Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
File: K8wc-LjiEGa27GR2l9SUXY-bsFs.mft (raw, json)
Hash identifier: /N/wBHM6Hq0xb4FibQ+QARPdNzyEO6fxfJfrMTZm+0Y=
Subject key identifier: 3C:50:AD:AF:BD:0C:0E:EF:CC:AA:39:2D:9A:90:61:7C:72:E1:F3:9D
Authority key identifier: 2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
Certificate issuer: /CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Certificate serial: 019D28847BB1AF9509AC82B267422A0D78AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
Manifest number: 142E
Signing time: Thu 26 Mar 2026 05:01:04 +0000
Manifest this update: Thu 26 Mar 2026 05:01:04 +0000
Manifest next update: Fri 27 Mar 2026 05:01:04 +0000
Files and hashes: 1: K8wc-LjiEGa27GR2l9SUXY-bsFs.crl (hash: mO++uD80nmbwZEgwABnnLXNHyj/vaM1StfWjEIpvMZc=)
2: ZM57jrln1EaVHEwU5MBtcduC4e4.roa (hash: +8l3wG8lWR8TlssuoyNr7f8nQtvEX05fyS/cABW+fVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:7b:b1:af:95:09:ac:82:b2:67:42:2a:0d:78:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Validity
Not Before: Mar 26 05:01:04 2026 GMT
Not After : Mar 27 05:01:04 2026 GMT
Subject: CN=3c50adafbd0c0eefccaa392d9a90617c72e1f39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:24:4e:04:c4:60:fb:7c:13:da:bb:64:b8:5d:
f5:51:73:66:0e:e0:fb:a5:82:31:26:67:92:6a:61:
fc:97:6b:5e:09:5b:e0:a9:bd:2a:2c:2e:a9:47:ab:
0a:a8:8f:bc:da:06:e6:6a:49:14:fd:84:8d:c3:25:
31:1d:37:62:4a:96:64:85:7a:09:f7:22:5b:88:69:
64:30:ac:21:88:3c:88:66:b6:eb:ce:17:24:39:27:
05:92:13:4f:e1:74:a4:32:b6:d5:5a:92:de:a0:46:
f3:79:94:ce:aa:c7:98:a1:d5:cf:ee:39:29:10:5a:
6b:c2:5e:e1:a4:d2:0d:62:2f:f6:16:05:3c:09:76:
89:49:41:d2:c7:da:fc:ad:e5:36:4f:67:e6:5f:88:
04:e3:74:6d:2a:7f:8d:a4:61:d3:bc:b3:30:c1:32:
ac:2a:5d:ae:d6:35:15:eb:0d:02:db:4b:35:f7:bd:
df:56:e6:47:5d:a0:07:91:ff:ec:eb:b9:5f:da:7a:
6f:e9:31:e9:2a:a1:b4:20:82:58:29:dc:26:b3:37:
a0:a7:07:f1:89:c0:5d:98:c2:19:de:10:5a:ba:48:
d7:21:31:16:1e:c0:ad:bb:48:7e:81:91:de:21:76:
3e:3c:b3:07:20:77:a1:79:06:05:5e:fa:08:52:7a:
24:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:50:AD:AF:BD:0C:0E:EF:CC:AA:39:2D:9A:90:61:7C:72:E1:F3:9D
X509v3 Authority Key Identifier:
keyid:2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bf:09:b3:08:12:3d:5b:7a:8d:05:44:39:b8:a4:a8:ce:b4:
6a:f3:09:2f:1d:87:b6:27:f3:36:12:84:ae:5b:1f:3c:5b:c8:
a8:6f:d2:11:90:86:34:a3:56:8e:05:bc:c5:5e:eb:6d:44:14:
86:8b:a1:f5:fa:d4:e2:23:c1:6b:50:d1:75:0d:af:9a:38:9a:
2c:e1:13:f1:44:a2:94:47:41:5d:00:87:bb:14:00:42:32:93:
3e:99:fa:4e:e4:b9:a1:01:67:19:4a:99:3b:a6:0a:14:d3:ec:
91:2b:6e:f1:25:35:28:3e:2e:dc:1f:e9:35:e4:7e:89:23:04:
49:9c:ad:8f:cc:01:1e:98:f5:54:0d:bf:10:35:ce:a3:08:42:
ef:36:b6:0a:be:d8:02:88:65:22:26:db:ed:ab:cb:3a:4c:2f:
7b:ae:ed:32:e5:d6:15:71:2b:97:83:0f:16:73:8b:13:3b:47:
af:eb:f8:3e:f9:e9:ab:6b:d0:72:6c:ae:02:f3:3a:f1:01:37:
71:ab:49:d4:8b:b2:34:89:e8:ca:bd:e7:0f:b6:72:ad:57:e2:
44:9a:77:80:e5:9e:fa:82:d2:1a:7d:b0:2a:bc:56:5a:a2:0e:
0d:71:c5:a7:be:b9:82:32:90:04:63:fb:68:27:05:90:53:dc:
c5:db:ff:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:29:09 2026 by rpki-client