Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
File: K0q0wVF_cy34suyD3krSNo1Fz98.mft (raw, json)
Hash identifier: P8h7+9j/jwUFh8IyMLfKwqZ6YZz509QYYOQ0Po/ZAbU=
Subject key identifier: F9:8B:64:94:58:DD:0D:C5:24:B5:52:7E:A3:9A:B5:CD:31:91:32:88
Authority key identifier: 2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
Certificate issuer: /CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Certificate serial: 019D37C04843B3429D3458E4B861F5F6BE6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
Manifest number: 1768
Signing time: Sun 29 Mar 2026 04:00:41 +0000
Manifest this update: Sun 29 Mar 2026 04:00:41 +0000
Manifest next update: Mon 30 Mar 2026 04:00:41 +0000
Files and hashes: 1: K0q0wVF_cy34suyD3krSNo1Fz98.crl (hash: LOYMu5eGUKXg+HbVLX58XPuuOVqJZNba/9xTT7ZScO0=)
2: wtRGbtfLMxnElaTSLfs0-HNZBr4.roa (hash: K9c87c2YTSSv0jFPr/9LcJtSSXghKUVoycOdYeNEeGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:48:43:b3:42:9d:34:58:e4:b8:61:f5:f6:be:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Validity
Not Before: Mar 29 04:00:41 2026 GMT
Not After : Mar 30 04:00:41 2026 GMT
Subject: CN=f98b649458dd0dc524b5527ea39ab5cd31913288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ab:07:d0:ad:f5:76:4f:9e:af:00:42:fd:9b:
7b:e6:dc:df:bd:1a:0f:3a:1b:5a:1d:8c:12:a9:cf:
fd:c4:37:41:38:65:6f:d3:bc:a2:4d:41:3d:c6:1a:
18:de:e5:e6:42:c5:03:b5:f7:d4:94:c5:ac:f8:b6:
6e:65:10:86:b8:4a:ab:a8:9f:21:ad:e4:92:58:f2:
b0:a7:dc:19:88:dd:3a:93:52:ce:c9:b8:47:02:f1:
c5:a5:6a:8d:fe:11:34:f8:da:54:18:82:6b:41:6a:
f4:e9:bc:22:05:3d:d6:54:5c:00:50:7a:38:5b:a1:
11:12:28:43:0e:6e:09:ab:76:61:48:00:d2:97:b3:
f6:2a:3e:c4:5a:bb:ba:b9:ef:13:a3:1c:15:80:50:
4f:f7:84:be:12:a8:69:1f:ad:58:f2:02:de:b2:b3:
e0:b0:79:0e:20:09:04:27:4e:af:90:e7:1e:19:9e:
8c:b6:02:f6:4e:6b:92:8d:f8:aa:e3:2a:ad:7f:44:
90:a6:23:d5:07:d0:46:8f:b9:26:df:1d:22:3b:8a:
10:0a:f1:72:ef:13:73:f0:53:36:63:80:dc:86:9b:
f0:5a:cd:70:04:4a:ba:0a:43:b0:45:32:c6:fb:15:
52:f1:33:ac:97:03:90:22:08:57:4c:4c:f7:f5:89:
d3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8B:64:94:58:DD:0D:C5:24:B5:52:7E:A3:9A:B5:CD:31:91:32:88
X509v3 Authority Key Identifier:
keyid:2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:f0:3a:9e:e2:17:3f:8d:1f:d0:25:0f:00:86:0d:5d:67:ac:
68:75:ac:98:0f:e6:74:92:ea:94:22:b2:bd:b5:80:4c:66:43:
c8:64:49:6d:ff:d7:57:b7:ae:92:85:8d:44:ab:ab:d4:53:a1:
42:2e:77:4b:30:4b:f8:fd:3a:b2:72:60:3f:2f:4a:80:63:67:
00:11:cd:7b:6d:d3:c3:d1:3b:6a:c2:bf:3e:59:29:50:17:2e:
35:89:20:4c:31:55:9e:a8:99:12:97:ac:4c:77:d3:4f:06:05:
4d:e4:34:36:7c:34:fb:92:26:f0:bc:cf:83:4f:73:51:39:4a:
e7:c3:c7:ae:70:33:e2:c7:d8:52:b9:66:c8:34:f3:69:92:fd:
45:2d:08:26:33:e4:24:2f:08:ed:9b:6d:16:90:1e:9d:38:7c:
e8:4f:4d:e3:1e:04:4e:91:4a:63:8c:64:07:d9:6e:28:33:dd:
ed:22:8b:2a:de:83:d0:48:c3:cc:eb:fd:1b:63:48:55:b1:58:
b9:16:7e:2c:c8:64:23:7b:23:84:a9:14:be:0b:00:d0:23:c5:
d5:0f:88:a2:a9:9c:dd:ca:93:f0:f7:6a:51:53:5b:07:5d:12:
c8:93:2a:0f:4b:44:7a:6c:4d:3a:0e:94:e7:d0:ba:b6:bf:c8:
98:d7:ba:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:29 2026 by rpki-client