Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: x5OnUxoVJKRmjDGCRF8hQEEpJMJO5DnV2NJH3RqcMpI=
Subject key identifier: FD:BC:75:6D:73:FD:C5:CB:0C:58:55:62:2C:92:B4:A2:1D:F9:20:2A
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 019D273ACE4A495C8DB565EE21EEA2BDA878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 188A
Signing time: Wed 25 Mar 2026 23:00:58 +0000
Manifest this update: Wed 25 Mar 2026 23:00:58 +0000
Manifest next update: Thu 26 Mar 2026 23:00:58 +0000
Files and hashes: 1: 267NH16MzH47Zyj0K4t3Pr0uSro.roa (hash: mBBDPMXvF9insE4ynTzv2acZX93bp3bRK4WTLefzCSs=)
2: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: XsmYIUmSWCrlSyieqMcrUcgpoM65LSAbpgHjpZ8RhdY=)
3: Z6WV7_CviDtB4kK9RFUQZEfsld8.roa (hash: uV2rBVJavJc5cr+4rj8cgx9FhZFkKhWrOhtApw2SKC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:ce:4a:49:5c:8d:b5:65:ee:21:ee:a2:bd:a8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Mar 25 23:00:58 2026 GMT
Not After : Mar 26 23:00:58 2026 GMT
Subject: CN=fdbc756d73fdc5cb0c5855622c92b4a21df9202a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:54:bd:27:cf:1d:58:b5:37:18:2f:56:59:
3f:44:c2:f5:6b:a2:0e:ed:d0:0b:9b:33:79:e3:b4:
86:09:dc:7a:3e:d0:6c:3e:0e:bd:56:82:03:04:ad:
06:82:30:d2:74:ae:34:50:ef:3f:e4:0f:fe:9d:f6:
c3:70:51:3b:1a:b2:ef:b6:c5:d1:e9:8e:87:90:b5:
38:99:0c:3a:76:7a:ef:08:08:c1:b6:2e:d6:86:18:
67:0f:a8:25:b6:e9:dd:86:fc:34:7d:b5:66:62:0d:
62:fd:29:cd:f2:a6:0a:37:d9:b3:e2:4c:6e:1c:b9:
35:e8:59:53:0c:f9:b6:93:8a:64:32:f6:5a:1f:c3:
6c:26:d5:4e:b9:40:66:b1:51:46:82:a7:a7:7e:12:
4a:04:bb:8b:3e:cf:fe:cb:98:57:ad:a4:5b:42:80:
ca:ea:db:b9:43:78:47:f1:2b:7e:75:39:ff:63:fa:
83:71:25:af:e4:68:46:f8:96:ad:6e:1b:7c:c1:1d:
63:26:a8:70:b8:71:15:35:7c:86:0d:53:39:e6:8f:
87:10:d9:7c:90:9c:6e:b5:4f:44:5b:c8:8f:08:5e:
ba:c7:c9:8c:40:51:96:2e:ea:00:f1:65:23:80:56:
fa:0b:27:60:af:0b:ec:77:13:19:43:08:f8:76:b8:
f1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BC:75:6D:73:FD:C5:CB:0C:58:55:62:2C:92:B4:A2:1D:F9:20:2A
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:91:a3:d5:f3:e4:fb:b8:17:f1:74:b4:42:ae:0b:fb:e3:c4:
c5:93:2f:92:ff:96:40:3a:db:01:86:6c:c6:49:f5:8e:75:bd:
79:b1:a0:ce:66:96:d7:4d:0a:52:a5:6c:d0:81:ba:c9:ec:7b:
36:cd:90:bf:5c:bf:b0:75:14:9f:43:cc:2e:60:42:7b:34:45:
28:8f:8b:e0:35:4a:d2:12:09:e4:50:98:31:94:78:42:8e:ae:
56:14:27:f1:2b:72:4f:8a:73:59:37:71:bf:83:95:b2:01:d2:
65:ea:f9:6b:e5:9c:24:91:be:fa:1a:5f:53:c7:9d:ba:c0:f5:
10:be:bd:33:6f:c4:8e:2c:68:ca:d2:f4:4d:8c:af:2b:55:6d:
c6:05:f4:d4:72:2a:df:26:b7:7c:f0:c7:14:91:04:71:45:4b:
04:1f:6c:48:7f:d6:a8:31:3b:51:3d:a0:2b:d7:3a:91:4f:bc:
1e:3f:42:56:f1:e3:48:19:af:a3:d1:96:9e:35:68:b4:d8:25:
db:82:39:e7:f2:74:9d:7e:b4:83:e5:12:d5:d0:cf:72:f5:68:
80:a9:3c:58:bb:79:3e:c5:b9:5e:c2:11:f5:fc:3a:6a:fb:20:
9d:b0:c0:c0:3d:d9:2e:7b:c9:e1:aa:e8:55:6b:b1:09:d8:08:
53:6c:34:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:15:38 2026 by rpki-client