Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
File: K1wFUAyGXpJL3esa7nsuuMupJ8k.mft (raw, json)
Hash identifier: o6lcY/wvB9oc6M2ATpvklYDh0ap3J4hoq2W4KaAQRmY=
Subject key identifier: BE:CE:1F:5F:82:0A:63:61:E4:84:CD:14:E0:81:BB:DB:7D:5A:05:76
Authority key identifier: 2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
Certificate issuer: /CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Certificate serial: 019DCF076B123E47B84EA7EEA962B4BA5176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
Manifest number: 03E3
Signing time: Mon 27 Apr 2026 13:01:03 +0000
Manifest this update: Mon 27 Apr 2026 13:01:03 +0000
Manifest next update: Tue 28 Apr 2026 13:01:03 +0000
Files and hashes: 1: K1wFUAyGXpJL3esa7nsuuMupJ8k.crl (hash: MS5JK75FM+mKrSnjA7ZEnciEmKN2HwcYGFbNYR368Nc=)
2: a4tcSb4rS0ZTyQ0HQWUrw9ZU1WI.roa (hash: 6y7B5mYALV8RuAK+rFKCQl3TCy8ZRF7yNkPXxeMdXfU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:6b:12:3e:47:b8:4e:a7:ee:a9:62:b4:ba:51:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5c05500c865e924bddeb1aee7b2eb8cba927c9
Validity
Not Before: Apr 27 13:01:03 2026 GMT
Not After : Apr 28 13:01:03 2026 GMT
Subject: CN=bece1f5f820a6361e484cd14e081bbdb7d5a0576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:42:88:8c:95:fe:35:7e:7d:43:0e:c6:6a:b3:
18:f2:ec:4e:df:c5:8a:f3:bc:ae:ec:65:e9:ce:9c:
73:2a:4e:00:1d:ba:53:4f:d8:55:17:ce:99:32:d9:
50:f1:3b:b2:2f:88:6e:9a:1d:cc:12:24:1d:59:1a:
bd:6c:c9:01:f4:24:af:fb:21:f6:ee:fb:49:2e:a2:
ca:ea:a5:ee:9a:8b:73:1d:79:6b:a9:c6:04:b0:3d:
5e:7a:70:80:dd:c4:de:c0:0a:23:2f:22:73:83:df:
98:b0:ec:8b:44:61:f1:0e:98:b7:b7:88:61:a3:54:
a1:f3:f0:0f:60:15:65:fc:fa:ea:47:d4:23:36:b6:
47:7c:a4:43:1d:61:ae:91:c0:0e:fa:e3:c9:9d:17:
24:43:bd:11:9c:25:07:c2:01:8f:ed:0a:15:43:8b:
6f:e0:a9:73:69:b0:3e:e4:4e:a2:9c:be:d2:b4:c3:
1f:f4:3d:a5:1a:a6:81:40:17:91:35:35:a2:c3:c4:
86:7e:0a:79:63:1e:2d:09:b8:a4:34:88:4a:97:56:
74:52:2f:c0:63:b5:20:08:bf:ee:26:b3:80:a1:89:
47:4d:41:cc:bb:d3:27:d1:65:02:76:31:70:f3:98:
15:67:79:03:08:14:9c:fc:ce:e4:07:b6:b9:16:fc:
a1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CE:1F:5F:82:0A:63:61:E4:84:CD:14:E0:81:BB:DB:7D:5A:05:76
X509v3 Authority Key Identifier:
keyid:2B:5C:05:50:0C:86:5E:92:4B:DD:EB:1A:EE:7B:2E:B8:CB:A9:27:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1wFUAyGXpJL3esa7nsuuMupJ8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/27fd5e-7d5e-4898-8689-595d42d5c254/1/K1wFUAyGXpJL3esa7nsuuMupJ8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d8:04:db:75:a5:0d:7c:31:2a:bb:40:13:14:55:e7:ab:d4:
11:87:81:f4:2d:da:2a:60:16:d7:82:bf:9f:d0:87:67:ba:d0:
7c:89:c0:59:1e:81:94:cc:c3:eb:32:42:e0:f0:88:75:b4:9e:
6b:cd:ae:ee:b5:ba:e3:68:43:31:db:4a:3e:99:6e:90:b7:7a:
4a:c1:be:9e:2e:b6:d9:fb:5b:55:49:22:07:ca:df:17:c0:78:
bb:09:4b:8d:09:63:ca:b7:5e:27:be:13:53:38:e7:f1:04:dd:
94:c7:75:8d:ad:43:b2:45:36:20:3f:f0:a5:da:c1:ac:31:40:
9d:95:38:6e:41:73:e2:fb:a3:d5:15:01:cf:06:de:9c:b2:54:
e3:00:e6:d1:1b:6c:1b:02:06:7a:66:51:ed:4d:fb:99:b0:98:
da:a8:7a:c7:f9:1e:b2:26:50:8b:e8:83:1a:ba:f2:10:d6:4f:
41:44:c3:f0:66:65:fa:ea:d7:7c:f1:a9:a4:c9:a0:89:90:d7:
ad:12:3e:a1:8a:0d:41:5b:37:e7:51:98:81:16:6e:be:a3:43:
3d:82:50:48:8a:bc:10:38:79:11:bc:3c:9a:a7:c9:03:21:e8:
29:b8:1b:23:15:f3:92:67:93:1f:15:15:de:25:8f:f7:71:29:
39:d2:13:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:32:21 2026 by rpki-client