Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
File: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft (raw, json)
Hash identifier: dY/8czqooSAEirycpQz6rC0gNBVk8OUrQH7A7TnaZw8=
Subject key identifier: 5B:E3:60:69:EC:F5:9C:38:D4:7C:B3:5E:42:50:C7:28:08:1C:87:54
Authority key identifier: 2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
Certificate issuer: /CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Certificate serial: 019CB6CAA9249C0F39807E61B32EECC5662B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
Manifest number: 01CD
Signing time: Wed 04 Mar 2026 03:01:00 +0000
Manifest this update: Wed 04 Mar 2026 03:01:00 +0000
Manifest next update: Thu 05 Mar 2026 03:01:00 +0000
Files and hashes: 1: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl (hash: 5iPpoG6ZVclRhJPqyMVTqhbRSfEBeBH5OpWF1WviEFM=)
2: TV4yZeh5gb-YNu16ne89KzqjkHI.asa (hash: ZF+GnFpj0JJbI8NWDxgtBCaESGA8VYEeovm/zlGZB0A=)
3: b2FwzXwPA4h4cgwtnyc60OtTa88.roa (hash: lkanuRYvWV1r1485k4lQhFz2YZsaICmZonIaOSauHis=)
4: sX-7jKd4Jkup4SzLh7V9fhcXJIY.roa (hash: zRqjfBS/ZWhDgqQc0xO/XDUwPIazRjKs3hCDGDdnfh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b6:ca:a9:24:9c:0f:39:80:7e:61:b3:2e:ec:c5:66:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Validity
Not Before: Mar 4 03:01:00 2026 GMT
Not After : Mar 5 03:01:00 2026 GMT
Subject: CN=5be36069ecf59c38d47cb35e4250c728081c8754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:ff:4a:05:4a:55:15:3e:82:f9:e9:31:71:
54:01:fa:b6:17:85:aa:6a:2e:8c:73:76:58:a9:3c:
a4:8a:ee:c3:f9:1e:0a:12:79:0d:8b:0f:ab:3b:0e:
6c:3f:bc:57:3b:1e:35:79:55:1e:c4:5c:e6:b0:4b:
7e:bb:07:d6:ac:74:cd:44:72:61:b0:c8:c5:31:e7:
c6:49:2d:aa:cc:88:3a:2f:0c:04:0b:eb:dc:54:b0:
82:60:ee:ee:da:b3:20:a1:96:e4:70:e0:ac:02:58:
13:f7:3d:91:ab:03:63:93:0e:74:82:29:46:e4:fb:
2d:4e:07:19:a6:54:72:77:bc:30:ba:69:15:ef:79:
f7:14:17:26:f3:bd:f8:d0:5e:19:fd:c2:c5:d7:08:
f1:65:d1:25:a4:a6:06:e1:76:1d:88:f2:cb:9f:14:
17:39:bd:a8:1c:c0:d5:8f:83:a2:cb:b5:3e:67:22:
d5:0c:4d:8d:63:4f:9d:d7:d2:e3:51:4a:5d:ad:99:
01:ba:eb:3b:42:d2:29:18:02:d1:d7:d8:cf:51:10:
c6:77:4d:53:43:a8:88:fc:d0:6d:06:37:24:e4:21:
5b:ad:a2:3f:ad:69:a2:1e:8b:0d:0e:ff:24:aa:03:
9c:e9:21:90:a3:d1:c2:d7:d0:26:c1:61:a7:21:67:
69:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E3:60:69:EC:F5:9C:38:D4:7C:B3:5E:42:50:C7:28:08:1C:87:54
X509v3 Authority Key Identifier:
keyid:2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f1:df:49:74:16:16:03:9a:3e:0c:aa:ef:8e:7d:2a:04:06:
a6:07:d4:37:3d:84:86:fd:5c:42:94:a4:6d:87:71:32:91:58:
aa:92:88:e7:f9:6c:8e:2e:9e:6c:48:4c:70:01:56:4c:ea:96:
0b:5e:1a:4d:a1:f8:a4:77:de:7d:38:d4:00:bb:77:69:70:45:
a1:dc:7e:9c:76:e2:15:52:40:fe:4c:2f:84:50:84:14:b3:de:
45:e3:7f:44:d6:3c:d4:82:cb:e9:00:88:6f:e5:ff:db:cd:f0:
b8:bd:0e:ee:10:cd:9f:cc:39:7a:da:46:73:22:72:70:04:84:
c0:08:f4:34:83:74:24:72:0f:83:32:41:23:d7:1a:e5:bd:a8:
d9:0b:45:45:9c:98:c4:23:8f:85:80:f5:85:e9:c7:08:96:8c:
8a:d6:12:49:e8:9b:99:ed:ca:18:ec:d7:8e:21:62:a8:fc:a3:
bf:d4:6a:6c:a5:b1:36:ef:79:4e:a3:a8:31:df:8f:3c:fa:78:
b7:db:b7:1e:93:08:29:2e:ae:0b:eb:46:f8:7f:3a:43:6e:81:
eb:0f:11:de:82:45:97:6e:66:18:30:d8:54:2d:19:b1:f4:a0:
09:15:58:fc:9f:eb:9a:3e:b6:81:7d:10:57:c8:31:5b:4d:e5:
e3:79:28:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:55:14 2026 by rpki-client