Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.mft
File: K1iJW-74e1UDAHkRLUqxfZPJiiA.mft (raw, json)
Hash identifier: J9dLIgxHIw3tHpF9hrxAOZ1u2BDkbQ613kp+1pm9SrI=
Subject key identifier: DD:71:67:17:9C:D5:D3:DE:C8:F7:78:DB:5B:38:A9:34:58:F5:4D:AE
Authority key identifier: 2B:58:89:5B:EE:F8:7B:55:03:00:79:11:2D:4A:B1:7D:93:C9:8A:20
Certificate issuer: /CN=2b58895beef87b55030079112d4ab17d93c98a20
Certificate serial: 019D265F46B595C42354B1B7C46F731D537E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1iJW-74e1UDAHkRLUqxfZPJiiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.mft
Manifest number: 0151
Signing time: Wed 25 Mar 2026 19:01:11 +0000
Manifest this update: Wed 25 Mar 2026 19:01:11 +0000
Manifest next update: Thu 26 Mar 2026 19:01:11 +0000
Files and hashes: 1: A0WxIMRMNMclEvt4ndusa1g2IhE.roa (hash: szMuq8++oIkroMPNyvWtoJIXZcpNBA4TyVyyn0tkBCA=)
2: K1iJW-74e1UDAHkRLUqxfZPJiiA.crl (hash: 41OwRc++br768LsEvuEzk6xOFGS93InlrktpXIJEflQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1iJW-74e1UDAHkRLUqxfZPJiiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:46:b5:95:c4:23:54:b1:b7:c4:6f:73:1d:53:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b58895beef87b55030079112d4ab17d93c98a20
Validity
Not Before: Mar 25 19:01:11 2026 GMT
Not After : Mar 26 19:01:11 2026 GMT
Subject: CN=dd7167179cd5d3dec8f778db5b38a93458f54dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:63:c2:97:51:32:7c:27:ab:36:0a:4a:ef:05:
cc:30:b3:d2:00:e1:32:de:dd:65:e5:b0:43:b7:0d:
7f:b6:06:9b:85:e5:4d:b8:52:0b:38:b0:ac:28:dc:
8c:06:7b:d0:a0:f9:48:fd:53:f5:68:c1:c2:df:21:
a8:61:bd:78:5f:d3:f0:23:e7:48:cb:a9:ff:c4:32:
e1:35:80:18:a2:58:c8:0b:bb:e1:54:77:9e:9c:d2:
8c:3f:2f:a9:81:86:46:b5:23:d1:5f:80:7f:78:90:
7e:49:e1:63:b9:ed:aa:6d:d0:33:3e:03:5b:bb:48:
91:a9:e3:9f:4e:ee:84:2b:90:fa:15:b0:b4:d8:54:
41:0e:c7:27:e6:4a:77:a3:18:2a:d4:a2:3d:ca:a8:
46:cf:94:69:f6:94:ec:7d:2d:68:21:89:80:74:41:
d2:bc:7a:85:02:2b:d3:97:66:f5:fd:c3:17:ed:4b:
26:40:ca:cd:f5:3e:cb:89:20:fa:70:3f:e7:57:92:
0c:08:a9:e5:01:6d:50:f7:e2:99:9b:b5:09:4d:78:
d2:be:b9:72:a7:74:80:08:24:44:e0:77:6a:b2:b1:
be:65:6d:b1:14:fc:f4:25:b6:e0:36:6d:b9:9d:46:
b0:ca:a4:0b:f1:65:14:93:ea:5b:47:b9:9d:c9:cb:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:71:67:17:9C:D5:D3:DE:C8:F7:78:DB:5B:38:A9:34:58:F5:4D:AE
X509v3 Authority Key Identifier:
keyid:2B:58:89:5B:EE:F8:7B:55:03:00:79:11:2D:4A:B1:7D:93:C9:8A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iJW-74e1UDAHkRLUqxfZPJiiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b62a95-b43d-4f1f-8ef4-9a321ffc2eef/1/K1iJW-74e1UDAHkRLUqxfZPJiiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f4:d8:41:87:7e:25:4c:61:30:87:39:4e:de:75:4a:3b:ac:
1b:b0:f1:2c:e6:cb:7d:a5:96:e3:0b:5b:19:3c:7e:78:fe:6e:
76:e4:d1:8b:b2:38:21:2d:38:9e:ff:e7:0d:51:d3:f4:b4:81:
9c:ed:63:f5:fd:b6:18:65:e2:6d:d5:ca:51:41:0f:54:78:81:
e9:70:91:b4:df:d8:95:dd:23:c6:73:46:e1:d1:ca:a5:37:ee:
94:a2:e0:56:57:ec:93:e9:8d:00:8e:89:b4:bc:22:a7:1a:ca:
0f:a3:4d:f5:07:a9:9a:26:f1:a6:56:de:71:bd:96:92:98:1d:
e2:ea:75:fe:fb:2c:65:cd:c9:4a:ea:8f:9e:2c:b7:92:f3:15:
76:9d:ed:57:47:c1:4b:95:ae:7d:05:6e:4d:c0:d7:c7:c5:e9:
12:22:95:2f:da:9e:73:c3:f1:4e:73:0b:ff:7e:2c:ae:c1:5d:
7c:db:d9:2e:8b:40:ff:b4:54:f1:99:a5:81:56:49:0f:50:ed:
df:64:ce:54:15:88:1b:57:7d:35:ea:bc:68:ec:d0:83:75:41:
d2:39:ca:f1:9f:b9:34:a6:65:e7:1f:ca:f9:c7:17:be:03:fc:
96:68:aa:66:f0:5c:3d:4c:1c:e5:6e:44:50:b2:f7:00:11:d5:
57:97:55:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:45 2026 by rpki-client