Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
File: K7wAKis1mxqoh54cTXBFWzGS76w.mft (raw, json)
Hash identifier: W1EISCC211BeTp5vo04Tf2aYw2jCYhvuoX7/xun+Fq4=
Subject key identifier: A0:68:EE:01:0E:8B:61:E0:29:4F:E9:06:01:BD:48:5E:B1:57:90:C6
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Certificate issuer: /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial: 019D39E5D850D4BDC171E36F546BA2D23FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 14:00:57 +0000
Manifest this update: Sun 29 Mar 2026 14:00:57 +0000
Manifest next update: Mon 30 Mar 2026 14:00:57 +0000
Files and hashes: 1: 2UmZFRrJ0P-2mwYSao7Xzkep2iA.roa (hash: N9+wOT3ic7u1Pc0UnkkcEFa7DljVTAIJF/p2BSuaQHw=)
2: K7wAKis1mxqoh54cTXBFWzGS76w.crl (hash: qtbUkWQFOOKU3pDgpxDUb1T2WeyCeBalXONCfsnMxWw=)
3: a8hAdaOdxZFivnzP3avRHvD9kUw.roa (hash: FzlX7CBWyvP5RQUSSHhztLWIzIWu2YtxzCw2ArYeCTU=)
4: ncypf2iinEe-q_LnbnKjYSF5rJc.roa (hash: X77xC4nNcyrrbUpykZ9gvEucbXtxd0H2H3Sybmc5J48=)
5: sZzlwoV7VUnP0rnAO0okZeo6Iak.roa (hash: WXgl70GjiFz6sqLRQIYx3xNCuabeBF1y/DzdVPV9mJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:d8:50:d4:bd:c1:71:e3:6f:54:6b:a2:d2:3f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Validity
Not Before: Mar 29 14:00:57 2026 GMT
Not After : Mar 30 14:00:57 2026 GMT
Subject: CN=a068ee010e8b61e0294fe90601bd485eb15790c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:8e:57:ad:cc:73:19:7f:6e:5a:6d:2c:e7:1b:
50:fc:11:19:5f:f5:07:b8:1d:74:bc:a2:6d:1d:bb:
82:df:09:83:c1:0c:72:37:bd:2e:d9:6c:09:34:a3:
5e:11:4f:ee:63:bd:3d:3e:43:80:ba:28:a1:ac:b1:
2a:b2:b2:f8:c7:e6:6e:4c:7e:4e:67:48:f1:4b:f0:
ce:b1:47:cf:bb:63:2d:81:10:67:64:89:ae:d5:4d:
db:11:2a:08:83:de:6b:2a:b0:4a:75:5e:23:e9:b2:
8b:32:80:17:1a:48:12:6b:f9:c2:1e:a9:d2:92:cf:
04:c6:8d:5c:88:29:66:71:3b:3a:eb:1d:31:33:02:
9d:41:ac:58:a5:59:db:0d:12:26:8b:3a:34:ad:b5:
b0:cc:cb:78:c1:6a:aa:e8:41:62:74:7e:43:7f:f1:
c0:58:76:51:51:eb:8f:87:2b:a1:84:0e:16:11:cd:
97:a8:92:7f:d3:a9:83:4d:85:43:bb:72:6a:ae:71:
5f:2b:55:6c:72:2d:e6:d1:6c:07:f7:fe:29:2e:f9:
77:cc:d2:fd:ae:c5:d9:b3:07:a6:00:c9:42:db:62:
27:a4:80:ca:86:0c:96:b4:64:d5:8c:01:1d:ee:c9:
7d:ce:45:46:3d:a7:e9:5d:fe:cb:9b:db:ea:d3:05:
82:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:68:EE:01:0E:8B:61:E0:29:4F:E9:06:01:BD:48:5E:B1:57:90:C6
X509v3 Authority Key Identifier:
keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:e3:3d:9a:e3:b8:14:8d:cb:86:62:a6:5d:6a:b9:32:ab:88:
07:94:66:6f:3e:4a:15:c9:fc:37:00:53:3e:02:d1:b6:3c:4b:
32:53:33:84:3e:3a:29:c8:cd:10:a9:b6:4b:2c:dd:17:ce:ac:
6a:95:ab:a5:f5:3b:b8:11:f5:4b:ef:60:28:41:aa:f1:d3:28:
8f:a9:24:c3:ab:75:73:28:87:23:d2:03:de:cb:45:dd:01:af:
23:32:4c:64:a9:11:d2:91:92:bd:de:e0:9c:99:5d:ac:ff:8f:
cb:37:74:d1:74:1e:04:57:06:a7:fb:f7:27:e9:0d:42:54:ba:
b4:42:42:44:31:e1:91:1d:1c:c2:4a:42:77:75:d2:e4:26:58:
82:8f:f7:0b:97:dd:1b:c6:78:08:96:7e:3b:98:ee:9b:91:34:
3b:0d:37:43:6c:93:23:f5:3f:26:90:2f:f9:45:2d:5c:e6:e3:
26:59:8f:ec:bb:f0:3d:7f:eb:07:48:aa:57:dc:f5:5e:c2:6d:
2f:44:f9:b6:30:7b:4a:86:a2:8a:c0:6e:8b:5e:40:6c:c8:26:
db:12:f4:02:f6:53:0d:bb:65:16:c2:e7:cd:c0:f0:60:ed:e6:
4f:8c:89:b8:e2:40:84:59:b9:3b:62:d7:62:d6:76:ac:9e:6c:
1e:30:be:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:45:04 2026 by rpki-client