Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: NwKzPXOgKu2WYo3K23mTBr+9JhPnZVdcB7YLD9Vlc6I=
Subject key identifier: 01:6C:8F:B9:C8:2F:C2:AF:22:72:FB:75:4A:E4:93:7B:B4:C9:C3:7F
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 019E1D5923E9B41B7E7EA5C134C2C7E27FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 18:00:41 +0000
Manifest this update: Tue 12 May 2026 18:00:41 +0000
Manifest next update: Wed 13 May 2026 18:00:41 +0000
Files and hashes: 1: 4o_tAUtgP-njAXhmOmcH5E-LEBE.roa (hash: fh84+EgF1SEM+SjNNhOt/IByRahwjmYLOKwI1U+RRhc=)
2: AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa (hash: qSJNJwwtc55ywmper0Gkw+bq36i69BmtauWb1Skowaw=)
3: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: Wha3R9hK4PJ7Y7577QISMfZY7UNbwcHwaC+4auWDdcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:23:e9:b4:1b:7e:7e:a5:c1:34:c2:c7:e2:7f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: May 12 18:00:41 2026 GMT
Not After : May 13 18:00:41 2026 GMT
Subject: CN=016c8fb9c82fc2af2272fb754ae4937bb4c9c37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:4b:78:9b:62:b0:41:8d:22:8d:02:e8:32:67:
47:ba:ba:9f:57:e5:fd:e6:bc:92:74:34:a7:53:e2:
70:b8:aa:d9:80:ea:ba:40:5f:17:de:70:d1:c8:2c:
2e:ba:ea:dc:3e:2f:0a:4f:c3:0f:01:85:02:03:03:
25:6e:70:99:11:33:4d:58:17:6d:66:10:62:85:79:
20:e4:2c:4c:3a:11:84:08:71:14:94:2b:90:73:9b:
be:66:25:cb:e9:75:0a:62:af:2c:4d:08:0d:e2:08:
70:4c:09:95:d9:40:e0:69:31:5e:8a:ab:a4:96:05:
cf:e4:e8:5b:fc:ad:18:44:64:ab:f6:cc:74:11:98:
53:ab:48:cb:9c:b8:22:61:b8:c0:c3:d9:f9:6b:8d:
1c:79:aa:c4:cd:ef:ff:1e:b2:d1:bc:a1:8b:60:e7:
93:9d:e6:c1:73:45:b2:ba:7a:21:3f:e3:e9:06:69:
d2:aa:60:a4:90:9f:77:10:f8:99:ef:19:9a:1f:cb:
84:f6:fe:bd:29:fe:78:f9:bc:ac:30:d7:be:00:46:
85:b9:86:55:8d:ff:d6:b5:65:4e:46:59:af:f2:55:
d1:50:a2:aa:f5:a9:0b:a7:ca:0a:5c:05:e2:bb:00:
dc:12:da:be:6a:b9:69:2f:a6:04:f0:3d:d3:d8:3e:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:6C:8F:B9:C8:2F:C2:AF:22:72:FB:75:4A:E4:93:7B:B4:C9:C3:7F
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:98:29:2f:83:e7:1a:c7:b6:0e:e0:ca:67:b6:bc:bf:57:c0:
00:ea:5f:85:76:1d:31:21:c9:83:9e:61:d3:88:8d:8f:0a:ab:
7c:38:86:85:88:72:7c:da:99:5f:31:4b:33:0f:2f:67:7a:11:
1d:bc:b3:2e:74:2e:3d:81:d2:0c:73:94:a7:99:af:ee:32:36:
43:33:f9:bb:71:ee:c7:dc:8c:17:b3:8d:ab:a4:0a:76:1c:02:
e8:8a:d5:96:7f:9d:b2:3d:65:2a:56:e9:a1:38:6c:ab:a5:a2:
4e:e8:67:0a:0e:bf:b0:65:6d:66:ce:60:de:df:8f:9f:d5:fc:
38:91:ea:95:a9:e5:7f:bd:5c:83:83:14:89:d4:14:4d:c5:ae:
73:e8:3f:f4:92:49:b5:72:dd:19:27:95:07:9b:ed:71:11:c7:
76:3d:1c:0f:c0:10:5f:d7:51:ef:aa:cd:ad:5d:7b:fb:de:96:
a8:27:26:8b:2e:c9:7c:0d:ce:81:42:f3:9b:44:d8:67:22:dd:
33:ae:72:b1:d7:d9:00:68:7b:ee:f2:73:a6:88:e0:e4:ee:15:
79:b5:b2:10:53:53:10:86:90:35:48:a9:9f:9f:f7:4b:ca:7a:
89:d4:f1:9d:29:f4:9c:db:c1:84:8b:94:68:11:d8:16:e1:0c:
94:65:fb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:03:29 2026 by rpki-client