Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: DzQTQi1LCUjKzUweoZvhUXnYlsyrc7xueBzxicsekc0=
Subject key identifier: 24:EF:27:B2:73:DE:56:07:AB:F9:CF:38:DF:01:74:24:97:71:B5:A8
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 019DD01A4401D7619811834E91018B7E6921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 18:01:15 +0000
Manifest this update: Mon 27 Apr 2026 18:01:15 +0000
Manifest next update: Tue 28 Apr 2026 18:01:15 +0000
Files and hashes: 1: 4o_tAUtgP-njAXhmOmcH5E-LEBE.roa (hash: fh84+EgF1SEM+SjNNhOt/IByRahwjmYLOKwI1U+RRhc=)
2: AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa (hash: qSJNJwwtc55ywmper0Gkw+bq36i69BmtauWb1Skowaw=)
3: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: S+jozITj9PGdQpIyP8O4V1Jh6HN0/MOENZgcy+zhA0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:1a:44:01:d7:61:98:11:83:4e:91:01:8b:7e:69:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Apr 27 18:01:15 2026 GMT
Not After : Apr 28 18:01:15 2026 GMT
Subject: CN=24ef27b273de5607abf9cf38df0174249771b5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:2c:d0:f1:be:38:58:5c:b3:7b:f2:56:c8:
6a:1e:55:0d:98:6d:14:bd:02:fe:38:41:43:c0:bd:
c5:08:a2:9f:8a:57:8e:e7:38:12:ce:0c:95:93:0e:
6b:7b:41:4a:1c:8b:17:c5:7d:68:ca:38:e4:54:4c:
20:9f:48:b4:6c:1f:78:77:97:bd:56:77:09:de:63:
22:24:73:1c:17:21:c1:6b:7c:29:f8:ee:a9:c7:88:
58:37:60:39:4d:97:16:0b:25:ce:53:e1:ae:33:b9:
89:e6:68:6a:fd:9e:11:c3:28:d5:4b:b4:3c:a5:28:
fd:3a:9e:e3:a4:98:19:f8:93:05:6e:ad:51:9c:2a:
d1:c7:62:4f:f8:cf:2f:72:83:0e:80:ef:bf:c9:bc:
62:ab:3a:8f:6c:06:b0:63:f5:35:e0:2d:7d:ce:87:
f7:80:80:7b:52:40:1f:06:c5:d6:21:a9:47:df:07:
0f:f6:04:d0:40:3f:41:21:a2:f7:0a:01:0d:26:4b:
ba:c5:a2:fb:56:3a:12:28:33:8f:1a:45:b6:93:b8:
88:aa:7b:bc:18:11:b2:1b:ae:7a:8e:5e:32:92:2e:
ae:51:52:60:f0:5b:c5:d8:9f:8e:9c:15:4d:f1:5e:
6e:d5:ec:fe:2c:51:05:a7:2a:8d:04:fb:84:44:03:
33:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:EF:27:B2:73:DE:56:07:AB:F9:CF:38:DF:01:74:24:97:71:B5:A8
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:40:13:e3:4b:ad:84:8f:ba:91:c7:37:33:eb:c4:c1:06:66:
13:42:6c:0f:64:16:f0:d4:63:45:7f:41:fd:b6:45:95:a5:6f:
0e:64:87:7c:57:16:f0:e2:26:3b:51:21:9b:04:ed:74:fa:fa:
f2:0a:e4:ac:3c:e6:82:d4:76:d9:ae:22:f9:74:1f:d5:78:cf:
77:03:0c:dc:52:8c:40:bc:e1:de:ea:84:84:2a:b2:69:dd:d1:
74:c8:c1:4b:d8:f7:79:35:45:16:79:a5:9b:b1:9b:fb:e7:6b:
23:bb:96:bc:da:f6:e5:2a:8a:b1:91:8b:6c:d2:13:28:2b:a7:
3f:fe:e4:c4:db:89:e5:83:4f:51:66:3b:fe:4d:db:3e:84:ca:
b5:64:e6:56:24:6e:33:44:c3:d0:86:ca:57:36:d7:0b:cc:c8:
be:66:ad:3a:82:8e:aa:d2:c8:97:ad:de:f2:c9:68:5a:ba:18:
c2:7c:3b:c1:ec:29:25:e1:6a:fd:56:a5:78:8e:0b:0a:53:d3:
8e:24:3a:8d:a4:4e:c7:cc:5a:80:3d:0f:ef:4b:f6:85:15:80:
02:a1:e9:ad:83:c8:22:b9:f2:02:33:44:2c:28:45:73:9d:51:
20:a6:e8:9d:86:a7:eb:64:ad:d2:af:d8:0d:50:66:16:32:8e:
0b:d8:05:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:11:44 2026 by rpki-client