Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft
File: K4GVFfOZ60LIAx876kqYyOKJ4e0.mft (raw, json)
Hash identifier: ao6hZbAPhGPt0sMQTuTDqg2uluWXlGREVKH4ILrJHls=
Subject key identifier: CC:23:88:32:CA:AB:86:C0:FB:A7:59:32:77:53:9E:FD:3C:9F:AD:B2
Authority key identifier: 2B:81:95:15:F3:99:EB:42:C8:03:1F:3B:EA:4A:98:C8:E2:89:E1:ED
Certificate issuer: /CN=2b819515f399eb42c8031f3bea4a98c8e289e1ed
Certificate serial: 019D3977D507244A1933389C239A7B54FC62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4GVFfOZ60LIAx876kqYyOKJ4e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft
Manifest number: 02C6
Signing time: Sun 29 Mar 2026 12:00:47 +0000
Manifest this update: Sun 29 Mar 2026 12:00:47 +0000
Manifest next update: Mon 30 Mar 2026 12:00:47 +0000
Files and hashes: 1: K4GVFfOZ60LIAx876kqYyOKJ4e0.crl (hash: SzJN2FWyF8udWywYczlBsdSqpysrzQdADO82ob8POrk=)
2: c41PHXrEKruszXNLFEI1zYmbfro.roa (hash: 5pkY88oxOJ99H5C+AS8KfYWXy9tqZhIeZmCmtuqMkt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K4GVFfOZ60LIAx876kqYyOKJ4e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:d5:07:24:4a:19:33:38:9c:23:9a:7b:54:fc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b819515f399eb42c8031f3bea4a98c8e289e1ed
Validity
Not Before: Mar 29 12:00:47 2026 GMT
Not After : Mar 30 12:00:47 2026 GMT
Subject: CN=cc238832caab86c0fba7593277539efd3c9fadb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d6:3b:2f:85:d0:47:ca:15:a9:e1:06:b4:22:
73:2f:97:bb:94:87:5c:ce:48:4b:c3:cc:22:71:d8:
05:70:da:44:d7:92:ee:64:0c:29:96:d1:a5:98:31:
e4:d4:a4:4e:4f:55:26:41:e3:0f:c4:af:d3:49:fb:
f3:a2:3c:6a:20:49:fe:95:c7:c0:d7:16:bd:e2:22:
4c:45:96:05:a9:e9:77:ff:cc:bf:db:40:79:cc:bb:
35:f2:fa:14:4a:ab:2a:2b:8a:46:6f:cb:4e:4e:0b:
51:79:d7:34:f8:aa:b1:fd:b0:ae:84:e0:42:3a:f4:
05:c1:fa:75:28:54:96:38:60:b1:d6:bd:95:43:d8:
01:79:6e:11:1c:bf:c0:ac:d2:31:eb:18:bc:34:4c:
9e:42:36:41:a8:d6:c4:a5:63:20:26:ff:48:37:b7:
c1:2e:0a:0c:36:72:65:e6:ac:9d:a1:21:a3:8d:85:
9e:e8:6a:b4:4f:59:13:0d:5e:6c:8b:02:e7:da:9c:
a3:d0:50:8e:fd:2a:83:27:32:87:33:b8:56:01:0f:
5c:96:5d:60:b8:ce:07:5e:2d:e5:8b:ff:2a:dd:e4:
36:dc:c4:35:15:34:99:f7:04:64:ae:27:ad:3a:df:
3f:fd:53:62:ff:72:7a:ee:f9:e4:59:34:b2:0a:9e:
26:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:23:88:32:CA:AB:86:C0:FB:A7:59:32:77:53:9E:FD:3C:9F:AD:B2
X509v3 Authority Key Identifier:
keyid:2B:81:95:15:F3:99:EB:42:C8:03:1F:3B:EA:4A:98:C8:E2:89:E1:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4GVFfOZ60LIAx876kqYyOKJ4e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/61f7dc-00f2-4d31-a757-0716dec731ab/1/K4GVFfOZ60LIAx876kqYyOKJ4e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f9:0a:22:b4:47:0e:e1:0d:d8:89:57:a3:b3:45:b9:45:a4:
ab:86:6e:37:51:94:f8:7d:67:b4:f0:f3:fc:d9:ca:b9:5d:b7:
cd:d5:8b:89:21:6e:68:e9:8d:7b:0e:6a:2a:12:e5:23:e8:5b:
c4:37:6d:bb:c6:3b:12:4c:4c:4c:ea:48:fc:d5:3d:ac:4d:91:
1b:af:bd:48:6b:7e:96:e5:39:43:08:dc:1a:30:e2:be:d9:21:
fb:90:74:31:18:9f:d1:98:4b:f7:c3:96:69:51:1f:cf:60:d8:
d6:99:3f:b2:37:58:dc:a2:78:9d:a6:5c:7c:50:f1:c7:a9:f0:
e5:83:df:f8:ae:c4:f3:d2:08:5f:96:47:b7:08:8c:d0:e2:e3:
f0:41:ed:e9:36:11:4e:5e:50:fa:d3:9c:a4:82:d5:de:68:2a:
29:79:cb:3d:85:35:64:cf:60:8e:6c:b5:0b:b3:0c:6d:f6:36:
2e:e7:f6:2f:61:7f:7d:ba:c0:81:84:40:1a:97:3e:d5:2b:ce:
e5:0e:cb:5c:db:6c:5b:cb:0e:22:c8:f6:e5:f4:a4:c2:7e:51:
ee:1a:90:91:c4:1d:70:70:a1:da:a1:ae:b6:e5:15:18:17:d2:
41:71:47:83:f1:16:2e:0b:34:64:b0:ed:61:23:bf:d9:3d:c8:
ce:76:e1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:47 2026 by rpki-client