Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
File: K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json)
Hash identifier: ohiParJbRdTAT2aH0JIV4cw73qKTp9Q/zubSYs678xY=
Subject key identifier: 10:E8:D3:45:D9:AE:99:4B:8D:7F:52:95:D2:43:80:08:28:3E:54:04
Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566
Certificate serial: 019D37C0FD2F62A33EB501B11EAAADCD636A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 04:01:27 +0000
Manifest this update: Sun 29 Mar 2026 04:01:27 +0000
Manifest next update: Mon 30 Mar 2026 04:01:27 +0000
Files and hashes: 1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: DWM1OX2s+UVKcYLSDeRCYgwae68xmqUSe056NdjtrWI=)
2: n4FzGfOnav3SfPJfBEXT0u_w5Gs.roa (hash: sICEtaK7xm2Dr27UIi1Ga/8/sweTHAtwdDoH5h6MJ1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:fd:2f:62:a3:3e:b5:01:b1:1e:aa:ad:cd:63:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566
Validity
Not Before: Mar 29 04:01:27 2026 GMT
Not After : Mar 30 04:01:27 2026 GMT
Subject: CN=10e8d345d9ae994b8d7f5295d2438008283e5404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:fb:97:93:2d:91:25:3b:54:ff:fd:37:af:
5d:b2:ac:80:cc:cf:60:6b:99:9a:84:e2:5a:c0:db:
ca:60:65:1f:9a:1c:3a:95:3a:5b:a8:c4:1f:8f:b0:
20:13:61:6b:c7:e2:62:c5:0d:d9:b0:ba:1f:67:34:
f6:84:9e:93:da:d8:46:0a:43:0d:bd:12:80:54:51:
7b:4d:0e:ba:5f:4d:4e:46:65:9d:00:fe:95:17:9e:
22:b9:e6:27:4b:3b:61:24:1d:37:5d:41:c4:c0:e5:
1b:d9:f2:03:4e:a5:73:7e:68:00:86:57:43:84:0b:
7f:25:9e:a6:f5:16:ce:36:42:1d:1a:3f:eb:b8:3c:
8a:71:c4:31:99:f1:0c:99:8a:9d:60:0f:55:a5:4a:
21:3f:b6:dd:af:9d:94:79:d5:25:79:bd:c0:63:67:
9e:e0:bb:1c:17:e4:60:4c:4a:35:a0:9e:c1:12:9e:
b4:8c:6b:c8:02:d6:d4:b1:b1:ef:c9:e9:47:cc:cd:
ab:bb:6b:b2:2f:5f:33:b9:a9:dd:91:f5:dd:87:64:
61:86:e6:8b:a2:ec:95:18:35:0b:5f:33:89:43:cf:
53:90:d9:50:58:df:51:c5:52:df:bb:8f:b8:3e:f2:
26:39:74:1a:9a:61:92:10:9e:b7:68:f5:61:14:02:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E8:D3:45:D9:AE:99:4B:8D:7F:52:95:D2:43:80:08:28:3E:54:04
X509v3 Authority Key Identifier:
keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:4d:8f:09:47:ce:9e:c8:9d:cd:d8:ac:2f:b6:e1:e1:c7:2b:
d2:fc:a2:9f:37:fa:69:9a:aa:52:be:65:98:01:78:76:41:c0:
3c:44:ff:0d:c2:ef:37:0a:b4:84:1c:80:3d:ac:01:41:be:e5:
e7:20:c9:14:fd:e6:d8:ea:e8:c0:48:87:27:77:55:83:b0:b1:
75:65:67:22:55:8f:2e:f4:1c:45:48:13:fc:3d:b3:7b:69:38:
e9:9a:57:2c:fb:be:76:02:79:7c:7a:dc:67:55:6c:b7:9f:67:
2e:87:10:af:b4:0e:25:91:88:78:f3:73:6a:35:bd:39:87:d0:
c6:49:99:88:44:93:07:d2:36:95:d0:23:b1:a8:23:41:68:a8:
b2:dc:d8:58:8f:1a:b9:ac:b3:42:9d:2f:51:2a:00:5f:1a:15:
94:52:a5:fb:bd:d3:6a:c1:18:d7:a9:92:cc:42:3b:3f:46:cd:
8d:5e:9c:83:41:92:76:5f:b4:33:68:ef:c4:5a:52:e7:52:38:
56:a0:56:91:6e:2c:20:a0:7c:18:ee:f6:21:68:0e:00:d2:12:
32:76:84:d5:ba:12:ca:da:12:72:34:dc:97:18:f6:bc:cb:b8:
13:18:ee:ca:71:a6:7d:68:cf:60:0d:0f:fe:ea:5f:3f:03:f8:
2c:43:d3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:52:16 2026 by rpki-client