Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: ++5QBPaq0EoaNQFvxNC8V+ZJ66nlYrHSvjLsVUQrWDI=
Subject key identifier: 71:7C:0E:F1:AB:1A:75:DB:EC:65:F4:72:92:66:BB:7C:FC:AC:34:BB
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 019CBFCDC3B6F2676E18517AD771B8EBF1F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 1852
Signing time: Thu 05 Mar 2026 21:00:58 +0000
Manifest this update: Thu 05 Mar 2026 21:00:58 +0000
Manifest next update: Fri 06 Mar 2026 21:00:58 +0000
Files and hashes: 1: HXApDbBFjZ5P8YYPxxOP43B_61E.roa (hash: PABHtWG+f2nnmj23DcOFA1VpAaq32GiJAfPfR67Vqzs=)
2: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: 3grtxfqbaB8b+GWBnpDTGEaISeq9QT5XWMEizKIaF4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:cd:c3:b6:f2:67:6e:18:51:7a:d7:71:b8:eb:f1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Mar 5 21:00:58 2026 GMT
Not After : Mar 6 21:00:58 2026 GMT
Subject: CN=717c0ef1ab1a75dbec65f4729266bb7cfcac34bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:d6:b7:8d:4f:fb:08:e1:16:9a:be:b1:78:
8a:72:45:45:10:86:18:dc:5d:72:47:fb:0f:19:24:
9b:eb:f9:75:2a:e3:30:64:87:54:32:da:dd:21:06:
a3:e9:8e:90:f0:32:c7:0b:08:8a:f9:e9:64:a7:1e:
61:cb:75:9e:8e:57:cf:4a:6e:55:8a:a8:ba:f3:7f:
5a:b5:8b:15:70:d3:70:94:de:9c:89:78:4d:1a:81:
4f:ce:40:4f:da:16:fb:17:4e:30:83:51:d2:3c:33:
66:e7:bf:5e:e7:9b:1a:0d:bb:25:51:55:09:6c:fb:
a1:c1:8d:58:30:5d:ba:14:b6:25:82:70:7a:bc:c5:
1a:a6:cd:2e:a2:b1:6c:57:76:ca:b4:61:ff:40:b9:
c8:6c:82:09:ac:93:66:4d:3e:06:6e:94:3a:ff:51:
bc:ab:1e:64:42:7e:bd:db:73:06:2e:4b:fa:50:c6:
17:61:54:fc:e9:6f:4d:4f:47:a8:43:c3:e4:62:87:
89:b9:ec:bf:2c:24:02:4a:8d:aa:24:2f:18:bd:b5:
78:af:e5:7f:8f:38:16:45:d8:e7:65:7f:f3:52:58:
22:1a:25:05:3d:b7:8e:e4:07:43:20:f3:7f:7f:22:
3c:f9:4b:d3:e9:41:ee:c6:d9:cd:81:1f:53:b8:d5:
47:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7C:0E:F1:AB:1A:75:DB:EC:65:F4:72:92:66:BB:7C:FC:AC:34:BB
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:8a:21:81:d0:4c:23:59:1d:42:68:6e:c7:37:ea:00:83:a5:
4f:37:4a:b3:e5:2b:0c:c4:4f:81:a9:cc:5e:d3:6c:9b:ed:ca:
f1:d1:be:31:eb:e5:8b:19:41:3a:e0:ef:5e:67:e4:d0:fb:33:
89:6c:75:9e:c2:f4:38:0f:46:bc:ba:bf:a6:5d:34:18:b7:0e:
b8:bd:da:a4:cb:21:48:56:5d:51:b7:92:87:8c:c1:b8:58:0a:
16:66:7d:08:54:71:58:97:84:20:0e:7a:77:19:61:43:41:bc:
b9:f3:93:3a:41:bc:21:d3:16:d5:8d:b3:60:b8:27:0f:8a:27:
d9:93:50:e5:a4:13:4e:06:85:26:2a:50:30:99:df:36:bb:06:
7f:38:27:e8:c9:a6:ee:14:2c:93:95:0f:52:45:c2:2e:eb:91:
de:61:b8:e1:9e:cd:82:48:0e:b5:f5:19:ef:e2:e8:f4:b3:c4:
68:7b:7e:33:1e:b2:ee:09:31:13:40:27:0e:08:0d:15:d0:b7:
32:52:fe:7e:aa:ea:52:5e:d8:83:8c:88:0f:e5:36:34:56:8f:
17:e3:bc:06:c3:b5:3e:c2:c0:43:5f:13:3e:1e:04:d0:13:0e:
bc:0f:2c:7d:27:6b:00:09:6b:3c:d3:d8:a2:72:2c:5c:a1:e8:
e8:62:ee:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:54:54 2026 by rpki-client