Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
File: K8wc-LjiEGa27GR2l9SUXY-bsFs.mft (raw, json)
Hash identifier: XuudE0gSRFA6t4JgDvynMnXYfHRJX1kJpruhBI3qZ6c=
Subject key identifier: 6C:73:68:2C:B4:C3:B4:15:21:AE:ED:18:7F:66:B5:09:0B:60:E1:12
Authority key identifier: 2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
Certificate issuer: /CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Certificate serial: 019D37F7596525DFC492A04E8B43C96E749C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
Manifest number: 1436
Signing time: Sun 29 Mar 2026 05:00:50 +0000
Manifest this update: Sun 29 Mar 2026 05:00:50 +0000
Manifest next update: Mon 30 Mar 2026 05:00:50 +0000
Files and hashes: 1: K8wc-LjiEGa27GR2l9SUXY-bsFs.crl (hash: iEtlALzYKOaTDiA1cGyb5Lnsfh47Q0kRueARdoJXPvg=)
2: ZM57jrln1EaVHEwU5MBtcduC4e4.roa (hash: +8l3wG8lWR8TlssuoyNr7f8nQtvEX05fyS/cABW+fVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:59:65:25:df:c4:92:a0:4e:8b:43:c9:6e:74:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Validity
Not Before: Mar 29 05:00:50 2026 GMT
Not After : Mar 30 05:00:50 2026 GMT
Subject: CN=6c73682cb4c3b41521aeed187f66b5090b60e112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:83:d0:11:37:43:7a:0a:ca:af:cd:1e:4c:2e:
ab:62:45:52:eb:33:94:e5:6a:bb:df:a0:b3:5a:f9:
d4:cc:ee:c3:8c:21:3b:61:71:95:2e:e5:c8:c1:a3:
42:db:ff:30:eb:5e:06:8b:5f:12:05:80:50:69:3f:
07:82:17:0b:f2:3d:67:4e:7a:88:ae:b4:28:cd:d8:
dd:8f:23:2b:a1:1e:9b:19:0d:92:9e:cf:bb:5b:f3:
2e:f7:4c:84:4a:38:ca:ca:07:17:78:70:02:ad:df:
60:31:aa:6e:64:cd:68:7d:0b:bb:74:ea:c2:25:77:
52:36:f2:d9:0a:21:ba:46:22:dd:98:92:dc:1c:ab:
c3:27:6d:47:d7:be:ce:7b:59:33:00:98:91:f7:af:
e0:8d:ea:70:4b:fa:0f:0f:2a:8b:ba:5d:b1:6d:14:
4b:2c:79:a7:31:b0:5a:f6:16:9b:3a:7c:35:a1:c9:
32:df:fb:79:58:30:ff:c4:07:2d:ee:7f:23:63:67:
c9:10:0c:a1:2f:50:ce:fa:73:0f:2a:a6:fa:a8:b4:
8f:bb:bd:00:1b:b5:a3:38:41:a6:af:48:e5:2d:f0:
1f:c2:45:9a:51:ce:6a:a4:72:af:df:e0:1a:e9:ee:
9b:0c:5a:aa:8a:4d:f2:66:15:69:e1:95:e4:57:b5:
e4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:73:68:2C:B4:C3:B4:15:21:AE:ED:18:7F:66:B5:09:0B:60:E1:12
X509v3 Authority Key Identifier:
keyid:2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:06:e0:35:63:b5:30:f4:5a:d1:c4:ac:17:c3:ce:25:95:1b:
2d:82:0f:97:92:3f:82:94:05:98:a9:05:6c:b3:bb:cb:67:80:
e4:77:c2:d2:1d:24:c8:52:c9:9d:51:21:4a:9e:1a:76:c6:08:
e6:8f:02:92:c3:33:f1:b4:af:f2:74:93:d1:ab:05:64:9f:fb:
49:36:9e:17:6e:c7:27:4c:06:63:9f:9e:9f:00:f3:33:80:96:
96:16:92:36:8f:24:59:52:ca:d5:83:b4:f6:2d:fd:dd:be:4c:
d7:19:b3:32:7f:59:ae:5d:d0:8d:99:c5:4b:d5:9e:c4:ce:99:
8c:86:7a:eb:e5:64:34:59:fd:8f:b8:89:7b:cb:87:1f:e4:81:
0e:97:9d:25:70:de:56:cc:51:05:f4:89:71:18:51:3f:9e:af:
b4:b7:3d:7f:7d:c8:97:51:9e:3c:33:7b:97:7d:e3:8b:4b:1c:
49:ee:68:48:9a:0e:8f:ed:6f:3f:62:d5:31:74:06:0c:63:ce:
d7:f2:e6:d5:a7:e5:42:63:1c:a3:b3:9b:29:3b:99:2a:d8:2c:
4b:0e:0c:44:d9:b9:f0:9e:97:90:5b:89:7b:10:93:a5:1a:4b:
6c:ee:58:66:c9:cb:13:d4:52:81:72:51:79:3d:22:45:89:06:
ae:f0:a7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:41 2026 by rpki-client