Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier: yTbWxtN3smM9OZbqa+RcGS/iJOzLMaJjYanr/pvgGAI=
Subject key identifier: AF:6C:14:38:7D:CF:3F:44:AC:6B:66:B5:E8:8B:53:3B:14:CA:FD:0D
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 019E205A230B35D0382C6B1447403D8C9DE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number: 15A7
Signing time: Wed 13 May 2026 08:00:38 +0000
Manifest this update: Wed 13 May 2026 08:00:38 +0000
Manifest next update: Thu 14 May 2026 08:00:38 +0000
Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: aGo4Qf8DalAmMpjTB54U7eXPZx/LJ7oGAcaURGNHYbA=)
2: bPwyaBbJqcQN7JQtu51i9S9uIaM.roa (hash: SC7PxmBSPghpd6hjRs92LdR0jqsFurZFEwEHVN8gVC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:23:0b:35:d0:38:2c:6b:14:47:40:3d:8c:9d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: May 13 08:00:38 2026 GMT
Not After : May 14 08:00:38 2026 GMT
Subject: CN=af6c14387dcf3f44ac6b66b5e88b533b14cafd0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:6d:e2:31:09:bd:b9:05:40:ef:95:b0:c9:09:
00:38:a4:75:a2:3a:09:58:89:38:74:04:06:91:7a:
6b:d7:7d:d9:47:15:34:14:28:55:5f:48:82:2c:0e:
7e:df:5d:60:f9:cb:c2:6e:6f:35:ec:a7:cd:41:e7:
07:6a:8f:a7:e9:ba:61:72:d6:3b:3c:b2:70:8d:a5:
a3:2f:ac:7e:29:54:4e:ae:07:c7:3c:ef:51:47:74:
85:24:04:57:c7:6c:e1:eb:38:11:fc:aa:b0:fe:6f:
36:75:a8:bb:2f:1a:9f:01:08:32:9f:7d:15:02:1f:
af:94:2d:f3:6e:8b:c5:30:7c:e5:d4:e2:e3:2d:39:
54:61:09:6c:28:ea:09:fc:72:ff:ae:b4:3a:5c:eb:
0b:9d:6e:94:6e:89:9b:d3:01:ac:45:44:d8:ce:e4:
19:f7:ec:e9:87:61:d2:da:2e:a5:d9:c6:58:49:32:
ba:7c:ae:41:13:24:2d:f1:6b:0d:a3:36:5a:d6:98:
06:e4:a0:47:3f:31:a0:d6:20:ab:01:85:3b:4d:58:
df:b2:10:e9:a0:21:6e:fa:fa:e2:ce:77:1d:00:36:
42:23:b0:a8:1a:80:d3:a7:3f:49:8d:d8:19:72:ea:
2f:fb:3e:ff:bf:bc:df:d1:8b:62:7e:2a:6a:48:b8:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6C:14:38:7D:CF:3F:44:AC:6B:66:B5:E8:8B:53:3B:14:CA:FD:0D
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7e:be:4f:fa:4b:a7:6f:56:83:3f:fa:b8:9c:ab:f2:05:a9:
5d:50:d5:87:03:7b:e0:35:89:7e:ef:b3:b0:f7:1e:0f:2f:2f:
97:84:78:72:1c:68:11:00:82:98:6e:cf:22:49:bf:87:55:a9:
8e:90:3b:78:8c:d3:9b:55:8e:ea:fb:91:1d:8a:ba:70:d4:c1:
42:e7:3a:21:0c:42:18:7e:94:d4:33:40:4c:11:ec:6a:a3:6c:
24:f9:a3:02:92:dc:86:06:65:30:4a:33:55:a1:09:49:9e:03:
f5:3f:c0:49:e8:87:ae:57:90:80:31:16:44:29:0c:9f:a2:b8:
18:e0:c3:ac:2b:b7:39:88:25:00:66:55:17:48:90:dc:0c:1b:
9d:33:ef:12:86:79:f5:f7:2a:85:ce:d1:47:56:7b:76:3a:16:
b4:04:21:74:ee:ec:8e:d4:d9:e6:c4:30:6e:12:05:5f:08:04:
72:90:9f:97:91:07:76:a7:ab:5e:a5:9c:eb:0e:f8:bf:ed:a4:
91:11:9f:bc:56:b3:ce:6f:6b:a9:27:2e:e8:11:78:ec:a4:d4:
93:f7:a1:2f:f3:8f:01:b2:a8:a1:05:d6:6b:ea:50:86:54:57:
d9:10:e6:bf:c3:9e:49:83:52:94:43:fc:2e:af:49:8c:32:43:
cf:90:56:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gWiMLNdA4LGsUR0A9jJ3gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZWNlZjk0M2QzNGM4MGUwYTBmZDgxNDI2ZTYxMzZiMzE1
MDhmZWUwHhcNMjYwNTEzMDgwMDM4WhcNMjYwNTE0MDgwMDM4WjAzMTEwLwYDVQQD
EyhhZjZjMTQzODdkY2YzZjQ0YWM2YjY2YjVlODhiNTMzYjE0Y2FmZDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm3iMQm9uQVA75WwyQkAOKR1ojoJ
WIk4dAQGkXpr133ZRxU0FChVX0iCLA5+311g+cvCbm817KfNQecHao+n6bphctY7
PLJwjaWjL6x+KVROrgfHPO9RR3SFJARXx2zh6zgR/Kqw/m82dai7LxqfAQgyn30V
Ah+vlC3zbovFMHzl1OLjLTlUYQlsKOoJ/HL/rrQ6XOsLnW6Ubomb0wGsRUTYzuQZ
9+zph2HS2i6l2cZYSTK6fK5BEyQt8WsNozZa1pgG5KBHPzGg1iCrAYU7TVjfshDp
oCFu+vrizncdADZCI7CoGoDTpz9JjdgZcuov+z7/v7zf0YtifipqSLhlhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9sFDh9zz9ErGtmteiLUzsUyv0NMB8GA1UdIwQY
MBaAFCvs75Q9NMgOCg/YFCbmE2sxUI/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEt
NDQ5MTI0YWNlMDI2LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEtNDQ5MTI0YWNlMDI2
LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPn6+T/pL
p29Wgz/6uJyr8gWpXVDVhwN74DWJfu+zsPceDy8vl4R4chxoEQCCmG7PIkm/h1Wp
jpA7eIzTm1WO6vuRHYq6cNTBQuc6IQxCGH6U1DNATBHsaqNsJPmjApLchgZlMEoz
VaEJSZ4D9T/ASeiHrleQgDEWRCkMn6K4GODDrCu3OYglAGZVF0iQ3AwbnTPvEoZ5
9fcqhc7RR1Z7djoWtAQhdO7sjtTZ5sQwbhIFXwgEcpCfl5EHdqerXqWc6w74v+2k
kRGfvFazzm9rqScu6BF47KTUk/ehL/OPAbKooQXWa+pQhlRX2RDmv8OeSYNSlEP8
Lq9JjDJDz5BWlA==
-----END CERTIFICATE-----
Generated at Wed May 13 16:01:51 2026 by rpki-client