Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
File: k2BVYMsfU9aYunp4WwLySOoqLHs.mft (raw, json)
Hash identifier: KTFMALsjSVz08mD+uFnRdYe2efNuiduZkqWd0HYoK+I=
Subject key identifier: 2C:F0:4F:93:33:92:AD:18:CB:66:2E:24:60:79:58:D3:36:D8:44:0E
Authority key identifier: 93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B
Certificate issuer: /CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b
Certificate serial: 019D284E0AFC4B24588328F0CB5D1E118A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
Manifest number: 1642
Signing time: Thu 26 Mar 2026 04:01:36 +0000
Manifest this update: Thu 26 Mar 2026 04:01:36 +0000
Manifest next update: Fri 27 Mar 2026 04:01:36 +0000
Files and hashes: 1: k2BVYMsfU9aYunp4WwLySOoqLHs.crl (hash: Bq6joaMaQLHexuft5cevTXZjeSEU+/aHXB6XEaN95ZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:0a:fc:4b:24:58:83:28:f0:cb:5d:1e:11:8a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b
Validity
Not Before: Mar 26 04:01:36 2026 GMT
Not After : Mar 27 04:01:36 2026 GMT
Subject: CN=2cf04f933392ad18cb662e24607958d336d8440e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:ba:2e:76:4e:8d:bf:57:76:cb:8e:c5:87:
a7:11:84:e8:6e:d6:b9:32:76:4d:01:e8:3c:b7:01:
eb:a0:86:f0:18:3b:43:bc:1a:fb:29:8f:dc:af:40:
66:cb:3e:f0:4a:bb:a6:d1:65:f4:41:3d:07:ca:94:
ee:32:b8:d5:8e:3f:62:8a:4d:66:62:ae:ec:3f:b4:
a1:04:b7:1a:fc:16:75:d1:06:01:74:a0:c0:13:6c:
ad:10:76:73:8f:de:40:9f:3a:5e:11:c4:aa:1f:d7:
9d:a6:fa:a5:6c:1c:e7:48:72:e5:f8:c9:14:1b:b1:
d0:5b:bc:7c:fb:1a:50:f5:79:00:f5:e3:fc:0c:18:
e2:63:65:67:97:79:67:58:8b:39:75:3c:6d:7b:b3:
0b:1a:79:6c:62:3e:2d:e9:6f:0c:c5:84:31:c7:ab:
2b:68:63:a8:8e:5d:13:af:ca:20:21:01:10:5a:b1:
f5:8c:63:37:f6:52:76:22:b3:fb:72:9b:d5:4d:7d:
67:a1:5d:00:c7:5b:f6:68:ad:e9:95:ca:ff:f7:77:
57:0b:b5:9e:ae:3f:ef:7a:da:20:c9:2a:11:ec:2a:
e9:b7:c9:86:af:29:1c:ea:a7:a2:90:65:65:fb:c0:
54:71:fc:14:60:e2:e1:aa:d5:50:23:70:8d:a2:3a:
2f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:F0:4F:93:33:92:AD:18:CB:66:2E:24:60:79:58:D3:36:D8:44:0E
X509v3 Authority Key Identifier:
keyid:93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a5:db:04:7c:ad:67:af:97:5d:ed:54:50:81:4c:16:e5:57:
47:c2:48:a4:53:e0:2c:de:c5:2e:7e:b9:0a:97:5b:7f:02:06:
80:30:e6:e5:cb:58:c0:40:eb:05:d6:c0:2b:1c:f1:b1:7a:9d:
3e:52:7d:b5:9e:56:65:da:c9:82:c3:c8:79:e4:9b:96:4f:d3:
15:f7:b2:ee:94:0f:8a:fb:fc:76:7b:c5:f5:fd:57:00:1e:e5:
d2:f0:3b:dc:92:3b:ec:12:48:20:1e:bb:65:8f:ec:d9:80:df:
f8:23:ed:e4:08:5e:42:9f:d1:00:d1:e4:72:c5:10:37:2a:1a:
1c:d1:19:f3:43:51:5d:9a:b7:f7:57:5d:4a:20:d9:a6:9b:4b:
03:08:de:b8:2b:89:84:f7:a6:59:90:e2:b6:ca:04:2c:f1:c9:
02:48:59:8a:cc:42:75:11:7f:cd:bd:15:c0:c4:03:02:47:6f:
2f:d1:33:68:e8:34:4e:4c:39:18:22:04:46:54:74:d7:d7:43:
3d:a2:c2:f2:ff:cc:99:7e:49:50:6e:82:2a:ab:03:56:b0:6f:
a7:66:13:ae:f8:88:1e:d8:ab:c7:7e:3f:23:7b:a6:ec:8b:9b:
7e:52:f7:ce:7e:22:b0:14:ab:e2:16:a3:34:f6:12:60:a0:70:
ce:93:0b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:54:53 2026 by rpki-client