
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
File: C_K7rLR03WED6JEXpjZ0VpZN8xk.mft (raw, json)
Hash identifier: GYJYBkzCzflDuGfOWC0NZ0PPU7fZ8vJdCncwXL/WBPI=
Subject key identifier: EA:96:33:03:65:D4:E8:A0:0C:50:9D:03:8D:72:2D:B0:95:8E:2A:2E
Authority key identifier: 0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
Certificate issuer: /CN=0bf2bbacb474dd6103e89117a6367456964df319
Certificate serial: 019D26CD5713C904B1A98813199DCD49A832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 21:01:24 +0000
Manifest this update: Wed 25 Mar 2026 21:01:24 +0000
Manifest next update: Thu 26 Mar 2026 21:01:24 +0000
Files and hashes: 1: C_K7rLR03WED6JEXpjZ0VpZN8xk.crl (hash: 8vdapXgy70rzj3YWZGeDIfXXcy9pPr0UzBeRQueKsW4=)
2: NVXaED00Tks0cffjpQE1Y8p8He4.roa (hash: dC5/5uYQHiqKfAa0wK/7KjwQ7hQBtAToi6muCDxU9EI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:57:13:c9:04:b1:a9:88:13:19:9d:cd:49:a8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf2bbacb474dd6103e89117a6367456964df319
Validity
Not Before: Mar 25 21:01:24 2026 GMT
Not After : Mar 26 21:01:24 2026 GMT
Subject: CN=ea96330365d4e8a00c509d038d722db0958e2a2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a1:e1:ec:97:90:91:4f:ba:3d:76:b1:b1:7d:
e7:28:e0:4c:c3:df:c3:b1:57:a1:f3:11:a0:fd:67:
f3:17:f8:6f:43:b8:c9:1f:66:43:39:ac:dc:ec:a1:
45:6f:1c:d5:1c:49:7a:0d:57:d2:27:3d:9a:76:94:
63:f9:5f:3c:f9:32:2e:25:a0:88:b5:fc:aa:09:3a:
2f:a6:09:ab:c7:65:66:4c:d2:e7:ae:89:7d:47:a3:
ed:e4:be:2e:f6:e3:ce:9c:b2:c0:75:71:e0:2b:de:
d6:4e:ef:bc:5a:4b:80:1b:66:33:85:57:68:fe:b5:
70:5b:96:c4:87:49:fd:c6:ee:c8:92:d8:ec:91:6a:
6b:57:54:74:2c:bf:f4:93:4f:f1:47:df:85:6b:d9:
f9:ec:a8:75:ed:56:3c:58:17:eb:0a:3d:33:b8:73:
0d:53:50:c7:c1:c4:e2:4f:38:f0:ad:31:c8:4a:70:
a3:93:cf:6b:a5:71:23:61:51:fd:6f:f1:b0:3d:4e:
d4:f2:19:30:91:23:f0:ed:11:a7:0f:06:c9:da:81:
0e:95:9c:47:91:5d:b1:90:cb:2b:99:1a:65:8d:ec:
52:d1:17:99:76:3f:83:ef:f9:c0:d3:a0:0f:6d:6d:
be:d8:de:a5:be:af:3b:58:1f:3c:7f:a2:e2:52:86:
d8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:96:33:03:65:D4:E8:A0:0C:50:9D:03:8D:72:2D:B0:95:8E:2A:2E
X509v3 Authority Key Identifier:
keyid:0B:F2:BB:AC:B4:74:DD:61:03:E8:91:17:A6:36:74:56:96:4D:F3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_K7rLR03WED6JEXpjZ0VpZN8xk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/cbd4a7-394d-4c03-bed5-d6b96e88a611/1/C_K7rLR03WED6JEXpjZ0VpZN8xk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:82:f8:40:3d:9a:9d:3b:9c:3c:e2:26:f6:e8:59:f0:88:b8:
2b:58:c3:6f:5c:63:09:23:c9:63:47:83:84:e9:3f:92:af:37:
25:39:61:4f:af:5f:ef:58:f2:d2:0f:90:61:73:4c:5f:30:38:
ad:5a:62:75:6f:ea:9d:f4:02:9d:2b:63:db:41:aa:70:69:3b:
93:a8:dc:58:6d:d6:3e:97:9a:c4:36:7f:5b:7b:d1:63:03:8d:
f4:61:51:82:09:c5:45:2b:26:43:03:29:6d:85:96:2d:a0:d9:
28:34:9a:ef:6c:23:cd:9c:58:96:47:78:70:dd:4f:0c:6b:a8:
90:0e:54:87:9f:f1:7f:e2:02:93:9e:52:61:6c:30:fc:9a:9b:
cf:4a:36:81:c4:70:06:3b:eb:d6:41:a9:cc:69:81:90:6e:0b:
d2:6a:db:2c:74:44:62:98:e2:38:5c:66:4b:33:7b:94:99:8a:
cd:70:db:14:4d:f1:f4:5f:1e:de:e1:ff:ae:70:c1:b4:57:2c:
19:dd:72:45:af:8f:1a:1c:b1:4a:71:2f:a3:20:41:f5:d4:08:
b4:f1:94:a8:83:6b:9c:28:e0:6e:37:ec:5b:25:35:93:e7:bd:
58:38:c2:e4:79:c0:c8:c5:a4:18:58:d4:3c:b4:41:a1:74:e9:
2e:f9:65:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:40 2026 by rpki-client