Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier: 5+tgedAeQEQaAfxgV9B5eKu0MbME7eTXnaYn3utQp2g=
Subject key identifier: C5:DE:A0:90:BB:72:7B:04:50:B4:A2:EF:90:AC:C3:BE:FF:B1:B9:E2
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 019D2B1708DAE9BA8AD65C5DA880584D6D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number: 1528
Signing time: Thu 26 Mar 2026 17:00:22 +0000
Manifest this update: Thu 26 Mar 2026 17:00:22 +0000
Manifest next update: Fri 27 Mar 2026 17:00:22 +0000
Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: ATQPo+ddi55wyw4BNw65R8l9YNzuvviTk3ng2i7zDPM=)
2: bPwyaBbJqcQN7JQtu51i9S9uIaM.roa (hash: SC7PxmBSPghpd6hjRs92LdR0jqsFurZFEwEHVN8gVC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:08:da:e9:ba:8a:d6:5c:5d:a8:80:58:4d:6d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Mar 26 17:00:22 2026 GMT
Not After : Mar 27 17:00:22 2026 GMT
Subject: CN=c5dea090bb727b0450b4a2ef90acc3beffb1b9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:d4:83:58:fd:22:ba:f3:1c:e1:21:b6:77:
33:31:65:37:bc:90:f7:7f:bf:05:c9:eb:4c:2d:c1:
00:fb:4f:a3:93:64:83:95:7a:ff:9b:7b:a6:70:63:
f6:9d:0d:92:dc:40:d6:88:fd:e1:24:f5:3a:9d:5c:
08:18:c1:65:aa:d2:59:9b:1e:5f:af:35:76:2f:de:
fa:88:a6:eb:bc:ad:a5:5b:94:b1:9b:9a:d7:47:55:
5a:ce:59:b7:c8:aa:99:ac:dc:22:4f:92:6b:d3:2a:
68:b6:b3:9c:96:36:18:47:05:80:e8:5a:c6:a8:48:
3f:b2:99:b3:de:5a:f1:0b:08:c3:e2:23:1c:7d:88:
6c:c5:e7:a6:4b:17:e2:38:ff:ca:bd:d9:35:b3:75:
bc:64:4d:d2:aa:1d:e1:f4:f3:6f:ef:64:78:d2:5d:
bd:9f:9a:53:47:a4:ac:a8:e4:e3:9f:f7:95:0b:28:
1a:ca:8b:a1:da:d3:6e:65:d8:ce:0e:e1:51:d1:54:
fb:1c:81:3f:1d:5a:c0:74:33:67:ce:e4:3e:aa:a3:
ce:7e:07:38:9b:50:e3:12:11:56:07:7b:3f:65:29:
cf:27:f1:6e:36:ea:26:0b:d1:46:c9:dd:97:af:08:
93:05:f5:79:8c:23:a6:30:e0:72:c4:4a:32:8e:a1:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DE:A0:90:BB:72:7B:04:50:B4:A2:EF:90:AC:C3:BE:FF:B1:B9:E2
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:61:3b:d2:fb:80:10:d8:08:0a:49:31:fc:93:1f:93:27:5e:
16:4b:85:66:87:a8:1c:f9:26:38:98:c6:f8:93:46:e2:f4:cc:
de:d8:b7:81:1e:65:46:19:bd:0a:82:cb:3b:4c:61:a6:79:95:
db:6e:fc:1a:36:bd:d7:cc:3b:01:ac:21:c8:c5:f7:80:db:e5:
0c:62:a2:2a:33:48:9a:7f:36:98:ff:dd:2f:63:a8:6d:58:06:
d0:1e:27:fe:75:ef:8d:c1:0c:9e:84:e8:91:1f:20:fe:e7:dc:
3f:cc:1e:59:d8:4c:c4:13:88:b8:fc:8d:54:c7:af:21:3b:8b:
ff:14:6b:17:f2:08:5d:fb:91:92:d8:24:90:b8:5a:39:bc:b3:
21:4f:81:96:ad:4f:18:82:a5:ce:aa:63:66:6c:7e:ae:cd:eb:
34:1e:44:f6:b3:71:ae:58:8b:9e:ea:02:4e:28:d5:65:fa:fc:
aa:fb:9a:1c:9e:ce:42:90:6c:2d:7e:eb:91:e8:f5:75:02:08:
67:ff:e1:0d:e8:5e:bc:e3:16:e1:03:ab:9f:65:f0:eb:43:c5:
7b:48:6e:d0:4f:60:2c:6f:a4:d9:20:fe:0f:c8:3c:cc:19:4c:
d1:1d:f6:b1:9a:71:70:3c:9f:ce:eb:b4:60:d6:17:02:b5:f0:
cb:6a:0e:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0rFwja6bqK1lxdqIBYTW1gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZWNlZjk0M2QzNGM4MGUwYTBmZDgxNDI2ZTYxMzZiMzE1
MDhmZWUwHhcNMjYwMzI2MTcwMDIyWhcNMjYwMzI3MTcwMDIyWjAzMTEwLwYDVQQD
EyhjNWRlYTA5MGJiNzI3YjA0NTBiNGEyZWY5MGFjYzNiZWZmYjFiOWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT3Ug1j9IrrzHOEhtnczMWU3vJD3
f78FyetMLcEA+0+jk2SDlXr/m3umcGP2nQ2S3EDWiP3hJPU6nVwIGMFlqtJZmx5f
rzV2L976iKbrvK2lW5Sxm5rXR1Vazlm3yKqZrNwiT5Jr0ypotrOcljYYRwWA6FrG
qEg/spmz3lrxCwjD4iMcfYhsxeemSxfiOP/Kvdk1s3W8ZE3Sqh3h9PNv72R40l29
n5pTR6SsqOTjn/eVCygayouh2tNuZdjODuFR0VT7HIE/HVrAdDNnzuQ+qqPOfgc4
m1DjEhFWB3s/ZSnPJ/FuNuomC9FGyd2XrwiTBfV5jCOmMOByxEoyjqFEqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXeoJC7cnsEULSi75Csw77/sbniMB8GA1UdIwQY
MBaAFCvs75Q9NMgOCg/YFCbmE2sxUI/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEt
NDQ5MTI0YWNlMDI2LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEtNDQ5MTI0YWNlMDI2
LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmE70vuA
ENgICkkx/JMfkydeFkuFZoeoHPkmOJjG+JNG4vTM3ti3gR5lRhm9CoLLO0xhpnmV
2278Gja918w7AawhyMX3gNvlDGKiKjNImn82mP/dL2OobVgG0B4n/nXvjcEMnoTo
kR8g/ufcP8weWdhMxBOIuPyNVMevITuL/xRrF/IIXfuRktgkkLhaObyzIU+Blq1P
GIKlzqpjZmx+rs3rNB5E9rNxrliLnuoCTijVZfr8qvuaHJ7OQpBsLX7rkej1dQII
Z//hDehevOMW4QOrn2Xw60PFe0hu0E9gLG+k2SD+D8g8zBlM0R32sZpxcDyfzuu0
YNYXArXwy2oOEQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 23:52:53 2026 by rpki-client