Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
File: K0ro4PiNDIw530T_pB4ywmJ8OhU.mft (raw, json)
Hash identifier: XRJv9L0otSFwVmiJ7ZP7PW7gkYJ79dqJBDdy0mV9gKg=
Subject key identifier: 2B:96:AB:29:B7:93:A8:67:96:E4:61:07:EF:F1:E2:35:1F:44:88:39
Authority key identifier: 2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
Certificate issuer: /CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Certificate serial: 019D390A4AA0305C92DCB405251D2612AF07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
Manifest number: 05A9
Signing time: Sun 29 Mar 2026 10:01:08 +0000
Manifest this update: Sun 29 Mar 2026 10:01:08 +0000
Manifest next update: Mon 30 Mar 2026 10:01:08 +0000
Files and hashes: 1: K0ro4PiNDIw530T_pB4ywmJ8OhU.crl (hash: WC1FikafrqeKaI2+4B9Y7USq+k6CjvGosSjgaqBl4E0=)
2: z5dBX6odp12M_OB_gttLAeXRzfY.roa (hash: H0+1g03VSFVNjWI/Z7WGHpAKWuQ/lvaaEnN2kUyKA+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:4a:a0:30:5c:92:dc:b4:05:25:1d:26:12:af:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ae8e0f88d0c8c39df44ffa41e32c2627c3a15
Validity
Not Before: Mar 29 10:01:08 2026 GMT
Not After : Mar 30 10:01:08 2026 GMT
Subject: CN=2b96ab29b793a86796e46107eff1e2351f448839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:3b:18:77:c3:ad:27:95:fe:9b:21:c9:b1:
41:fe:ea:e5:b5:51:1d:12:40:0f:74:bf:aa:90:8b:
d8:2f:ed:80:70:f8:d7:52:14:b2:63:f8:a1:d3:92:
03:a2:6a:d2:47:16:7a:9b:5d:cd:06:de:b9:c0:89:
7f:40:a3:fa:6c:78:07:79:fd:5f:c4:07:6f:be:85:
99:d1:6a:90:6e:18:68:81:df:0b:89:cf:18:ff:9b:
30:d4:28:0c:5b:f4:40:b7:30:11:5e:ee:f3:fd:8b:
e8:b4:ff:c1:18:39:5d:f5:ec:7f:15:64:c1:52:7d:
ae:c1:30:3f:59:04:cc:31:a6:59:e4:0d:6c:90:40:
15:3a:f1:95:a5:88:d6:0a:66:f7:fd:70:70:41:6f:
24:41:06:09:75:6c:1c:1e:eb:3e:86:74:e3:aa:9d:
45:e0:64:01:79:44:b2:48:ed:19:eb:ea:65:94:a7:
91:15:98:39:11:d4:2f:f9:f0:a5:a0:fa:aa:65:6c:
4b:12:20:fd:f2:90:13:39:f2:2a:75:91:9c:ca:9a:
83:83:4f:cf:d2:0f:a2:31:3e:bf:8f:2e:d5:d7:dc:
a0:99:e2:57:15:4e:a1:74:a2:14:b3:83:59:93:9a:
ce:65:9c:5f:bb:4f:63:e0:9e:a9:ec:a3:61:9c:37:
e8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:96:AB:29:B7:93:A8:67:96:E4:61:07:EF:F1:E2:35:1F:44:88:39
X509v3 Authority Key Identifier:
keyid:2B:4A:E8:E0:F8:8D:0C:8C:39:DF:44:FF:A4:1E:32:C2:62:7C:3A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0ro4PiNDIw530T_pB4ywmJ8OhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/99c1f6-e7c1-4ab3-9ed6-10680d256ae0/1/K0ro4PiNDIw530T_pB4ywmJ8OhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:95:3b:8f:9d:6b:96:c5:90:db:32:a9:19:9c:75:a0:fc:eb:
db:09:f2:23:5a:67:ef:b0:6b:a3:56:c4:c7:f0:cc:46:08:9e:
6b:ad:74:d1:48:29:0e:f4:87:67:e1:eb:28:09:4e:52:eb:45:
b5:60:72:fa:95:1c:56:03:21:5f:92:bf:f1:c6:8e:b0:b1:62:
25:ee:17:03:b7:49:79:6e:62:02:a0:9b:b2:69:49:57:9b:24:
26:fa:72:87:8a:b2:46:10:1d:9c:73:ed:0c:9a:e1:f0:0e:54:
8b:64:ed:3e:52:5e:68:e0:ce:80:ff:a7:c6:68:9e:cc:d7:d6:
98:67:a4:6b:fe:00:f0:77:c0:e4:2d:2a:60:cb:f7:1c:e7:de:
5f:cf:30:05:4a:5e:e0:6c:e8:30:f3:b8:9c:2d:f6:a9:16:74:
21:9c:84:7e:9a:4f:18:87:42:44:8d:e8:7b:45:ec:4c:92:06:
95:8a:c2:1a:c3:39:98:1b:75:d0:4b:f9:f6:f4:a5:ac:b1:30:
f9:b5:52:35:37:e1:ad:54:57:06:01:d8:b6:1f:f1:ee:19:7f:
8d:fe:a3:fc:85:aa:e6:a7:0a:06:ee:68:d0:92:61:56:51:fd:
2e:d3:78:82:3e:a9:d6:13:70:7d:56:2d:19:3f:a3:17:61:2c:
89:d1:5d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:33 2026 by rpki-client