Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier: 9Qh9I/FQXZB3tIrJzJeD9sTRnuiFZYojGj7C7VHUnBM=
Subject key identifier: 75:D5:86:48:17:7D:B7:DC:65:05:4F:97:73:77:AE:35:1B:0B:61:9F
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 01A181872E630923F273DDAB4C772181956A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number: 1767
Signing time: Wed 28 Oct 2026 08:01:22 +0000
Manifest this update: Wed 28 Oct 2026 08:01:22 +0000
Manifest next update: Thu 29 Oct 2026 08:01:22 +0000
Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: XySfVaJ7/ImHUBh/XMTix7xA5PoVHvwaOjRWzY3yJKU=)
2: bPwyaBbJqcQN7JQtu51i9S9uIaM.roa (hash: SC7PxmBSPghpd6hjRs92LdR0jqsFurZFEwEHVN8gVC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 08:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:87:2e:63:09:23:f2:73:dd:ab:4c:77:21:81:95:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Oct 28 08:01:22 2026 GMT
Not After : Oct 29 08:01:22 2026 GMT
Subject: CN=75d58648177db7dc65054f977377ae351b0b619f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:f4:70:2a:8a:d9:13:28:e6:4d:ff:49:29:
9b:d3:6e:ad:c1:4a:ee:aa:e1:6b:05:1a:54:5e:d0:
53:b6:44:e8:61:a0:60:64:0d:b2:26:43:f5:e5:91:
aa:18:49:50:71:ca:32:b8:64:2a:5a:7d:07:98:47:
96:bd:0a:f8:85:50:9c:b5:a3:58:e4:be:ab:29:91:
3f:2d:4d:05:92:a9:6c:a2:b5:0b:3b:4a:83:8b:f4:
f8:e7:23:5b:53:69:c9:e9:84:dc:7a:b9:72:b3:36:
c3:fa:4e:e5:2d:6d:5b:87:35:64:3a:cd:03:af:ff:
a9:68:42:f5:b8:91:84:dc:b2:86:af:67:ca:3e:b4:
8d:3a:0b:58:e2:5c:d7:12:47:4f:55:bb:7d:42:7f:
a4:46:6a:84:6a:a2:60:23:9e:ca:7f:87:3f:c3:20:
a6:86:24:a0:b7:63:69:3f:53:db:21:92:0e:5c:84:
27:6d:83:9a:c6:eb:60:48:6f:d9:ed:c1:a1:65:93:
e2:6f:71:eb:a2:cd:2e:43:d4:0c:71:ea:32:bf:fd:
81:31:cd:8d:1a:2a:ac:1f:7b:a4:f4:fe:7f:6d:e3:
b2:10:3a:f1:05:9f:a0:7d:d1:ff:9a:b7:29:20:e3:
1d:7b:8b:c0:27:8d:27:1f:e3:91:dd:9c:06:21:74:
4c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D5:86:48:17:7D:B7:DC:65:05:4F:97:73:77:AE:35:1B:0B:61:9F
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:38:59:a5:fa:67:aa:fc:7f:1c:40:0e:67:31:16:93:b4:3e:
95:d9:d3:d4:15:d9:58:dc:c0:9e:1c:13:b1:3c:27:cd:b8:2f:
52:3c:5d:15:14:8d:c7:f6:c7:3f:7d:58:34:cb:1a:01:26:b0:
2f:93:ff:3d:93:e8:52:81:ee:61:b6:ca:a2:d4:5b:a4:95:47:
df:b1:34:6f:f1:d0:24:55:b6:d8:04:ea:69:86:70:af:c3:de:
de:36:19:d9:1f:87:81:8c:92:cc:6a:4d:4c:c7:5d:29:72:fa:
13:3b:5b:48:88:93:f0:75:f1:ad:a9:f3:39:16:2c:16:25:4e:
92:1e:ed:a5:3b:52:a9:d9:d5:34:02:9f:03:dd:30:8b:1f:68:
8c:64:0d:cd:cb:52:f1:f4:bb:45:80:9f:01:b6:ac:86:c8:ea:
db:1d:e6:e7:f1:15:68:e4:c7:b0:7f:44:44:6d:4f:d6:1a:8d:
e4:8b:34:2c:2d:37:c2:7a:56:2e:49:c2:ce:4c:7e:f3:19:c9:
55:50:dc:23:3e:ae:91:1f:b7:4f:51:33:10:25:ab:b6:29:0f:
3b:29:b3:cb:55:0d:f7:02:41:94:2b:b7:89:65:bb:e1:fc:1b:
e5:37:b9:0f:cc:c1:e6:10:ea:92:b0:b7:b5:2c:42:39:24:58:
14:ae:57:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 15:33:20 2026 by rpki-client