Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: DbkIyh1tRX+q6UX+hy5egjXqg5GWwvNuFCsxI520vII=
Subject key identifier: 7A:21:4C:30:80:1E:5A:7E:EC:50:A7:D3:D6:68:65:6A:13:28:C9:47
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 019D31BE295B7D3AB98406124655779C1539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 188D
Signing time: Sat 28 Mar 2026 00:00:39 +0000
Manifest this update: Sat 28 Mar 2026 00:00:39 +0000
Manifest next update: Sun 29 Mar 2026 00:00:39 +0000
Files and hashes: 1: HXApDbBFjZ5P8YYPxxOP43B_61E.roa (hash: PABHtWG+f2nnmj23DcOFA1VpAaq32GiJAfPfR67Vqzs=)
2: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: 2WzOFMevRMg1opG/2ytIShBHYQZzk5lh1eKS7Mva+CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:be:29:5b:7d:3a:b9:84:06:12:46:55:77:9c:15:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Mar 28 00:00:39 2026 GMT
Not After : Mar 29 00:00:39 2026 GMT
Subject: CN=7a214c30801e5a7eec50a7d3d668656a1328c947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:66:56:88:98:84:3b:41:49:b8:ae:13:73:92:
a5:2d:16:84:e2:94:20:77:a9:a4:3f:8f:79:59:6c:
ee:91:01:e0:f0:db:8a:ac:a5:52:e9:cc:0f:b1:c0:
6d:64:5f:bd:9e:cb:25:4c:28:23:55:87:5b:0d:f9:
66:a8:67:52:40:b0:61:59:23:8a:05:8e:48:a7:39:
b0:fb:87:6c:f3:0c:a9:a4:8f:d4:f5:7e:7a:a6:51:
62:cc:ff:73:b3:8c:23:f7:05:4e:70:c6:0e:25:e6:
10:e1:ee:89:74:ac:a2:33:ba:72:4b:c6:6a:6a:0e:
48:7b:47:ee:2b:51:90:ee:f4:6b:3b:61:18:a9:1f:
8b:e6:42:f6:62:91:89:5e:be:c8:20:12:2c:c7:8d:
b9:94:db:80:b5:04:8c:9d:78:eb:73:cb:17:e2:c7:
b1:f4:7e:6d:a7:94:1f:a6:b8:0c:08:28:6c:ff:7b:
83:b1:bd:56:df:66:76:a3:54:a3:dc:82:e1:ab:f4:
89:c5:ef:44:11:a4:c7:1e:6f:b7:14:a5:fa:45:93:
2a:6d:69:f6:65:53:e1:20:11:ba:ee:56:66:d5:a1:
ac:c8:69:7a:c5:ae:79:1f:e7:17:75:27:3e:21:ae:
85:ca:af:8c:45:c3:82:de:b0:ed:29:78:03:40:8e:
10:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:21:4C:30:80:1E:5A:7E:EC:50:A7:D3:D6:68:65:6A:13:28:C9:47
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:70:a7:91:32:99:36:a7:de:6e:bc:4f:fd:4f:4a:c6:5d:a3:
b9:eb:14:a5:f4:6d:85:d5:0c:ac:2a:2c:ca:54:ca:79:34:e4:
f6:1b:ef:5e:27:6f:dd:47:39:49:a4:24:56:8a:00:58:4e:af:
c0:16:24:f4:74:d0:ab:de:e7:de:7f:81:2e:08:3e:c6:10:43:
db:1c:c8:5d:c2:4e:02:01:c6:7b:ea:9b:01:5f:30:96:c8:06:
1f:47:ec:c0:4e:0d:4f:19:75:8f:11:c0:55:47:55:2d:dd:8a:
10:4a:4c:f0:dc:9b:41:14:d3:0d:e3:4c:1c:f6:82:9e:7e:e5:
e3:8b:ee:76:b3:ce:25:ed:36:cb:54:0c:af:c8:22:d0:ec:90:
ae:0d:3a:f7:1c:f8:7f:c4:dc:f1:78:27:95:7d:c0:91:3c:67:
1b:61:b5:08:d1:51:e1:a4:ec:ee:73:ba:fc:83:69:b1:0d:40:
dd:be:88:e0:26:c4:6b:ba:ee:c7:7b:2f:93:00:99:46:78:a3:
e2:e3:dd:c8:bf:fb:e0:ef:e1:3e:ef:30:92:a1:2e:0a:ea:70:
aa:8c:05:17:b9:b9:54:26:51:d0:1c:11:6f:4a:63:ed:df:79:
48:5c:79:44:24:87:bf:d8:c4:77:12:04:fd:2a:06:a0:a4:75:
b8:0b:fc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:20:47 2026 by rpki-client