Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier: ohDMk3NraouItp8Q+tqASp7Xlx0T9/xpFP2qaSd7tm0=
Subject key identifier: FA:F9:10:88:53:27:0C:46:B9:84:A7:73:5B:40:BE:23:6C:55:EF:05
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 019D27E07259CF84C1F5E69468DCE01E9A46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 02:01:53 +0000
Manifest this update: Thu 26 Mar 2026 02:01:53 +0000
Manifest next update: Fri 27 Mar 2026 02:01:53 +0000
Files and hashes: 1: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: yKKOrmkE82p5rHsCyNE6xtqgrufbRvFixuSqvrvWlwQ=)
2: jW75sPmmFSuAByKBWvYaeRnFXOM.roa (hash: v2zg0sfjDzeH0JGU5ldDB2qU5wPCOcMy8diYca8w+d4=)
3: rYSG2dYjGVa3YG5opt3m2blLdDQ.roa (hash: 0jQGDr8z5IsaWt/3i/Wtvl19AvDMpjEhc4vCy+qWV/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:72:59:cf:84:c1:f5:e6:94:68:dc:e0:1e:9a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Mar 26 02:01:53 2026 GMT
Not After : Mar 27 02:01:53 2026 GMT
Subject: CN=faf9108853270c46b984a7735b40be236c55ef05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4b:e6:b8:79:30:f8:4a:0a:2d:98:b1:32:7c:
97:a1:95:35:7f:97:19:6d:fb:0f:b3:dd:84:a4:2b:
e0:b8:d5:05:f7:09:c4:9c:7f:18:33:16:2b:93:cf:
71:bb:08:c1:23:7b:ff:13:cb:07:f6:7a:86:91:98:
7a:e5:cd:d6:d4:2d:e8:48:8d:45:2d:6d:0d:fc:45:
7d:19:71:07:aa:b2:24:f4:c2:e8:ed:d1:80:b8:15:
08:4d:7f:87:4a:9d:8f:4b:23:f4:87:59:19:c5:38:
0a:28:43:b4:7f:80:93:5d:c8:25:09:58:33:37:e0:
56:5a:36:fb:23:ea:8d:bd:57:a3:59:6d:53:f6:48:
52:d8:68:d3:35:58:74:ee:26:26:86:6a:1b:f2:a4:
04:aa:2f:27:4a:d2:09:19:cf:ae:46:7e:28:7f:be:
47:1d:79:19:cf:24:d0:66:0c:13:44:98:02:62:de:
f9:f1:04:de:81:c3:a8:46:c9:06:15:6d:ac:15:f9:
0f:3d:f4:e1:6f:2e:7b:b9:1a:7c:31:71:3c:24:8a:
4b:f7:5e:1a:d8:c9:06:54:52:5b:82:d8:49:c9:71:
ec:6b:1b:ee:0d:b6:a2:54:08:6f:d6:29:26:3c:f5:
26:58:e7:a8:01:8b:83:1f:31:4c:82:92:c7:28:7b:
ae:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F9:10:88:53:27:0C:46:B9:84:A7:73:5B:40:BE:23:6C:55:EF:05
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1e:32:b8:56:3c:f8:10:02:0b:af:1c:9e:16:a9:30:c9:78:
34:b2:fc:5c:b6:3c:4d:c7:c2:7f:e3:aa:b4:e9:1c:50:d1:98:
ec:c5:15:25:9d:7c:55:53:7e:82:56:9d:9e:a5:c1:4f:51:9c:
90:8e:47:a1:0f:09:9d:16:e0:19:11:99:09:d0:8f:80:d0:af:
f9:62:03:da:37:af:20:ca:50:d9:b7:14:43:dc:94:fb:87:34:
98:b1:8b:c4:a4:62:42:b1:ff:6c:97:22:e9:15:ba:4f:d9:34:
bf:55:ab:6c:9d:9c:a7:1a:d0:b1:63:f6:90:ae:55:ee:4e:ca:
c1:08:7c:fb:e1:f3:ad:e5:08:e0:8c:42:be:18:a2:e1:9b:59:
5d:05:e4:65:6c:f4:51:86:95:15:0d:a9:f4:a3:52:3a:1c:19:
b8:ef:44:7a:d1:14:29:50:0e:8f:9e:6b:42:33:ee:12:5a:85:
d5:91:55:1f:04:5f:8f:61:44:df:76:1b:34:cc:35:5b:22:ea:
7f:7d:42:e7:ff:cd:b4:03:af:72:71:e1:5a:f4:ee:98:ea:e6:
3a:35:ba:73:df:e9:d9:fa:42:f9:03:f4:e1:77:03:ae:76:ef:
5c:93:03:c4:ee:2e:f2:f7:d3:bd:33:aa:f4:1f:64:a4:33:76:
43:d9:b2:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4HJZz4TB9eaUaNzgHppGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYjMzMDk0MjI5OGY3NTgyM2NiYjk4MGM4ZWIyYWNmMGI3
YzBjMWIwHhcNMjYwMzI2MDIwMTUzWhcNMjYwMzI3MDIwMTUzWjAzMTEwLwYDVQQD
EyhmYWY5MTA4ODUzMjcwYzQ2Yjk4NGE3NzM1YjQwYmUyMzZjNTVlZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0vmuHkw+EoKLZixMnyXoZU1f5cZ
bfsPs92EpCvguNUF9wnEnH8YMxYrk89xuwjBI3v/E8sH9nqGkZh65c3W1C3oSI1F
LW0N/EV9GXEHqrIk9MLo7dGAuBUITX+HSp2PSyP0h1kZxTgKKEO0f4CTXcglCVgz
N+BWWjb7I+qNvVejWW1T9khS2GjTNVh07iYmhmob8qQEqi8nStIJGc+uRn4of75H
HXkZzyTQZgwTRJgCYt758QTegcOoRskGFW2sFfkPPfThby57uRp8MXE8JIpL914a
2MkGVFJbgthJyXHsaxvuDbaiVAhv1ikmPPUmWOeoAYuDHzFMgpLHKHuu7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPr5EIhTJwxGuYSnc1tAviNsVe8FMB8GA1UdIwQY
MBaAFCuzMJQimPdYI8u5gMjrKs8LfAwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYt
NmIzYTQ3NjY3Y2E4LzEvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYtNmIzYTQ3NjY3Y2E4
LzEvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOx4yuFY8
+BACC68cnhapMMl4NLL8XLY8TcfCf+OqtOkcUNGY7MUVJZ18VVN+gladnqXBT1Gc
kI5HoQ8JnRbgGRGZCdCPgNCv+WID2jevIMpQ2bcUQ9yU+4c0mLGLxKRiQrH/bJci
6RW6T9k0v1WrbJ2cpxrQsWP2kK5V7k7KwQh8++HzreUI4IxCvhii4ZtZXQXkZWz0
UYaVFQ2p9KNSOhwZuO9EetEUKVAOj55rQjPuElqF1ZFVHwRfj2FE33YbNMw1WyLq
f31C5//NtAOvcnHhWvTumOrmOjW6c9/p2fpC+QP04XcDrnbvXJMDxO4u8vfTvTOq
9B9kpDN2Q9myew==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:11:03 2026 by rpki-client