Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: 0q44Yd8kTsmMVOg+tlMPBth+kFE5z5EVi78iSWIz0gU=
Subject key identifier: 7F:99:5F:DF:B3:9C:50:05:24:BD:EC:F4:F8:50:16:13:05:55:B8:79
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 019EB7D7A7EC4E5EFDA75B6A16D21A2B956C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 18:00:24 +0000
Manifest this update: Thu 11 Jun 2026 18:00:24 +0000
Manifest next update: Fri 12 Jun 2026 18:00:24 +0000
Files and hashes: 1: 4o_tAUtgP-njAXhmOmcH5E-LEBE.roa (hash: fh84+EgF1SEM+SjNNhOt/IByRahwjmYLOKwI1U+RRhc=)
2: AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa (hash: qSJNJwwtc55ywmper0Gkw+bq36i69BmtauWb1Skowaw=)
3: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: 4czYsbgqvYVFaf52ucj3N1xTlSUe+2PpAhcKk69mokw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:a7:ec:4e:5e:fd:a7:5b:6a:16:d2:1a:2b:95:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Jun 11 18:00:24 2026 GMT
Not After : Jun 12 18:00:24 2026 GMT
Subject: CN=7f995fdfb39c500524bdecf4f85016130555b879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:cc:b7:98:2e:c2:78:fe:ea:42:25:51:44:
9c:61:f1:16:45:90:b9:93:ee:15:60:95:2b:80:8f:
4f:5a:43:49:16:02:87:3d:34:59:87:52:28:65:f3:
ad:ff:02:07:d4:47:0a:9d:c3:25:7b:b6:d3:4e:d3:
a9:96:6f:34:c8:f0:62:38:02:8d:23:38:07:4b:f8:
02:23:32:4f:20:30:0e:91:ce:26:7e:5b:0d:4b:cc:
f7:64:0d:79:01:f8:8a:9c:85:d5:96:78:5f:78:87:
e1:ec:98:8d:87:d0:78:7b:44:58:7c:ed:35:cf:63:
15:4a:6b:ca:d7:92:84:84:54:36:59:f5:a9:50:cb:
6a:77:f6:fa:96:e7:be:03:b0:9f:a6:98:56:6e:3e:
22:22:1c:af:01:a5:1f:03:15:a5:9a:5c:9f:d1:34:
e6:d7:52:52:a3:c4:ab:f9:de:e4:35:aa:61:cb:2d:
85:1a:d5:3c:fc:4f:1c:42:81:5c:e8:e1:d7:f6:e2:
c6:62:19:d8:39:13:13:6b:56:47:39:59:09:ec:02:
e2:51:2a:58:39:ce:be:3c:5d:5d:77:de:f7:04:22:
20:b2:7d:2f:57:91:c9:ae:8a:72:d2:5e:e8:9f:ac:
5b:aa:67:38:9d:7f:af:64:31:58:13:3d:88:e4:ea:
68:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:99:5F:DF:B3:9C:50:05:24:BD:EC:F4:F8:50:16:13:05:55:B8:79
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:2b:5a:5a:4e:e9:ee:71:af:64:aa:f8:16:8b:d8:67:ef:a9:
43:5c:58:ac:a0:b0:1d:d7:77:ef:5e:5f:a8:0a:38:c3:18:b2:
3b:80:55:6e:a7:aa:73:3a:67:5b:e1:88:5c:e1:a5:1f:c0:3a:
d2:56:f5:0a:15:48:97:5d:75:c2:4b:5d:03:ec:06:75:4b:dc:
42:32:e3:c7:be:7e:14:a2:7b:62:35:cb:29:86:f8:b5:0f:75:
b2:3d:88:59:1b:f6:0b:77:0d:3b:f2:05:a6:6f:33:18:51:64:
d3:7a:c9:fc:44:db:ad:c7:91:fa:8a:2d:37:62:70:ab:e7:14:
ad:e9:ad:3e:c8:93:22:43:ea:95:bc:c8:bd:ce:3f:02:f9:6c:
c7:3b:55:e1:ba:0f:86:f7:4a:be:93:e6:84:af:4d:95:19:42:
62:a6:f1:83:e5:f2:73:4b:82:99:55:a2:e0:6d:77:96:fb:27:
a6:9f:fa:4d:03:ed:ab:d3:8c:e3:f2:9e:c6:e3:f7:3f:98:94:
95:6b:1a:de:a6:be:31:75:f4:6f:6d:3b:79:b2:e1:ff:45:8e:
36:29:3c:54:a3:70:f8:47:2b:35:75:cb:3f:45:aa:63:53:51:
93:1c:68:f7:56:e5:12:10:f9:26:bd:6b:a6:91:ca:64:b7:80:
a5:6d:c0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:32:44 2026 by rpki-client