Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
File: K5X2grxtV338PBDs7icYOB_uOyM.mft (raw, json)
Hash identifier: XBKfPPdRTG/9T26Da0dmO4RpkkeIrrBeBZ3XGoW3zEU=
Subject key identifier: 00:67:2E:7E:95:42:28:D8:8F:C5:1B:4C:BB:E6:7E:2F:F5:4C:39:1C
Authority key identifier: 2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
Certificate issuer: /CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Certificate serial: 019D29609FF42F2D8399321546FE0BE48745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 09:01:31 +0000
Manifest this update: Thu 26 Mar 2026 09:01:31 +0000
Manifest next update: Fri 27 Mar 2026 09:01:31 +0000
Files and hashes: 1: K5X2grxtV338PBDs7icYOB_uOyM.crl (hash: gMfN6luuiEl9YGiNnMONS80e+IJIy5RoLZf0EM+YGpo=)
2: c289qpn3kfSqkxAic7Rhdy4xyoM.roa (hash: JY4yDIwrrSAVR6qr9xMoxwUu8BhoP0KRD9HYde2M8sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:9f:f4:2f:2d:83:99:32:15:46:fe:0b:e4:87:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Validity
Not Before: Mar 26 09:01:31 2026 GMT
Not After : Mar 27 09:01:31 2026 GMT
Subject: CN=00672e7e954228d88fc51b4cbbe67e2ff54c391c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:42:6f:e3:e9:e6:08:22:81:16:3c:52:9c:8c:
29:71:46:03:5b:3c:67:e2:23:30:a5:7e:ec:41:5f:
d1:73:50:a4:dc:d7:42:94:2b:86:f4:37:5f:89:e2:
64:2e:e1:d8:cc:65:31:e1:4e:5a:7b:ac:48:9e:eb:
29:4e:46:be:d2:46:33:e5:f9:44:32:55:a1:26:60:
34:26:94:3d:04:73:3d:5e:7f:a0:2a:5e:97:41:3f:
fb:02:6b:c3:a2:b8:41:1e:bc:f9:75:60:a1:c1:e1:
ec:52:94:3c:f9:b4:d4:51:c9:c8:42:12:72:99:76:
9c:38:ce:5f:ca:6d:8c:39:f8:ea:09:9f:f6:55:02:
ae:cf:e5:55:e3:f1:d8:e0:2b:75:a0:3a:01:5e:db:
51:8c:51:b1:b7:9b:ed:02:e7:de:a7:be:c0:fd:c8:
c8:5a:57:a4:c1:9f:bc:67:b9:08:e9:0e:68:c5:80:
c3:67:53:6c:b3:f1:a3:8d:fd:76:96:ab:db:7f:26:
2a:54:f9:66:0b:dd:b3:77:da:90:ac:e5:59:f3:66:
1f:3e:cd:5d:25:07:87:9d:02:d1:bb:01:c5:ea:69:
59:67:04:92:00:3c:fb:e7:52:3e:d5:ce:a3:f2:ea:
3c:f1:66:46:60:84:a0:20:1e:76:e5:34:09:8a:61:
3c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:67:2E:7E:95:42:28:D8:8F:C5:1B:4C:BB:E6:7E:2F:F5:4C:39:1C
X509v3 Authority Key Identifier:
keyid:2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b0:81:c4:58:0d:5c:ee:88:6c:02:31:cc:f7:e4:41:a4:6f:
5d:36:79:2e:7d:fa:13:6d:49:53:51:51:6f:9d:c7:5a:02:b6:
8d:cf:39:34:08:09:06:8d:a2:f8:10:38:3c:da:ab:ae:d2:8c:
3f:89:42:d3:1a:63:b6:3e:c2:59:15:b1:4a:c1:6f:60:44:cf:
e7:7b:b3:c2:ed:3f:ad:97:fc:35:2d:57:44:59:c2:1a:0f:44:
ba:1a:11:80:83:54:58:dd:5d:18:5b:8f:9a:e3:ff:c2:f4:d0:
9d:07:e8:b7:01:fe:49:40:06:2d:8d:59:21:bd:1e:e0:e8:62:
62:75:34:cd:39:74:78:8f:d7:5d:bd:ce:e1:c6:c2:49:59:2e:
1b:13:84:fe:86:e8:23:c7:03:72:f0:5e:9e:2f:e9:c6:b0:de:
ca:44:e8:82:11:1c:fc:00:9b:71:41:80:19:36:4c:e3:5d:ff:
0c:6d:fb:0c:de:bb:c1:00:e9:41:bf:59:29:05:80:b8:f0:d9:
28:68:6f:5f:6a:6a:b4:d2:1e:50:ac:f9:2f:e3:35:e1:43:e4:
76:b2:58:6e:f9:f8:28:f4:fc:dc:87:84:8f:0b:05:53:2e:76:
6a:12:ea:03:c1:7c:9b:bf:87:13:f2:5d:9c:2c:ed:ba:2f:22:
fd:c0:79:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:34:57 2026 by rpki-client