Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier: kvZvFA0dBaeMVGykdGAOELFK59yEEo9/opcW6zjFJt8=
Subject key identifier: 3C:CA:21:65:44:77:62:3B:40:95:CE:E4:82:B4:DF:63:25:AC:4F:55
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 019D39412D1584EB4A02C529E38D2F40B2EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 11:01:05 +0000
Manifest this update: Sun 29 Mar 2026 11:01:05 +0000
Manifest next update: Mon 30 Mar 2026 11:01:05 +0000
Files and hashes: 1: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: 4yNAh192k4OxVgUv8GvmnGToy/Q6RgziiiwRd5Vyfy0=)
2: jW75sPmmFSuAByKBWvYaeRnFXOM.roa (hash: v2zg0sfjDzeH0JGU5ldDB2qU5wPCOcMy8diYca8w+d4=)
3: rYSG2dYjGVa3YG5opt3m2blLdDQ.roa (hash: 0jQGDr8z5IsaWt/3i/Wtvl19AvDMpjEhc4vCy+qWV/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:2d:15:84:eb:4a:02:c5:29:e3:8d:2f:40:b2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Mar 29 11:01:05 2026 GMT
Not After : Mar 30 11:01:05 2026 GMT
Subject: CN=3cca21654477623b4095cee482b4df6325ac4f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:66:49:de:9c:c2:e3:34:c8:89:9e:79:49:37:
f5:c9:28:19:5f:91:d5:70:4c:26:ad:7b:5d:86:86:
e1:96:42:e7:fd:1b:25:e2:55:5c:23:85:b2:55:d7:
a4:08:d8:6e:d6:8a:b0:79:ae:b2:a7:54:09:73:10:
3a:9e:7c:2a:a7:b5:89:d0:a8:56:85:b5:cd:d0:71:
8d:71:b3:41:e5:6f:0b:c0:c8:2f:f3:e8:84:70:d8:
4e:03:c3:79:b7:e7:2c:02:36:40:59:f9:fc:0a:a9:
7c:0f:eb:19:d1:7b:e2:f6:50:7f:9e:39:4f:98:38:
11:39:0d:52:70:a3:6d:a7:5f:8e:b0:94:16:2e:7f:
0b:68:62:41:cb:0b:c1:ef:05:c7:d4:c1:95:aa:d8:
03:87:28:67:6f:ff:8b:ed:3a:3f:ee:0b:d0:2e:5e:
ba:d4:79:ae:49:74:d1:77:30:76:d4:6f:ae:f9:ba:
08:43:f4:bc:46:c2:52:6f:14:b7:25:b1:c0:51:77:
a4:9d:1d:34:ef:7a:cd:6a:3e:7a:02:08:40:2d:33:
2d:88:15:0f:ac:ea:0f:d4:69:97:ae:67:ed:27:b1:
e7:6c:99:9c:70:61:e6:32:e1:d5:d8:74:2e:e0:f2:
b0:af:e2:64:4e:29:1d:98:78:ab:e9:26:52:f9:25:
85:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:CA:21:65:44:77:62:3B:40:95:CE:E4:82:B4:DF:63:25:AC:4F:55
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ee:77:45:a4:ca:b4:cd:ec:9c:a1:e7:70:8d:22:87:2f:80:
41:7c:eb:b6:f3:2b:cb:b4:b1:60:e1:2d:37:ef:c2:28:50:8a:
eb:50:1d:dc:f2:53:0c:66:5d:72:dd:52:47:7d:c3:72:d2:e2:
54:11:1f:ad:48:ec:1b:cd:8e:2c:de:eb:e7:e7:ae:db:df:f2:
2b:97:9a:89:f3:bd:a7:96:3e:4a:d8:95:3a:49:7d:59:4a:d5:
97:92:b5:78:f1:b2:c8:62:4c:3b:c5:96:7e:df:8c:b4:b5:19:
2e:f5:d1:e0:c7:cd:09:96:81:ce:d2:58:d1:70:47:ef:f8:45:
bc:40:b6:87:c4:1e:07:f0:3c:af:fe:b9:43:39:fb:28:ac:ba:
28:07:8f:3e:12:7d:ab:2b:92:46:8a:6c:ef:2d:23:80:8d:fa:
ac:5a:5b:00:94:b3:bb:d6:8a:49:fd:74:53:60:4a:df:aa:55:
4e:c7:9f:18:98:08:f3:f1:10:27:18:21:9a:9d:3e:5a:e5:b0:
30:18:6b:be:34:a7:ea:6b:3b:75:0f:de:9d:21:e9:de:0a:16:
3e:98:1b:d0:80:79:fa:81:c4:08:b2:cb:c3:65:5b:65:32:f9:
0a:df:2e:89:73:dd:aa:dc:46:f0:70:05:a0:96:3c:66:c9:d4:
9b:ff:e1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:49:03 2026 by rpki-client