Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
File: K0q0wVF_cy34suyD3krSNo1Fz98.mft (raw, json)
Hash identifier: rUTYKrGqFpoN3m4wD0Q25hwIqNZcSiAcsvpNlaBcrSo=
Subject key identifier: 3A:F5:8B:15:17:D3:5C:DD:59:FE:5A:29:EE:5C:05:4D:33:4C:0F:37
Authority key identifier: 2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
Certificate issuer: /CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Certificate serial: 019D284DAACC2348206715BCA4A3820CC117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
Manifest number: 1760
Signing time: Thu 26 Mar 2026 04:01:11 +0000
Manifest this update: Thu 26 Mar 2026 04:01:11 +0000
Manifest next update: Fri 27 Mar 2026 04:01:11 +0000
Files and hashes: 1: K0q0wVF_cy34suyD3krSNo1Fz98.crl (hash: KkyffjNE+ak83P46/UvLqFs9GZpJu1sEciHxQX16t6M=)
2: wtRGbtfLMxnElaTSLfs0-HNZBr4.roa (hash: K9c87c2YTSSv0jFPr/9LcJtSSXghKUVoycOdYeNEeGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:aa:cc:23:48:20:67:15:bc:a4:a3:82:0c:c1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Validity
Not Before: Mar 26 04:01:11 2026 GMT
Not After : Mar 27 04:01:11 2026 GMT
Subject: CN=3af58b1517d35cdd59fe5a29ee5c054d334c0f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:ff:ab:5d:75:6b:91:cc:54:ff:9e:6c:1f:
25:c0:fc:c4:c6:64:1c:63:6a:78:31:a1:a6:e5:c8:
21:85:02:ad:9b:ad:d6:ee:d0:29:80:30:4c:44:4d:
c9:20:62:74:03:d8:15:4d:14:17:bc:67:b8:a3:bc:
7c:96:1d:7e:02:8f:57:44:d7:17:ea:22:1a:a1:3d:
45:aa:d7:36:69:ba:31:24:62:3b:cf:92:47:ba:ca:
84:82:a5:4a:aa:13:66:4f:44:4c:0d:66:20:e7:ae:
0d:cf:74:6d:bc:4f:a9:97:21:aa:40:ac:b1:ef:f6:
c9:a1:52:a7:28:d0:4d:bc:75:32:aa:3d:59:6d:43:
91:72:0d:3f:91:6a:fb:2d:64:d2:f1:63:2a:79:bd:
27:05:61:7c:c1:eb:64:7f:6e:84:86:16:00:8f:54:
e0:b0:94:fc:5d:a4:f1:60:be:66:15:40:9c:78:cb:
d8:3f:7b:53:64:d9:b5:fd:05:74:10:9c:df:7d:54:
e0:c2:da:2f:27:3a:50:cd:f4:36:6c:12:86:0b:15:
ee:71:83:69:f9:bc:15:62:42:a2:97:2c:79:4e:85:
13:3f:42:fc:0d:88:f4:39:9b:15:5f:18:43:8b:3d:
83:d1:2a:10:ee:51:70:c9:07:5f:2a:40:09:f9:27:
52:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F5:8B:15:17:D3:5C:DD:59:FE:5A:29:EE:5C:05:4D:33:4C:0F:37
X509v3 Authority Key Identifier:
keyid:2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ae:53:c7:ba:2a:6e:c9:92:24:68:e4:69:51:dd:24:a3:56:
31:a5:32:0e:86:88:8b:d8:ed:c6:e5:86:42:31:b6:a3:15:bf:
28:cc:b0:1d:ba:35:68:78:ef:31:a6:20:55:b1:fc:5e:26:bd:
5b:61:79:ad:f8:d1:d5:17:f7:94:a3:59:c8:7e:a2:9c:c3:cb:
fa:ba:95:39:34:ef:3a:09:57:a9:87:00:71:b3:22:c0:08:22:
58:4e:13:50:4e:c0:95:d9:13:f7:9c:2c:55:f9:86:82:e4:01:
ae:87:0e:4d:b2:ea:0e:78:ca:23:c1:e0:f1:39:9c:a8:a2:6b:
bb:2a:5b:25:64:58:b3:7a:8e:58:0f:b6:5e:6e:21:f3:db:00:
f6:37:3c:cc:28:e0:3d:4e:a6:37:97:99:05:0b:41:ab:5a:f8:
04:bf:54:e1:ca:53:f6:29:0f:e5:89:d3:3b:86:2c:d7:e0:a7:
83:de:3c:42:61:a5:a1:3c:c1:eb:dd:4f:44:8a:dc:c2:3e:6e:
74:b6:5c:e3:52:3e:d7:d9:f2:99:c8:db:ba:23:ab:06:b1:eb:
94:30:74:7f:af:48:22:a8:34:af:ea:4c:c1:27:db:17:83:f8:
83:ca:3c:f4:da:78:40:d3:7a:7c:6c:74:13:fe:6a:a0:a5:fd:
f2:f9:a3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:09 2026 by rpki-client