Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
File: K1ATo25hvsQKEqDkHEjxkYYwca8.mft (raw, json)
Hash identifier: cCxeytto0/XthVl3L0h9JxKSyqA2Ruo8Is5AORLM7qo=
Subject key identifier: 4B:63:C9:C5:8F:C8:AB:5A:46:11:18:27:4C:DC:7D:41:E6:FD:4A:12
Authority key identifier: 2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
Certificate issuer: /CN=2b5013a36e61bec40a12a0e41c48f191863071af
Certificate serial: 019D382DEAB98966A28BBCB91EC91CEB3F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 06:00:26 +0000
Manifest this update: Sun 29 Mar 2026 06:00:26 +0000
Manifest next update: Mon 30 Mar 2026 06:00:26 +0000
Files and hashes: 1: K1ATo25hvsQKEqDkHEjxkYYwca8.crl (hash: UCuSB/OZLqEhAgUZ4YfUuVSiW0NoNq7EGxLgabRs8h0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:ea:b9:89:66:a2:8b:bc:b9:1e:c9:1c:eb:3f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5013a36e61bec40a12a0e41c48f191863071af
Validity
Not Before: Mar 29 06:00:26 2026 GMT
Not After : Mar 30 06:00:26 2026 GMT
Subject: CN=4b63c9c58fc8ab5a461118274cdc7d41e6fd4a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:22:5e:eb:20:df:5a:6d:1c:5c:cd:86:7c:60:
83:3d:b4:b3:16:64:ee:f9:fd:d6:94:41:dd:40:49:
6d:68:bb:11:89:19:79:7c:ec:d8:02:13:93:6f:0e:
65:37:40:64:ba:e5:44:aa:5d:dd:c6:46:4d:2a:c4:
1b:6a:32:2b:23:9b:82:80:a4:06:b6:66:c3:6f:b3:
37:05:f7:64:37:4d:ac:db:10:ff:19:48:ae:bf:ac:
92:dd:00:6b:3a:40:7d:89:0f:81:95:84:0f:e6:4a:
36:07:90:ac:af:8c:8a:eb:ec:76:a6:99:11:45:30:
82:b5:69:0f:e9:39:49:5e:03:6a:a1:1a:9c:98:ab:
cc:d2:90:41:14:7c:de:0f:21:9e:5c:55:96:a3:f4:
fb:b8:79:be:3e:1d:ef:5a:fb:b0:14:44:b8:ac:84:
6e:80:11:68:89:30:bd:5b:66:23:8b:43:e1:cb:c6:
79:0c:dc:92:73:00:43:07:41:19:7c:65:e3:04:48:
af:ad:f1:ca:5c:6a:4d:48:65:f9:e6:44:cd:a0:90:
1e:b5:63:42:38:40:12:3d:63:14:36:c4:c5:74:fa:
f4:9d:6b:79:7f:5c:5c:1b:82:99:bf:a3:0f:f2:74:
6c:10:cf:a2:6f:ee:d5:47:32:f6:25:e6:ad:ee:3e:
53:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:63:C9:C5:8F:C8:AB:5A:46:11:18:27:4C:DC:7D:41:E6:FD:4A:12
X509v3 Authority Key Identifier:
keyid:2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f9:e0:19:74:9e:b5:02:bc:4d:6a:e3:e8:e5:86:31:87:e6:
ef:b9:e0:59:c8:0d:11:ee:60:65:96:c7:37:88:5d:6e:be:a5:
26:ce:b2:ab:d1:36:01:c8:97:f4:cc:08:b8:cb:ac:ea:d1:67:
1c:a7:0a:3b:67:ad:c5:35:6e:df:0d:62:12:b5:06:0e:c5:e7:
6b:ba:62:8e:69:2b:98:78:b2:a9:e0:79:0a:82:fd:4a:36:f8:
e0:19:e3:04:2e:da:a3:b9:3a:28:04:45:f2:2b:11:f7:33:e9:
ab:9e:35:ee:3b:a9:c7:e9:4e:92:51:2a:af:5e:b9:79:a0:f7:
c1:04:df:27:79:7e:7c:42:1d:57:f9:f1:c9:ae:5c:46:e0:db:
62:fe:39:ac:f7:26:c8:61:11:54:71:79:87:45:91:97:84:7d:
3a:27:90:ef:70:7b:05:bf:97:46:72:79:6e:04:8d:68:12:1c:
bb:fd:32:8f:89:2c:78:c9:6b:ad:73:4f:fe:e1:57:64:cd:2b:
65:27:55:f4:61:9f:a3:22:00:55:38:e9:4a:0c:e4:d2:d0:c1:
2e:d8:76:66:84:c6:5c:a0:68:0b:ee:35:88:ce:4c:95:16:77:
3b:f3:f9:da:f8:e3:c9:2e:56:90:4c:4d:e3:4d:47:86:56:ab:
d2:fa:c4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:28:18 2026 by rpki-client