Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/53322e-8f1d-4360-b57c-4e0edc0b6c03/1/K48k5lJG0L5YByBykxifXYAppfQ.mft
File: K48k5lJG0L5YByBykxifXYAppfQ.mft (raw, json)
Hash identifier: 6m4HsJU8dBrsZAiRWyLBsRZuwE3ucFsDlVPA56Y97o4=
Subject key identifier: ED:F3:40:52:DD:48:5C:85:33:DE:50:0F:92:0E:0F:6E:5E:D8:CF:60
Authority key identifier: 2B:8F:24:E6:52:46:D0:BE:58:07:20:72:93:18:9F:5D:80:29:A5:F4
Certificate issuer: /CN=2b8f24e65246d0be5807207293189f5d8029a5f4
Certificate serial: 019D25839054FFADC900DC0FC74A2C099C94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K48k5lJG0L5YByBykxifXYAppfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/53322e-8f1d-4360-b57c-4e0edc0b6c03/1/K48k5lJG0L5YByBykxifXYAppfQ.mft
Manifest number: 52
Signing time: Wed 25 Mar 2026 15:01:12 +0000
Manifest this update: Wed 25 Mar 2026 15:01:12 +0000
Manifest next update: Thu 26 Mar 2026 15:01:12 +0000
Files and hashes: 1: K48k5lJG0L5YByBykxifXYAppfQ.crl (hash: NzJLLoMBFpoAH3tdPji95nNqAkzDSTemWM4iMT21yG8=)
2: fc_oBt3ksZy1-BP6Dkye8KpPHo8.roa (hash: vA6SD77lZXiDgpAt8O2UHzAriPq10OkKEHZ3mdix25I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/53322e-8f1d-4360-b57c-4e0edc0b6c03/1/K48k5lJG0L5YByBykxifXYAppfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/53322e-8f1d-4360-b57c-4e0edc0b6c03/1/K48k5lJG0L5YByBykxifXYAppfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/K48k5lJG0L5YByBykxifXYAppfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:90:54:ff:ad:c9:00:dc:0f:c7:4a:2c:09:9c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b8f24e65246d0be5807207293189f5d8029a5f4
Validity
Not Before: Mar 25 15:01:12 2026 GMT
Not After : Mar 26 15:01:12 2026 GMT
Subject: CN=edf34052dd485c8533de500f920e0f6e5ed8cf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:ae:3d:e2:2e:f3:c9:eb:f4:ba:2d:7b:07:
49:aa:a9:e7:aa:4b:ad:23:ca:38:48:59:06:5d:41:
54:fc:09:31:65:26:aa:0b:65:67:23:22:42:86:ba:
b4:ff:81:78:d5:8e:93:b7:9f:b7:23:e6:47:bd:f2:
c1:39:c3:1d:24:76:84:02:cf:61:d1:b6:97:eb:c4:
17:2b:e9:e4:b8:86:56:e6:69:c8:3a:7f:52:1e:f5:
b1:5f:52:d6:1f:56:f4:39:ce:b6:ef:71:83:8a:c4:
4c:aa:18:32:a6:b4:d1:a8:50:69:fa:d9:b4:79:9e:
b7:5b:7e:01:8a:c9:28:24:4e:11:45:59:ce:d0:a8:
e8:b4:8d:52:ff:0a:07:5c:93:0f:a6:75:08:b4:56:
2e:25:80:9c:48:25:66:da:46:a7:f2:4b:0d:61:0a:
bc:13:24:d0:79:cf:d1:5f:57:0e:e7:04:28:b2:5f:
67:46:2c:30:42:a9:03:79:c7:7d:1d:34:b1:c6:b2:
43:92:d5:f9:f3:48:07:25:1a:31:37:86:99:10:3c:
31:00:5a:59:23:d0:48:c6:19:8e:f9:be:27:8c:05:
42:e5:56:fc:ad:6e:ac:ee:2f:3f:de:0b:c4:13:4b:
30:27:b5:34:d0:4e:0e:c9:0f:2a:f9:10:d6:e8:94:
bb:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F3:40:52:DD:48:5C:85:33:DE:50:0F:92:0E:0F:6E:5E:D8:CF:60
X509v3 Authority Key Identifier:
keyid:2B:8F:24:E6:52:46:D0:BE:58:07:20:72:93:18:9F:5D:80:29:A5:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K48k5lJG0L5YByBykxifXYAppfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/53322e-8f1d-4360-b57c-4e0edc0b6c03/1/K48k5lJG0L5YByBykxifXYAppfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/53322e-8f1d-4360-b57c-4e0edc0b6c03/1/K48k5lJG0L5YByBykxifXYAppfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:1e:a6:b9:4d:b5:e8:d4:1d:97:74:3b:70:35:e2:5a:f3:1c:
5a:cc:d4:d7:41:19:32:20:64:4a:c1:7e:b1:ce:a0:b5:14:62:
dc:55:14:1f:b9:6b:9c:38:f8:a9:c3:80:3e:9b:3c:21:b3:ff:
0a:3a:2b:39:f7:8a:a0:20:e6:7b:f5:4b:b2:a5:0c:0a:44:a7:
3e:fb:fc:ca:40:45:a5:ca:b8:2c:5e:9a:5c:34:d3:d3:d6:dc:
13:5e:7d:24:5e:9d:c1:14:e2:64:be:2b:d9:7b:7a:48:a9:b3:
cb:f9:ec:d3:a7:17:14:8c:72:19:eb:db:58:62:fc:14:5a:73:
eb:76:fa:1d:f5:0b:22:c7:81:bf:81:0a:4b:80:64:62:d2:90:
86:c2:d9:89:c4:8c:a4:b5:ad:b2:4f:91:67:f4:21:79:13:bf:
a9:6a:2f:f0:e5:36:a4:50:0b:d5:14:cf:bd:fa:8b:67:20:57:
eb:5e:9a:6a:e4:70:da:fb:9c:67:a8:14:ac:e1:c7:63:74:5d:
05:a9:a4:6a:3a:f7:d2:d0:65:18:f0:20:b8:fb:a3:13:6a:7f:
f8:9e:ea:52:93:59:30:98:03:90:47:24:b8:3e:3d:53:dc:17:
cf:05:8a:49:b1:89:71:e6:df:44:ae:5e:57:6f:ee:3f:e7:03:
09:bb:20:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:27:40 2026 by rpki-client