Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
File: K4HHU7d2Zeeln45QgxTxWTVsIo4.mft (raw, json)
Hash identifier: q4cpOOBxs05qdEU18tjakZaVLIZkKXMbGdNhi4KRxDU=
Subject key identifier: 58:35:56:71:BD:62:0D:D6:F7:D2:D2:0B:6E:DC:E1:5D:33:69:3D:94
Authority key identifier: 2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E
Certificate issuer: /CN=2b81c753b77665e7a59f8e508314f159356c228e
Certificate serial: 019D382E786FF18199226656AF26DCA8C3A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
Manifest number: 129D
Signing time: Sun 29 Mar 2026 06:01:02 +0000
Manifest this update: Sun 29 Mar 2026 06:01:02 +0000
Manifest next update: Mon 30 Mar 2026 06:01:02 +0000
Files and hashes: 1: IajIOki8N-Tfh1ubDWlzntjVI-4.roa (hash: LVVvbRrnTDOYtO0x8wssTk+uRYbqHCBuMGCLmMJuSJY=)
2: K4HHU7d2Zeeln45QgxTxWTVsIo4.crl (hash: hhZkZfBizZyf5+JmXuJUBs6jGwY74bMIzbl5dRNs4j4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:78:6f:f1:81:99:22:66:56:af:26:dc:a8:c3:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b81c753b77665e7a59f8e508314f159356c228e
Validity
Not Before: Mar 29 06:01:02 2026 GMT
Not After : Mar 30 06:01:02 2026 GMT
Subject: CN=58355671bd620dd6f7d2d20b6edce15d33693d94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:99:5f:a3:f5:f1:d2:1b:5c:d2:89:83:73:34:
68:5f:a1:06:10:f0:a0:06:4b:5a:62:7b:f5:3b:ed:
d8:1c:cf:32:77:0b:3d:6e:d2:94:60:e7:8b:2c:af:
bc:35:fe:3f:32:ec:5f:b7:59:45:ba:0e:84:1b:8c:
7b:e4:b3:ad:66:45:99:9e:d8:ed:92:aa:9b:6f:57:
12:6b:d8:10:c9:0c:fc:6c:e1:2d:68:19:ea:ec:56:
f4:a7:3c:b6:d9:72:ec:8f:1a:95:4c:30:72:6f:6c:
38:32:b8:e1:c3:8a:7a:6b:cc:53:a1:c8:28:68:16:
02:b9:8f:e0:44:0d:96:b9:57:1c:b1:f5:d9:03:7a:
a9:1a:bf:9a:c4:e2:5e:fe:a9:16:69:a8:8c:8e:0f:
42:bb:34:1a:4c:61:02:40:79:d4:8c:4f:a8:44:e0:
ce:78:7a:17:e5:9b:b4:06:1e:b2:80:b1:58:82:f0:
57:e2:61:1d:91:83:24:9d:93:29:6b:10:ec:5f:3c:
c4:a7:02:b2:ab:70:92:77:3e:6f:23:1b:b2:a2:74:
8b:8f:42:cc:07:b5:d6:9d:5c:82:ec:ae:9c:96:8e:
53:c5:9a:dc:b2:dc:cf:f6:2d:4b:0b:e6:41:67:6d:
5c:8b:50:04:6e:4a:02:ff:01:19:09:16:ec:38:8d:
ce:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:35:56:71:BD:62:0D:D6:F7:D2:D2:0B:6E:DC:E1:5D:33:69:3D:94
X509v3 Authority Key Identifier:
keyid:2B:81:C7:53:B7:76:65:E7:A5:9F:8E:50:83:14:F1:59:35:6C:22:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4HHU7d2Zeeln45QgxTxWTVsIo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ef7b03-e796-40ad-b66b-587aef6dc285/1/K4HHU7d2Zeeln45QgxTxWTVsIo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:45:8c:8f:55:c5:a2:2d:d4:a3:33:18:8f:99:a9:58:21:94:
f5:4d:8d:02:ee:c4:04:aa:2a:32:42:e0:8c:2a:e7:3f:69:91:
4b:42:8d:ef:8b:ff:ff:09:f8:6b:d1:e7:b2:58:ed:5d:c0:85:
f2:66:84:9a:51:49:50:c2:50:2b:6a:63:c3:b4:5b:fc:39:5a:
62:8a:be:3f:92:67:0d:74:cf:9d:51:91:67:bd:08:3c:8d:26:
ca:5f:c7:d4:f0:02:d5:6d:d2:c0:3a:e4:33:24:07:ab:70:85:
27:7b:4e:f3:96:40:e5:fb:ff:d5:e6:fc:cd:63:00:bc:70:2b:
c8:1b:1c:f2:d0:1d:23:d1:65:21:72:7f:20:12:27:f5:c4:fb:
c0:74:d6:0f:21:d1:9b:4d:92:e4:4e:02:0f:80:df:61:59:97:
26:9e:8c:1a:05:5f:b2:fd:62:79:81:2a:ea:0d:35:8a:bb:d9:
4b:1e:2c:40:f9:16:a6:5d:a7:32:8a:87:a0:c9:25:34:12:b6:
39:a9:4a:81:e8:ac:f8:ef:3a:69:4e:28:37:97:eb:4f:f8:42:
62:9c:1c:a2:48:ad:5e:8c:16:b8:1b:85:d9:48:44:73:ec:0e:
0e:25:ec:7f:33:7c:95:c6:c3:fb:62:e0:d8:aa:47:73:b3:ed:
86:87:b9:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:30 2026 by rpki-client