:27 +0000
Manifest this update: Fri 17 Apr 2026 02:00:27 +0000
Manifest next update: Sat 18 Apr 2026 02:00:27 +0000
Files and hashes: 1: 2PkNpCoz_9kWTQwFsN5PZWKHB24.crl (hash: alX+FyPamwEZrIDG/TeZ7YvpMe8eWQ9N0IpNRoYpWNI=)
2: 9GE2MSYkYwJdnPGl5UxGhSlswCw.roa (hash: Eh4Z6Mq41FKE8k4QaeXWXSTKimihJnuRTJR0xYvIdDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:08:d7:56:58:ab:72:dd:be:aa:19:db:2d:63:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8f90da42a33ffd9164d0c05b0de4f656287076e
Validity
Not Before: Apr 17 02:00:27 2026 GMT
Not After : Apr 18 02:00:27 2026 GMT
Subject: CN=da49708fa2198a246674f6f7f036accfe9020077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:2d:be:65:16:f3:24:3e:4d:e3:98:5a:88:
ea:7c:03:e1:62:70:70:56:0a:23:f9:03:79:5b:98:
6e:87:ad:55:3f:19:95:6e:fc:1b:77:9d:0d:50:1c:
e5:53:82:34:35:de:ef:0b:5b:29:70:9a:15:53:c4:
da:f9:4b:3d:bd:9f:1d:65:ab:11:26:6c:bc:e4:21:
74:f2:c8:2e:93:8b:c6:0d:26:6d:7c:d1:f9:e7:4b:
8b:65:23:31:89:3d:0e:d7:96:a3:49:4e:67:86:e2:
34:2d:40:e2:f9:dd:42:1b:69:10:a2:28:c3:9c:9c:
e2:dd:7b:6c:63:37:3f:9d:fe:42:3c:18:fe:a2:2b:
64:3a:5d:91:bb:e3:0f:e0:bb:5b:22:b2:1b:9c:c9:
3e:84:9d:db:f4:ca:aa:8d:56:ac:63:6d:79:d0:5d:
5d:b6:f0:41:12:1f:2d:82:cc:da:e0:c7:03:13:2e:
89:d9:2c:16:66:6d:47:77:63:c9:21:9c:dc:38:b1:
90:9e:03:64:32:e1:fb:53:8f:06:b5:20:28:93:e2:
b2:71:89:6d:93:6c:b7:90:34:fc:a1:3d:10:71:6f:
79:ec:e4:7a:2d:72:c9:61:29:a5:ef:86:a6:d8:6b:
03:e2:5f:31:8e:1a:9b:44:fb:ba:c1:2a:36:d0:d2:
c5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:49:70:8F:A2:19:8A:24:66:74:F6:F7:F0:36:AC:CF:E9:02:00:77
X509v3 Authority Key Identifier:
keyid:D8:F9:0D:A4:2A:33:FF:D9:16:4D:0C:05:B0:DE:4F:65:62:87:07:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PkNpCoz_9kWTQwFsN5PZWKHB24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b73d31-7182-4aa8-b0f9-23b463b5ea77/1/2PkNpCoz_9kWTQwFsN5PZWKHB24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d1:ac:60:f3:46:e1:59:43:37:70:10:b9:f7:f7:80:42:a3:
0d:1a:0a:68:9c:72:24:4c:2c:17:d0:e4:69:30:65:f0:5a:08:
b4:85:e7:4b:6a:85:e1:38:9e:ab:61:2e:f8:06:19:f7:67:61:
e0:5b:9b:17:20:f4:18:2d:0c:23:82:09:99:3f:fd:3a:6e:d7:
10:21:2c:05:b5:72:5b:28:c2:00:74:f8:97:d9:bd:89:d3:06:
99:c6:0e:e1:36:94:b2:c1:a7:af:e5:82:5d:58:7a:a7:d8:ab:
ab:8f:e8:c5:30:9a:7a:c7:a2:e9:ff:86:ef:73:a0:08:d9:a7:
72:c0:02:da:2b:86:3a:5c:fd:2c:20:3f:c9:91:ff:d7:06:7f:
01:1f:f2:16:7e:8e:a0:93:f3:94:6e:8d:19:10:02:e7:86:59:
d2:93:9d:ea:fe:1e:da:e8:0a:f7:48:00:36:e3:74:e2:21:65:
8b:21:82:d1:7d:77:4e:5e:21:ed:22:df:88:d0:38:f8:d5:d8:
92:52:2e:04:e8:2e:43:39:06:7f:71:89:37:40:41:31:bd:9f:
b7:46:bd:00:15:e9:05:fd:d6:17:fd:3a:29:88:ed:b8:f9:d6:
78:e9:e6:5e:a2:8b:ff:75:b6:60:c2:32:c8:24:1e:89:7e:39:
0d:36:7b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:29 2026 by rpki-client