Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File: K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier: 6J75Zu7/OxZMAOkenl4UWK+fxw8qNAWY07bxSwQm9aA=
Subject key identifier: BD:DB:8E:F3:AA:AF:81:0A:F9:13:F3:EB:1A:85:A8:68:21:C1:06:DE
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer: /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial: 019D27720F5267F50CBF0049D7F777A6D0D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number: 080F
Signing time: Thu 26 Mar 2026 00:01:19 +0000
Manifest this update: Thu 26 Mar 2026 00:01:19 +0000
Manifest next update: Fri 27 Mar 2026 00:01:19 +0000
Files and hashes: 1: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: WwPOFSoRWmSnb1rN7pCSghUN43H4mQAJeyHwmkKSMBQ=)
2: NrFG9a7lhgdagV21jW_Y5WHIDU4.roa (hash: VxqOc7Zmm8Sw61vVYrF1hQBCY2BqNer2KY9Km2/+dR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:0f:52:67:f5:0c:bf:00:49:d7:f7:77:a6:d0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Validity
Not Before: Mar 26 00:01:19 2026 GMT
Not After : Mar 27 00:01:19 2026 GMT
Subject: CN=bddb8ef3aaaf810af913f3eb1a85a86821c106de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:03:8a:66:7c:18:82:ce:86:90:32:ae:de:
63:61:ff:88:b0:61:02:85:32:77:23:47:9e:a2:21:
1c:ec:38:aa:73:0c:ed:d8:bd:0d:74:6a:d1:2d:6f:
48:6b:23:27:b7:0e:f1:81:a8:e5:cb:dc:ac:b5:b6:
30:9d:3a:ff:6a:58:0e:78:a6:34:b2:e7:39:72:d0:
c9:ac:4c:e3:ca:9b:c9:5a:2d:9f:56:3a:39:ec:4f:
ba:78:ea:c0:0d:25:a8:2a:c7:d7:ee:67:87:b4:c0:
68:ac:f3:d0:9c:55:77:b2:a6:63:06:dc:cf:2d:4e:
57:05:c5:68:3d:37:85:dc:bf:89:e5:e7:0f:0e:8d:
76:2f:48:c7:81:2d:38:8b:c2:0c:65:12:da:61:9d:
c1:02:99:7b:4a:38:50:98:45:95:fc:98:58:ed:1d:
1d:21:ea:63:c6:ff:5c:52:51:77:fb:ca:a4:6e:28:
33:a2:3a:ef:37:77:80:5b:75:00:f6:a7:96:3c:de:
4a:d0:69:41:2c:87:6c:2c:9a:34:ab:c0:91:79:64:
27:92:9a:8c:38:89:3e:40:2b:f4:d8:db:41:05:18:
74:ac:f8:a4:1b:93:45:63:36:7e:fa:67:1c:00:ae:
28:e8:3d:d7:a9:b0:8a:1d:92:56:29:22:97:3f:c1:
28:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DB:8E:F3:AA:AF:81:0A:F9:13:F3:EB:1A:85:A8:68:21:C1:06:DE
X509v3 Authority Key Identifier:
keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:85:a9:1c:07:63:89:ef:17:4a:3f:f5:f5:90:a6:49:e7:82:
7c:46:a9:0c:b7:42:7b:be:76:bd:94:9e:68:fb:c5:7e:b6:77:
4c:2b:c2:bf:37:41:9e:6d:21:41:47:0f:98:2a:8e:6c:b3:f3:
d0:d7:4c:f5:b2:d1:13:f2:b2:17:a2:14:ee:60:e7:70:04:6b:
ae:74:86:c9:56:d0:77:14:b2:42:ed:62:2f:68:ac:35:d6:75:
79:33:f3:7e:70:53:81:5b:f4:95:18:18:76:62:f7:5c:f0:c1:
5a:4f:90:c5:67:91:19:6b:85:ac:00:4c:56:b6:a3:b4:1b:c1:
86:8b:e4:3b:2d:83:c6:21:9f:17:91:cd:3a:9a:14:2f:fe:16:
c0:c2:05:95:e9:61:8b:32:13:a4:1c:8a:bc:b9:59:f1:b2:72:
b0:8e:8a:30:08:aa:f5:6a:3f:5f:95:ff:e8:0a:c0:92:b9:6e:
53:ac:8f:66:ca:c3:84:00:6e:81:46:c3:ef:76:29:e7:32:03:
9d:44:6d:34:03:84:aa:92:3c:e6:c8:83:92:7e:94:fe:23:c6:
63:0f:17:b2:ca:cb:fe:e0:0e:bc:8a:fb:c8:0f:9b:9e:3f:5e:
5d:11:e1:c4:9e:aa:62:bc:64:f2:96:d3:ba:20:55:ba:e7:55:
f9:d1:3b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:27 2026 by rpki-client