Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
File: K5rePBkSeLKqitdnQu673v5yheY.mft (raw, json)
Hash identifier: YxV2g5oMMRibQfMvJDy9mKOxNP4lfuzV4c8pxF7azEE=
Subject key identifier: C1:E8:21:86:3F:69:4B:E4:AF:40:FC:AB:BE:9A:E2:EB:BC:F5:92:5A
Authority key identifier: 2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
Certificate issuer: /CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Certificate serial: 019D389BD426B1797809839FABADC3124E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:29 +0000
Manifest this update: Sun 29 Mar 2026 08:00:29 +0000
Manifest next update: Mon 30 Mar 2026 08:00:29 +0000
Files and hashes: 1: K5rePBkSeLKqitdnQu673v5yheY.crl (hash: pgNLGrTAaS4T44Q+asVI4Ex8vm8Nn0jOrRGFiOcASAM=)
2: puznYVJBSnjY3qaeHb9vAhepdP0.roa (hash: zbqCzpyxFKeMQ5R4zIXRZXVtzDA8qKH99V6e5g7nt9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:d4:26:b1:79:78:09:83:9f:ab:ad:c3:12:4e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9ade3c191278b2aa8ad76742eebbdefe7285e6
Validity
Not Before: Mar 29 08:00:29 2026 GMT
Not After : Mar 30 08:00:29 2026 GMT
Subject: CN=c1e821863f694be4af40fcabbe9ae2ebbcf5925a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:b7:5f:fc:d7:04:47:3a:09:a1:34:d6:9d:
99:10:ad:16:d4:da:d8:a4:1c:b1:44:33:32:2f:37:
90:57:75:68:34:2c:74:cc:fb:ea:49:6b:89:08:24:
e7:52:97:aa:a7:f9:b4:0b:86:4f:a4:06:09:7c:cd:
cd:63:3c:0a:15:3a:0b:e5:30:26:19:a1:52:6f:09:
80:9d:e2:69:02:04:2b:b7:5f:34:66:9f:11:75:7e:
ae:ff:bc:fd:ca:11:45:cf:38:1e:d2:72:de:0d:63:
de:f8:90:c9:0b:69:bc:5f:88:6e:b3:f3:27:13:68:
23:b7:4f:ad:68:c2:85:ca:a7:b8:12:23:21:8a:bb:
29:ed:53:f4:11:a7:5a:3f:c2:96:fd:49:e2:0d:fe:
17:fe:32:77:c7:91:11:db:3f:09:89:6f:9b:bc:4a:
95:68:e1:a1:8b:8b:1f:57:a3:64:a6:18:0e:28:40:
7d:31:ac:6d:34:7d:44:47:af:cc:16:46:7e:47:ef:
21:cc:11:72:ba:2c:a9:d6:9b:44:3e:23:65:98:b8:
6e:e0:c4:2c:18:72:79:a0:3f:9d:8c:eb:e6:40:d9:
80:cc:63:43:98:35:af:07:c3:25:42:6e:7d:77:02:
58:46:27:02:a6:e0:34:6b:c3:45:93:5b:89:b0:2b:
b9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:E8:21:86:3F:69:4B:E4:AF:40:FC:AB:BE:9A:E2:EB:BC:F5:92:5A
X509v3 Authority Key Identifier:
keyid:2B:9A:DE:3C:19:12:78:B2:AA:8A:D7:67:42:EE:BB:DE:FE:72:85:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5rePBkSeLKqitdnQu673v5yheY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0e42e8-746c-4a3a-8d63-cc053f6a1ee6/1/K5rePBkSeLKqitdnQu673v5yheY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:cd:63:d8:7a:e6:ff:8f:04:1a:5c:78:24:7a:65:75:e2:ec:
cd:7d:aa:05:be:68:2f:61:c5:3d:a8:15:fe:d9:22:8a:5d:9e:
f1:1b:15:60:6f:59:ee:eb:98:a3:5f:e8:38:2e:03:58:a8:d4:
61:32:fb:fe:88:00:59:8e:d8:58:60:8c:d2:bc:86:f9:0f:ad:
03:42:fe:27:e5:06:e4:01:bf:61:e7:27:3b:e9:c9:30:a3:6d:
f7:72:1c:f4:d1:ae:dd:3e:1d:9c:91:b5:7f:78:a7:c9:c4:25:
1e:94:eb:fd:20:67:30:82:aa:5a:78:26:55:8b:95:48:22:96:
e6:aa:3c:3f:b8:34:e9:b1:7a:4a:be:3f:0b:37:4e:d7:11:b3:
d7:2d:e9:8e:12:4d:27:9b:a3:a1:b1:bc:ee:2c:23:e4:f0:8b:
cc:46:a3:74:ac:86:b2:00:42:61:61:53:cc:ba:de:43:61:1b:
8a:84:39:5a:80:0b:3c:9b:ea:db:75:ed:c7:91:5c:be:bd:31:
51:ec:49:48:70:cd:f0:7b:c0:80:d3:2b:db:30:76:1b:1c:df:
4f:55:24:32:05:67:41:87:18:ea:07:30:74:e4:7e:b5:bb:30:
79:b2:e7:71:9e:43:5d:95:50:04:82:4e:be:53:a0:6f:40:c5:
66:66:00:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:27 2026 by rpki-client