Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier: juJIW+kkWIdFcLIyEEoNKQDp5IuFqDvB4yXtz07+VYM=
Subject key identifier: 13:0D:86:D3:C6:C4:0B:41:5B:14:95:E7:2D:35:B3:98:C3:96:FB:9D
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 019D389BFA70AEA240EF0F8AAB43D7BF55C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number: 152F
Signing time: Sun 29 Mar 2026 08:00:39 +0000
Manifest this update: Sun 29 Mar 2026 08:00:39 +0000
Manifest next update: Mon 30 Mar 2026 08:00:39 +0000
Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: LVAsJGT8a2seaS7H7I8Q42jlCsUM72mHe6SZqTW+4GM=)
2: bPwyaBbJqcQN7JQtu51i9S9uIaM.roa (hash: SC7PxmBSPghpd6hjRs92LdR0jqsFurZFEwEHVN8gVC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:fa:70:ae:a2:40:ef:0f:8a:ab:43:d7:bf:55:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Mar 29 08:00:39 2026 GMT
Not After : Mar 30 08:00:39 2026 GMT
Subject: CN=130d86d3c6c40b415b1495e72d35b398c396fb9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d1:c6:b9:55:46:c8:78:52:a9:98:af:3a:06:
1d:8f:3f:88:ea:d4:bb:57:89:bb:da:02:ec:c4:62:
55:03:42:10:c3:28:94:18:58:60:15:59:a0:58:6e:
9b:fd:95:19:f6:01:ca:0a:c8:9c:33:2b:0b:76:99:
41:71:e9:15:59:67:b4:64:04:09:fe:f3:87:59:c0:
21:74:fc:67:22:4f:85:45:aa:60:7e:8d:73:7e:74:
73:6a:b7:1f:32:84:bd:5f:24:ff:ae:43:93:2f:32:
a7:ab:05:05:a6:c8:67:93:6e:fb:a2:ff:db:22:97:
97:11:0f:9a:c8:9e:6a:7e:14:4f:70:39:55:63:a4:
5e:29:0c:e5:a0:d4:84:b5:19:17:79:6a:e7:ce:99:
31:a4:ba:4c:c9:d6:ba:e4:dc:6e:55:09:f1:18:ad:
e8:03:b8:ad:9a:9e:44:17:0d:14:e1:bc:16:ac:9d:
df:6c:2e:c8:8b:d6:33:46:54:6a:e2:4d:66:7b:c1:
fe:ec:cf:d8:f0:c5:87:2e:9b:89:ed:63:07:29:c7:
03:9c:98:2e:79:6a:d9:c3:0e:93:bc:47:83:2e:04:
84:84:a8:22:a7:43:b2:a4:22:d1:88:34:c6:42:d6:
fb:91:2b:48:b2:38:35:a9:1e:1c:e6:cf:62:5e:c0:
a8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0D:86:D3:C6:C4:0B:41:5B:14:95:E7:2D:35:B3:98:C3:96:FB:9D
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b7:8e:d7:e2:1e:05:91:a6:0d:8e:f2:fb:08:3d:60:50:1b:
be:35:e8:c1:fa:b4:06:a7:2b:44:05:f9:fd:da:0e:78:6a:d4:
19:71:0d:0e:51:0d:96:23:d3:87:e5:9c:43:f5:79:c2:23:47:
bc:f5:45:23:f7:d1:f4:7d:5d:72:7d:4a:9d:7e:f3:1f:b9:ee:
0f:62:db:db:fc:6b:77:32:03:6e:d6:e3:bc:94:5f:02:8b:3a:
97:ca:ca:f6:70:44:9d:bc:50:1e:dd:55:35:47:f3:ea:30:c2:
fe:af:63:e4:cb:c2:54:06:2b:38:5d:b1:7b:38:4f:81:d9:71:
e2:21:b4:38:e0:0b:7d:29:d7:bc:be:a4:00:98:52:2a:02:ed:
4a:e6:68:a5:25:26:a4:74:0b:7f:2a:d6:e7:f4:45:b6:5d:d5:
bb:14:ae:60:d4:ea:c0:05:23:12:d5:95:73:7e:17:af:23:77:
6b:e3:bf:dc:78:5f:78:a6:34:36:bc:92:dd:7d:b6:38:20:23:
89:ca:38:de:7f:64:08:9f:a7:ac:bb:20:40:2c:2b:50:d4:76:
48:3d:87:8d:cc:fe:20:07:e8:89:56:23:3a:04:58:d8:74:01:
88:d8:fa:b5:84:e0:ee:39:f7:ae:65:35:13:d6:a1:1b:7f:49:
64:e2:86:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:54 2026 by rpki-client