Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
File: K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft (raw, json)
Hash identifier: UFaW9bepEObE7tkVOo0HI2YwvJiFTZ9I3BUD5mO4UdI=
Subject key identifier: 72:4D:DF:9C:D5:80:87:3F:48:DA:A6:C4:8D:4B:97:69:4C:AE:8F:ED
Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
Certificate issuer: /CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Certificate serial: 019D382E71A207B806B27FB8CB9B20DEE677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
Manifest number: 063D
Signing time: Sun 29 Mar 2026 06:01:00 +0000
Manifest this update: Sun 29 Mar 2026 06:01:00 +0000
Manifest next update: Mon 30 Mar 2026 06:01:00 +0000
Files and hashes: 1: Fz37EzbKmOLuj47DZyVy-jxm8-Q.roa (hash: A6w0ljzejsJu2FbOvEwlydaqHScmNkC+q2dwLDsAXsw=)
2: K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl (hash: oaCbztofj4d2nY/uqsGNhy5FMQzZCLku6NOiIHrV1eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:71:a2:07:b8:06:b2:7f:b8:cb:9b:20:de:e6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Validity
Not Before: Mar 29 06:01:00 2026 GMT
Not After : Mar 30 06:01:00 2026 GMT
Subject: CN=724ddf9cd580873f48daa6c48d4b97694cae8fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:07:b2:3c:ec:20:ee:08:d1:98:54:34:44:
fb:4c:d6:ae:a9:87:28:05:38:bc:3c:27:18:d8:5f:
7f:80:2b:40:72:76:6e:dd:93:f8:01:d5:cf:18:6a:
d6:22:66:7a:a2:90:2d:7e:2e:13:c5:07:61:e1:39:
b5:26:a5:af:f8:9a:6a:6c:79:7b:0a:77:f0:c1:a2:
06:f6:00:fc:62:a0:29:f6:12:50:ce:00:df:65:3f:
51:7b:93:2d:8f:f4:b3:74:a2:a1:12:46:9d:eb:61:
b5:ac:5d:54:27:f6:4f:84:46:d5:95:e3:04:c1:d0:
52:12:fa:4e:7e:2f:d1:c3:b0:90:04:23:63:55:98:
60:94:54:e0:0c:f5:9d:30:e4:51:fb:d9:66:30:fd:
3c:3b:57:9b:77:0e:c4:fe:2e:11:de:9f:22:42:d8:
59:a9:6c:c4:e9:4d:28:a2:4d:de:3d:e0:d9:82:4b:
6f:28:61:3a:48:50:1d:c1:d6:ef:28:0d:ae:5d:cd:
e0:39:d4:db:df:f2:88:f6:5c:6b:bd:f7:f4:29:cd:
85:0a:81:ed:01:79:7a:bf:38:2d:f1:4e:ac:22:34:
e4:9d:54:6a:a2:16:a5:5c:3f:e3:42:62:61:e4:63:
7f:46:7c:0d:15:46:13:e2:cc:0a:ef:13:4c:48:3e:
ed:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4D:DF:9C:D5:80:87:3F:48:DA:A6:C4:8D:4B:97:69:4C:AE:8F:ED
X509v3 Authority Key Identifier:
keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4c:25:eb:1c:20:a7:02:8b:f3:fa:ee:aa:13:ea:51:3d:b1:
b5:4f:52:0c:23:7e:9f:fb:8f:a4:72:e7:a4:28:4d:2f:52:14:
39:d5:49:94:61:5f:29:79:c7:ae:ca:98:b9:ec:0d:b0:bb:e7:
dd:65:5f:7d:37:cc:d6:e2:19:21:79:24:58:46:80:80:e6:48:
b3:cc:21:a7:1c:79:25:0a:4c:1e:05:27:8f:5c:9b:85:45:36:
39:73:52:31:54:22:d1:86:3d:89:f1:0e:ab:83:9e:f9:a5:4b:
a1:f4:9c:25:19:c6:39:89:4e:db:28:14:f0:3b:ff:32:b1:6b:
86:80:dd:a5:2c:fb:a7:0b:ef:a0:86:ae:9b:f6:87:43:b2:00:
97:9c:00:8d:c6:94:5e:0d:f8:c1:0b:03:81:1b:cf:f4:0b:6f:
47:d5:02:16:c5:0b:4d:67:bc:b1:21:27:c0:0a:b5:ca:59:f9:
c7:90:af:c5:fd:11:2b:bb:67:52:aa:49:77:66:52:cc:fe:71:
37:08:b0:c4:f7:b6:69:e3:d1:04:04:bd:80:98:6f:6f:36:79:
79:5c:dc:ea:4d:7f:16:48:06:fe:5d:5e:73:44:0b:5a:e7:a0:
c3:17:8d:2c:73:10:82:74:8b:c3:54:13:8a:c2:7b:9c:7f:b6:
9e:83:51:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:36 2026 by rpki-client