Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
File: K5KAl9yfiaejqKKWp4pPnQy84X8.mft (raw, json)
Hash identifier: Kd2DsoMaO8s6lZgHQ1p8ZVA/71zPc9w4Up29s6wSAKo=
Subject key identifier: 73:1A:6F:A1:50:E9:A3:24:74:52:BA:F0:31:EB:55:AE:E9:4F:7A:32
Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Certificate serial: 019D254CD3E7C9245BCED0AA25E33BF18B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
Manifest number: 1890
Signing time: Wed 25 Mar 2026 14:01:25 +0000
Manifest this update: Wed 25 Mar 2026 14:01:25 +0000
Manifest next update: Thu 26 Mar 2026 14:01:25 +0000
Files and hashes: 1: 3jD0YcizeH8Q1qV2NEPg7xq78Tc.roa (hash: 52GkghurYXZlBw/P3re6oL3xnNmHYgWQ/XfBpyrLrd0=)
2: Ecy3CFSnUwOKhmhjKk6r9oZmrgU.roa (hash: XtcTVzHETxkCw8mwBAqZHbUKLVnvKh4s/PETyzl7Dqc=)
3: H8kw6Sg_EEFlV4WiqGHQYPzK8jI.roa (hash: vA9KgFsuau17xYabkQq0t4vvihSWAC35OyURHBxCae8=)
4: K5KAl9yfiaejqKKWp4pPnQy84X8.crl (hash: Xh2riW1OsoUlWY6MmG+qcF1cbunNKEuTjUeinKMXMGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:d3:e7:c9:24:5b:ce:d0:aa:25:e3:3b:f1:8b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f
Validity
Not Before: Mar 25 14:01:25 2026 GMT
Not After : Mar 26 14:01:25 2026 GMT
Subject: CN=731a6fa150e9a3247452baf031eb55aee94f7a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:46:83:62:0c:9f:96:6a:de:75:4d:2f:a0:
d1:66:7a:66:55:47:1f:8e:62:ca:1a:ac:a1:b5:28:
44:4a:c0:d6:67:54:d0:2c:7b:f5:f2:3e:eb:a0:c0:
0d:d2:50:a5:a6:7a:66:38:bf:4a:46:5b:de:b8:83:
13:d3:83:fb:c1:25:75:08:84:a0:5a:47:e1:21:b6:
17:4b:ae:75:df:bf:0f:32:15:32:d7:a5:8d:b9:59:
30:07:63:1b:ca:67:48:37:44:40:1b:7f:c6:16:45:
3d:4f:69:c4:7b:b4:43:c9:03:3f:0f:57:f9:42:f5:
23:a8:49:5b:99:b5:99:dc:b9:58:14:1b:49:14:f4:
3f:9f:8d:24:55:47:47:1f:36:f3:7b:56:91:b1:10:
ee:a1:09:c5:9c:6f:da:fd:96:80:19:0b:77:0e:07:
21:cd:32:70:79:cd:a6:56:da:aa:95:2c:eb:be:02:
bd:de:eb:1c:95:6d:b8:a8:0d:47:c7:52:f6:dd:2f:
8a:5b:5d:29:f8:65:b8:6b:ed:77:4e:7b:36:00:23:
98:bb:e3:b3:f8:da:22:ac:4b:7b:b4:9e:77:9a:94:
99:cf:02:47:0b:87:41:ae:84:d6:b0:01:f2:97:10:
2c:cf:8c:95:2d:94:18:2f:af:1d:5e:b7:db:80:c1:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:1A:6F:A1:50:E9:A3:24:74:52:BA:F0:31:EB:55:AE:E9:4F:7A:32
X509v3 Authority Key Identifier:
keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7d:2f:b2:bc:76:66:64:0a:31:75:b7:3e:ee:ad:28:51:bd:
77:76:2f:c7:b1:19:2c:36:4b:45:4f:f4:a2:4c:bf:fa:fb:5a:
99:f8:4e:fe:3a:e6:f2:87:39:3f:d9:9a:c3:0a:21:22:b1:df:
b4:c3:0f:91:a6:13:cf:12:9c:b3:83:d1:f2:ff:a3:15:d0:09:
d5:f7:9e:0f:76:26:d1:5e:f8:6c:21:36:50:f5:b3:07:72:a3:
1d:78:30:27:a8:a5:6b:4c:f7:51:06:06:ae:02:01:ea:19:c3:
4b:5b:34:19:8a:89:9a:5e:8b:79:fb:d3:f9:9f:28:03:c2:5b:
86:47:cf:b8:c7:43:7e:fa:d8:41:1f:00:62:b6:b0:eb:9b:56:
0e:e8:89:30:fd:d8:4c:74:81:51:3a:43:7e:17:f2:8a:75:6b:
82:8c:aa:9b:c9:a0:06:45:9f:73:a9:ad:39:4e:a0:e6:19:2e:
9a:1b:b3:1f:c5:41:dc:83:02:73:eb:e3:7d:28:ea:de:81:b6:
9d:c4:d2:77:3e:5c:f0:bc:68:e6:52:c6:3b:2c:84:15:99:b6:
7a:bc:b7:b7:87:62:52:bf:a6:92:e1:78:53:7b:92:64:8d:09:
a4:3c:fc:87:e9:04:0b:9a:ce:7a:57:0f:02:a4:c7:34:f2:65:
e3:d4:6f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:32 2026 by rpki-client