Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
File: K8J94IFvfguHpzPdMZkInlN_Jhw.mft (raw, json)
Hash identifier: O+WQgmvNA06jz5M5FcI4FmoXg/xbFvYaRVQ3xty0i8w=
Subject key identifier: 37:CF:79:33:CB:53:D5:A8:10:7B:0F:9A:AA:BF:D5:A7:13:6C:6C:43
Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
Certificate issuer: /CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Certificate serial: 019D26CD2052CD9E74235EF8FD130AEE744D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
Manifest number: 0E77
Signing time: Wed 25 Mar 2026 21:01:10 +0000
Manifest this update: Wed 25 Mar 2026 21:01:10 +0000
Manifest next update: Thu 26 Mar 2026 21:01:10 +0000
Files and hashes: 1: 834MSKGMZ57M-pHmOtnxmOs679Y.roa (hash: UkqP5BZI7xAVc7q2Wx7u9sbbq4cIz5WBnS1sWMLQ5HE=)
2: K8J94IFvfguHpzPdMZkInlN_Jhw.crl (hash: p0872wMtDq769aDqjAsRWFvyf4QvPr9TK7Zta7anCOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:20:52:cd:9e:74:23:5e:f8:fd:13:0a:ee:74:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Validity
Not Before: Mar 25 21:01:10 2026 GMT
Not After : Mar 26 21:01:10 2026 GMT
Subject: CN=37cf7933cb53d5a8107b0f9aaabfd5a7136c6c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fe:09:e8:54:57:e8:35:bb:f2:90:11:28:52:
e2:0c:78:b9:c4:5b:73:08:dc:0d:1e:32:d0:f6:fb:
66:57:83:64:e4:00:9f:05:1f:52:e3:87:ac:13:af:
28:ab:dd:e6:74:41:7e:5b:60:e3:df:0a:d4:8c:ff:
ef:bb:26:15:08:03:08:b5:bd:f2:4e:eb:79:23:88:
13:a6:f4:2e:3d:68:79:e3:ef:bb:76:6f:83:ea:98:
ed:2b:65:c0:a0:7c:b3:0b:25:50:ed:b5:38:d2:41:
71:62:f4:40:bc:3b:28:f4:dd:69:ca:bc:f8:88:0a:
10:1e:10:ec:e0:7d:e2:80:96:c7:34:db:73:65:c5:
5f:53:1a:d0:f6:dd:a3:96:bb:20:10:25:60:78:77:
9b:fc:55:58:0f:be:91:75:d7:05:13:25:9b:d6:c5:
36:45:93:60:af:4d:ae:81:8b:f3:50:8a:cd:24:e4:
28:c6:e2:56:fe:ff:9a:2d:9c:e5:b9:da:fe:ff:69:
f5:a9:68:67:03:e5:d1:ad:ba:c5:32:53:85:a1:a2:
e1:78:f1:fa:1e:ae:d5:92:57:0e:09:09:c4:7e:61:
bb:ab:5e:e0:33:8e:3e:b5:79:60:44:3e:45:c0:a2:
74:cd:bb:96:eb:f7:de:14:2d:b9:6f:6a:d4:3f:54:
9d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CF:79:33:CB:53:D5:A8:10:7B:0F:9A:AA:BF:D5:A7:13:6C:6C:43
X509v3 Authority Key Identifier:
keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5a:a2:b4:d0:2f:ab:30:33:7b:0f:eb:cb:90:8d:48:84:c3:
9a:0a:57:2e:6a:11:07:77:88:f0:df:dc:5a:ae:3e:84:e1:96:
48:88:f2:5a:15:0d:ea:bc:b0:4d:fd:1a:7e:64:fa:be:17:c5:
6c:bc:d8:0a:b5:7a:21:31:df:0e:02:ea:fc:9c:c9:b1:cd:d6:
ae:dd:29:a8:dc:c2:8c:2f:7f:3b:06:7a:cb:e0:ec:a7:e5:9e:
42:fd:dd:a6:ba:2b:1f:de:bf:38:85:2d:d7:87:75:fe:4b:bd:
4c:00:9b:10:7a:48:18:c1:bf:c5:8b:55:11:40:22:2b:eb:19:
8a:6b:fd:72:e5:ff:c3:6f:9a:e0:b5:68:d3:89:a8:4e:da:b3:
60:b3:2e:b7:9f:3e:ee:9b:c2:75:af:29:4b:7a:51:96:06:8a:
22:93:ab:fa:bd:d9:62:a2:49:87:b4:67:36:15:4d:3a:fc:e6:
06:bd:f3:6a:3f:01:11:11:36:a3:64:bb:d6:f4:67:6f:8f:ee:
eb:3d:fd:2d:36:cd:84:d4:e1:f1:fa:0b:5b:64:01:14:a0:87:
21:83:56:e5:83:a8:47:43:d4:f1:ba:a0:27:7e:d9:0e:f1:84:
f9:16:fc:8a:c0:47:94:43:3b:76:07:b1:0f:c9:95:f2:ef:7b:
45:6b:7f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:53 2026 by rpki-client