Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: MrphADczKrOUHd5i/qjMtVh+6fyCFujMgZ2eZTMdX2o=
Subject key identifier: 93:20:51:60:CD:B8:CD:A8:07:5A:CA:BC:2A:16:A1:1C:00:37:B7:1B
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 019CE66DACF6D297B4848DCE52B5A8DD25ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 1866
Signing time: Fri 13 Mar 2026 09:01:13 +0000
Manifest this update: Fri 13 Mar 2026 09:01:13 +0000
Manifest next update: Sat 14 Mar 2026 09:01:13 +0000
Files and hashes: 1: 4o_tAUtgP-njAXhmOmcH5E-LEBE.roa (hash: fh84+EgF1SEM+SjNNhOt/IByRahwjmYLOKwI1U+RRhc=)
2: AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa (hash: qSJNJwwtc55ywmper0Gkw+bq36i69BmtauWb1Skowaw=)
3: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: DfKlK1iVYzGCfpyfw9SABeFqtKdPllkliDd2PFinFlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:ac:f6:d2:97:b4:84:8d:ce:52:b5:a8:dd:25:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Mar 13 09:01:13 2026 GMT
Not After : Mar 14 09:01:13 2026 GMT
Subject: CN=93205160cdb8cda8075acabc2a16a11c0037b71b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:88:93:79:68:db:75:d5:f0:b0:3d:46:0a:81:
ae:9a:12:9e:9d:e6:e3:ef:e3:f2:2f:04:52:7b:55:
d0:8d:41:4a:67:92:d9:9d:8e:b7:dc:5d:8a:a9:db:
24:b0:88:d7:36:f6:ee:e5:8c:a3:12:73:ee:df:2f:
0c:d1:52:e2:14:9c:55:6f:f8:2b:16:8d:8e:ee:8e:
84:d5:82:bf:0d:7f:c5:40:44:bc:0f:a4:2f:c3:16:
c7:f1:aa:ac:c5:d6:64:eb:60:bf:ef:73:ef:9d:08:
40:22:9f:c6:41:2d:4d:93:e2:45:79:b4:26:6e:25:
ef:78:10:59:8a:96:13:9c:26:d0:1d:10:b7:28:ad:
8e:bf:d3:e3:f9:bc:9c:32:14:f8:f2:56:b7:d7:40:
97:31:43:ef:23:e5:a8:2d:d5:b3:cd:39:0a:71:6a:
ae:95:3f:a0:10:20:85:5d:d6:85:a7:86:7d:01:c0:
34:62:bd:47:2f:ac:db:5f:2a:ea:ce:98:c6:3b:d7:
15:7c:1a:18:c7:40:2b:3d:93:0f:cc:14:49:3e:e4:
83:4b:1b:c8:8d:17:65:3c:1b:1f:f5:30:02:fa:96:
30:a3:e4:2e:0f:55:78:36:23:a8:8b:35:6b:19:d5:
55:96:99:7e:26:a3:3e:51:1d:8f:37:e7:26:fd:f3:
4c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:20:51:60:CD:B8:CD:A8:07:5A:CA:BC:2A:16:A1:1C:00:37:B7:1B
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b4:af:a2:9d:8b:4b:0f:56:02:52:36:64:21:8d:3c:a5:45:
57:b0:0e:86:55:2a:6e:09:00:3e:88:a8:cf:34:ef:70:a8:ad:
3d:15:54:c3:72:8a:cd:0e:a7:d0:6c:ca:61:26:52:1f:73:85:
c9:28:7c:40:bf:81:ba:3e:f8:80:96:c4:18:70:1d:8e:79:dd:
59:a6:b6:49:3d:47:98:ec:7f:d5:f5:23:b0:b1:d5:e5:6e:f8:
8b:d7:2c:55:5c:d2:c4:b9:be:7c:1e:43:11:13:41:c7:80:36:
98:09:a5:24:0a:fa:b4:db:6a:6d:70:5e:1c:4c:8c:f2:80:a1:
34:83:46:8d:6b:e7:9f:a3:09:30:70:2d:17:48:06:29:90:8d:
2b:05:d0:ed:9a:96:a6:76:f4:b2:0c:b0:2b:40:d5:0c:40:f9:
81:05:53:bf:32:41:32:89:2b:db:c1:4f:8c:df:81:09:43:72:
af:6c:1e:b8:d8:04:9e:b6:10:31:06:bd:96:26:88:ab:e1:f2:
68:c6:dc:13:df:00:2a:b6:b8:5e:5e:db:b1:b0:39:c8:09:b5:
c1:e8:3c:40:84:20:b2:4e:cd:05:d2:63:b5:0b:8f:0c:f1:3a:
3c:54:49:eb:78:2e:ec:f3:d8:fc:ad:26:a3:9c:2f:c4:45:76:
dd:8c:bf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:50:46 2026 by rpki-client