Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.mft
File: K94VUTok977ZjoTw4zigbGcObzY.mft (raw, json)
Hash identifier: Ul0qqi7by8+it5jBuuTcGIaornj+XSqVOsaMRso6gXI=
Subject key identifier: 55:D0:BD:5B:9F:AC:FE:C2:3C:6A:1C:D4:9E:26:CD:EF:B3:6D:8C:C0
Authority key identifier: 2B:DE:15:51:3A:24:F7:BE:D9:8E:84:F0:E3:38:A0:6C:67:0E:6F:36
Certificate issuer: /CN=2bde15513a24f7bed98e84f0e338a06c670e6f36
Certificate serial: 019D38D35FF19F3F552CD28EE19E25D78417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K94VUTok977ZjoTw4zigbGcObzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.mft
Manifest number: 0151
Signing time: Sun 29 Mar 2026 09:01:09 +0000
Manifest this update: Sun 29 Mar 2026 09:01:09 +0000
Manifest next update: Mon 30 Mar 2026 09:01:09 +0000
Files and hashes: 1: K94VUTok977ZjoTw4zigbGcObzY.crl (hash: ricOWHz1Iaog4tfAjEaPccloYgH7cB66EOGQQnP+fXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K94VUTok977ZjoTw4zigbGcObzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:5f:f1:9f:3f:55:2c:d2:8e:e1:9e:25:d7:84:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bde15513a24f7bed98e84f0e338a06c670e6f36
Validity
Not Before: Mar 29 09:01:09 2026 GMT
Not After : Mar 30 09:01:09 2026 GMT
Subject: CN=55d0bd5b9facfec23c6a1cd49e26cdefb36d8cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d3:a8:0c:cd:57:8d:05:e1:3d:3a:43:3d:6f:
22:24:2c:3b:20:c4:80:f2:ba:31:ab:65:b2:6f:bc:
04:ed:bf:2b:15:4e:09:7e:f2:78:28:68:19:9b:89:
f3:2a:39:65:b6:95:1a:d2:df:db:6e:4d:57:6f:78:
e8:ae:3d:55:41:80:91:bd:1c:ac:ac:f3:51:b4:9c:
84:47:ac:c7:6e:32:d0:db:0e:e8:e0:95:bf:62:b8:
7d:ac:ec:9d:5c:06:03:d4:9b:a0:22:ac:ab:c0:1e:
b3:57:c6:e6:b3:e1:fd:52:04:38:0d:db:3b:43:70:
8d:98:ae:7a:2f:17:70:36:f6:9c:f8:c6:41:ac:91:
f2:cf:0a:5c:72:43:e3:dc:1e:ac:c7:42:69:2f:36:
06:cc:22:22:67:69:a5:7f:79:ff:77:54:e7:a7:c9:
82:9f:01:b7:29:9a:87:ae:71:4a:7e:b0:1c:17:99:
3d:d0:70:64:f2:ed:64:57:d8:25:8f:6b:46:f7:33:
88:e1:24:45:df:46:f6:c7:5b:f9:3e:40:68:c8:d8:
e5:c8:0c:a2:c1:95:37:fc:d4:19:88:e8:66:76:53:
1b:d7:35:c7:ce:91:e8:3f:e7:87:71:60:19:ef:9f:
77:18:31:bf:47:2e:52:e4:d6:8e:a5:c5:f1:26:ed:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D0:BD:5B:9F:AC:FE:C2:3C:6A:1C:D4:9E:26:CD:EF:B3:6D:8C:C0
X509v3 Authority Key Identifier:
keyid:2B:DE:15:51:3A:24:F7:BE:D9:8E:84:F0:E3:38:A0:6C:67:0E:6F:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K94VUTok977ZjoTw4zigbGcObzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/40b660-2d9f-4555-8d04-4d7df40c0f5c/1/K94VUTok977ZjoTw4zigbGcObzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:72:86:25:7d:7c:dc:e5:ae:8f:e9:c9:ce:59:58:06:ec:78:
62:ca:2b:61:3a:82:cf:88:77:f7:f3:88:bf:1b:a2:3c:5f:09:
f6:43:c8:cd:f0:63:96:a8:be:71:1d:7f:fd:39:a9:df:e8:50:
52:05:2a:8b:f4:ea:d9:c6:ce:a6:fb:d4:ee:0c:c7:8e:27:9e:
e0:b6:e4:4f:c2:32:2d:6d:6e:cc:32:1c:8f:86:5a:b9:c3:17:
1e:a9:a7:3b:62:d4:0d:06:28:bb:98:e4:89:a5:43:e8:fb:2c:
96:df:dd:0c:19:02:d8:4c:2b:49:75:77:f8:90:45:eb:1e:62:
b7:99:d1:84:98:c5:9a:d3:59:28:5c:65:c3:83:06:5b:66:b3:
67:59:7f:77:72:33:f8:3c:71:81:df:6c:72:3a:c9:56:9d:9e:
81:ae:c7:be:58:f3:b3:53:96:d0:8c:f1:e2:a9:f8:6c:df:03:
23:62:f2:86:47:2c:eb:79:9f:7a:f3:99:71:f4:04:da:38:51:
e2:b1:b8:d2:20:08:23:a8:38:63:5b:50:17:07:c6:1a:66:88:
7a:2a:b3:50:59:da:2b:db:3c:28:df:7f:f6:20:19:fe:ae:f6:
6f:32:07:e5:97:3a:cb:4d:03:a7:94:fb:e9:97:3e:eb:56:92:
ea:54:57:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:38 2026 by rpki-client