Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: rSkWb0F5AaD4JI7pEiVNzXAwoWe/d/yaiBDvDqRtyK4=
Subject key identifier: E5:A8:1A:A2:2A:60:80:66:B1:64:18:7D:8D:61:09:88:6E:AA:01:AF
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 019D2816D6195D19C0A9BFD5DCCE8A9E72C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 03:01:18 +0000
Manifest this update: Thu 26 Mar 2026 03:01:18 +0000
Manifest next update: Fri 27 Mar 2026 03:01:18 +0000
Files and hashes: 1: 4o_tAUtgP-njAXhmOmcH5E-LEBE.roa (hash: fh84+EgF1SEM+SjNNhOt/IByRahwjmYLOKwI1U+RRhc=)
2: AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa (hash: qSJNJwwtc55ywmper0Gkw+bq36i69BmtauWb1Skowaw=)
3: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: 2lJsrGAglZyu5DHTfS9tqEy+gVohb+WcWWMG+BgLcCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d6:19:5d:19:c0:a9:bf:d5:dc:ce:8a:9e:72:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Mar 26 03:01:18 2026 GMT
Not After : Mar 27 03:01:18 2026 GMT
Subject: CN=e5a81aa22a608066b164187d8d6109886eaa01af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:6d:b1:7a:7f:b7:56:ad:dc:44:73:42:7d:
29:df:ac:df:b1:14:6c:35:c2:dc:97:ab:9d:44:75:
2b:37:73:c4:c7:1d:c0:4e:e3:8c:3d:6b:07:71:e8:
33:65:59:5f:30:86:ad:15:13:f2:45:d9:92:02:95:
1a:34:26:26:2e:26:dc:f4:c5:03:9c:51:c2:a9:24:
a7:77:88:ef:ef:93:16:01:62:a7:21:88:9f:11:c7:
06:d5:1f:d8:ed:1d:59:07:72:d8:bc:33:3d:25:07:
c6:8d:b8:bc:fa:c7:58:89:40:00:c2:e1:bd:5c:69:
11:cb:7d:7e:80:81:b9:bd:de:f6:de:89:13:f9:8b:
df:cc:41:16:9a:16:2d:d3:07:b8:05:98:c3:4c:33:
4f:db:7b:17:b2:30:62:c6:b9:4d:03:3c:36:62:bc:
a3:83:21:07:26:0e:cb:8a:eb:d0:90:4f:d3:a3:9d:
61:0a:bf:a5:e7:08:3f:25:e3:53:8d:bc:51:f4:93:
01:52:80:62:49:c3:5f:90:30:55:93:30:93:86:64:
d3:3e:bc:f6:f2:f2:33:26:56:9b:93:e0:49:db:17:
c3:d1:05:f5:7d:17:95:6e:b2:f5:a2:6c:0f:09:79:
90:41:8d:30:81:a3:4f:7b:40:8d:81:b6:4a:1c:3e:
5b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A8:1A:A2:2A:60:80:66:B1:64:18:7D:8D:61:09:88:6E:AA:01:AF
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:50:19:da:dc:9a:1a:cb:3b:85:dc:77:67:f3:39:0e:fd:66:
35:43:0f:20:9c:9a:23:76:0f:36:3f:19:0e:f6:c1:06:d2:ca:
6a:20:83:29:54:67:8d:cb:4a:f7:86:53:2b:25:9d:42:09:3d:
5c:6c:00:2d:74:75:87:57:df:60:dd:46:71:79:4c:7a:ec:a4:
64:ca:c0:47:ba:0d:8c:0b:0d:88:24:53:d3:ae:fe:8d:b9:86:
9b:8b:83:16:45:1c:0c:f4:62:53:b7:07:85:6b:dd:1e:77:02:
b9:41:0e:d4:fe:f8:22:a8:7f:4d:38:ae:87:9b:42:2a:8b:f8:
8b:d1:f9:9c:64:c9:b5:ed:33:67:2f:43:ab:c1:40:65:e2:41:
bf:d6:3b:38:26:69:69:0e:3a:c7:0c:21:cc:7c:79:a8:33:27:
3c:c4:c6:e9:42:59:15:a0:5c:17:43:76:c1:bd:56:ed:cf:6c:
64:30:37:8f:52:85:bf:60:72:38:bb:40:09:3f:d8:41:3e:29:
b4:a8:5a:d6:37:11:13:00:6f:87:dc:0d:5e:81:e2:3f:c2:d7:
46:19:26:e3:be:d3:dc:ac:c0:47:50:88:fd:04:e0:f6:af:9d:
48:78:f7:df:ca:39:3c:d6:c5:72:eb:7a:dd:98:a7:c2:99:09:
40:fb:4a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:09 2026 by rpki-client