Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier: WCD4+CiicC4SHOYgStpIYCgqb2eSLF9bQ89A7dHYgdY=
Subject key identifier: D1:17:06:93:FF:E4:C4:50:C1:1F:43:47:B5:C9:AD:E5:8D:6E:BD:23
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 01A12C8E00233C75731F8E38C2ADC4D04620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number: 173B
Signing time: Sun 11 Oct 2026 20:01:05 +0000
Manifest this update: Sun 11 Oct 2026 20:01:05 +0000
Manifest next update: Mon 12 Oct 2026 20:01:05 +0000
Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: q2HtG+dO6P1MzPcU8a2mMrmdM92qi0pMArBPohig3EA=)
2: bPwyaBbJqcQN7JQtu51i9S9uIaM.roa (hash: SC7PxmBSPghpd6hjRs92LdR0jqsFurZFEwEHVN8gVC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:8e:00:23:3c:75:73:1f:8e:38:c2:ad:c4:d0:46:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Oct 11 20:01:05 2026 GMT
Not After : Oct 12 20:01:05 2026 GMT
Subject: CN=d1170693ffe4c450c11f4347b5c9ade58d6ebd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b8:2a:2f:72:f4:21:c9:40:60:b0:84:33:71:
d6:fa:3d:fd:0e:2a:4d:c1:37:4a:3e:97:ca:82:54:
a6:a1:45:47:1e:73:54:d5:74:96:00:5f:8f:fd:bb:
b4:08:62:6e:58:78:7a:24:59:7a:e3:bc:73:6c:ee:
a0:fa:cc:b3:70:b6:2c:5a:e9:8b:e2:ef:5a:94:18:
bd:17:f4:f7:e1:8e:39:17:04:52:9a:2c:08:2e:7f:
d8:7e:5d:48:9b:19:46:6b:4c:01:32:be:34:2b:a6:
06:58:fe:5f:af:08:fb:af:95:2d:eb:90:de:43:46:
9a:21:0d:23:67:4e:79:7d:99:53:67:fe:82:3c:2c:
c6:43:23:25:39:b7:b3:ce:98:6a:1f:8a:ad:a2:3f:
cc:98:6f:99:3f:e5:15:cd:f3:4d:0c:47:44:0b:e3:
69:86:36:cc:c1:3a:d6:0d:4e:68:d4:67:1d:e9:6d:
45:6a:e8:a3:b0:f4:9a:4c:41:70:1b:b3:c6:a1:b1:
e7:18:bf:a4:c5:0b:0f:dc:06:4b:fe:ec:1d:f0:8b:
6e:1d:b8:21:dd:68:39:31:d1:28:35:ce:c0:43:18:
b7:c3:6c:4f:d7:8b:b2:57:10:9e:d6:c1:d2:45:b6:
86:b7:8c:33:28:6b:9c:b2:ce:67:30:8d:ae:74:9d:
7b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:17:06:93:FF:E4:C4:50:C1:1F:43:47:B5:C9:AD:E5:8D:6E:BD:23
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:12:15:eb:fe:0a:ee:fb:46:71:0f:d7:22:9f:5e:3c:35:c5:
c9:35:88:24:76:9a:e2:a7:ca:69:50:9e:1d:7c:47:92:40:fd:
6f:d2:97:54:0b:f9:18:59:f8:7e:ab:27:59:da:01:5c:c2:ca:
2d:17:90:16:ea:61:66:15:54:9a:6d:94:9e:d8:2d:89:84:6b:
7f:25:02:a5:74:73:52:4b:61:0f:aa:9e:71:de:b1:ed:3b:8f:
19:eb:db:d8:95:2a:a7:c6:d4:a7:cf:6a:80:f4:80:93:21:3c:
90:ea:d4:44:62:c0:de:2c:bd:6a:6b:50:47:d6:a2:57:8a:d3:
d1:96:89:e1:89:9f:be:47:22:e0:40:62:9a:3a:03:ce:0a:d5:
93:b0:46:d8:18:db:d7:e0:9e:d7:d6:f1:1a:74:b6:da:4b:fd:
4b:3a:df:d4:fe:73:b9:53:50:6f:65:8e:83:5e:6d:b7:d8:27:
07:ef:b7:8e:7e:17:6d:90:2c:92:1c:ab:c5:f3:c1:09:34:61:
a8:27:f3:bb:03:ba:72:e4:09:3d:ca:3f:a6:e4:04:72:6a:4d:
9b:c8:7b:d6:40:41:1a:54:6f:e6:9c:89:9f:87:84:34:2d:7b:
0f:ac:f0:70:4b:a6:ef:61:f4:1c:37:0a:c3:9f:c8:98:6d:5f:
c8:8d:e8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:13:27 2026 by rpki-client