Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
File: K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json)
Hash identifier: DUr6eQ61XcLDt42LOicXr6hcwvIcDfxtBiw87zY5vwA=
Subject key identifier: 08:E5:E1:34:96:C8:89:A0:6E:89:F1:A3:62:55:8A:AD:EC:82:71:E9
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Certificate issuer: /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial: 019D3A53CC2EA3D6A651C893C3E1ED5050D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
Manifest number: 105E
Signing time: Sun 29 Mar 2026 16:01:03 +0000
Manifest this update: Sun 29 Mar 2026 16:01:03 +0000
Manifest next update: Mon 30 Mar 2026 16:01:03 +0000
Files and hashes: 1: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: q0LXQfSGDF8OpJ0eX9E/lhEqlP86m/OwQLV6afH6P/8=)
2: tpy9FJHevA7odk2TH7YsmtN7UFs.roa (hash: HA5XrfWMN5EyPeGIHUHIkCKTU3wDBfCSNcRoSlAlDv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:cc:2e:a3:d6:a6:51:c8:93:c3:e1:ed:50:50:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Validity
Not Before: Mar 29 16:01:03 2026 GMT
Not After : Mar 30 16:01:03 2026 GMT
Subject: CN=08e5e13496c889a06e89f1a362558aadec8271e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cc:68:08:e6:c2:36:c7:ca:8a:8e:41:03:64:
88:5b:31:67:25:71:88:ec:39:18:95:51:b9:18:65:
97:d9:45:3a:8a:98:a6:3d:68:6a:c8:64:dd:f1:ee:
a4:42:08:9d:65:fc:3f:b5:42:cc:60:83:45:b8:1c:
6f:c1:55:e4:2f:8e:5e:2e:4c:b6:2f:05:71:f4:43:
77:78:4c:6c:88:c9:6f:fa:00:89:3e:b9:94:6b:e4:
fe:61:89:4d:92:d0:9f:45:d2:ce:ea:b1:f5:83:aa:
52:c2:f0:a9:89:e2:e1:0f:98:c3:a5:89:9a:01:68:
fe:d1:51:08:fb:71:21:22:84:78:38:ff:b6:2f:2d:
d5:4c:64:ee:cc:cb:4a:ae:d2:cc:b0:10:59:c8:6c:
2d:6a:cf:94:c7:6d:6f:97:79:b9:da:3c:9f:dc:53:
cb:2f:ca:11:3c:1b:63:ee:79:15:aa:39:17:74:c6:
0f:06:c5:b4:40:e0:52:25:05:88:c5:3c:99:e1:5e:
e2:ea:1b:30:5b:fc:0e:e0:3a:61:f7:98:92:23:89:
08:25:f3:06:b1:49:e9:56:a8:1d:7a:1d:c2:11:8b:
e0:f4:fa:09:24:8c:81:72:78:1a:60:d9:81:27:16:
81:c0:d6:2c:70:d4:37:2b:42:a9:fc:65:17:f1:54:
b0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E5:E1:34:96:C8:89:A0:6E:89:F1:A3:62:55:8A:AD:EC:82:71:E9
X509v3 Authority Key Identifier:
keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:1c:b3:d3:6e:a5:f8:4f:8f:3d:a2:62:94:2a:24:a3:43:95:
03:d6:8b:13:bc:af:9c:45:47:f0:e7:03:d5:f9:df:61:1d:27:
ef:b7:21:3c:71:5f:cd:5d:ab:a0:81:d4:ec:c8:b3:50:e3:6b:
8a:5e:01:42:54:03:36:6c:0e:a0:82:02:1f:dc:d7:4a:cc:6d:
3e:45:42:65:6c:8d:f8:c9:27:41:35:1e:cf:32:5e:73:f0:be:
59:31:d6:26:87:5a:2d:46:ff:05:48:bd:43:23:79:f6:5b:a9:
a3:72:76:c0:c7:6a:8a:3f:c4:4e:09:ca:cf:a0:26:c6:1b:29:
1c:f3:06:32:a5:b7:70:2a:38:c2:24:1e:ad:3c:cc:6b:bd:26:
0d:52:18:c5:1a:ee:9d:71:7c:8e:ef:6a:7c:21:6c:2c:c2:01:
b2:27:06:ca:e7:44:bb:b7:71:4b:da:d7:d4:0a:a1:f4:d0:cd:
a1:75:3c:a2:2c:56:e8:8c:91:ef:73:12:8b:89:ba:90:68:12:
37:6c:af:98:fb:e9:50:55:a8:fd:0c:eb:f8:37:ee:1e:90:8e:
5b:1a:ea:29:db:2c:77:16:4c:0b:89:03:71:59:64:d9:0d:a2:
68:59:43:a4:b1:95:26:2c:11:c4:a2:3e:5f:e2:27:86:38:eb:
f8:01:3f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:22 2026 by rpki-client