Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json)
Hash identifier: k+gEbi6V4EmOo4frDegeTFpKYUdeZ6yInbVWRDFF8IE=
Subject key identifier: CC:CD:2D:5A:53:C6:CC:5A:65:8D:2B:53:EF:65:EB:F6:D1:B0:BB:4D
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 019D25BA9D540775F3B11933B26270B71774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
Manifest number: 0CDC
Signing time: Wed 25 Mar 2026 16:01:19 +0000
Manifest this update: Wed 25 Mar 2026 16:01:19 +0000
Manifest next update: Thu 26 Mar 2026 16:01:19 +0000
Files and hashes: 1: 7kADj_Exqnkd_NooXivCTNgHMTw.roa (hash: xbxLEV7EBAsCMdM5vvQNxcgu+GmkqM8Q10yUTCA4kNA=)
2: FilFuxaHNlZodlAIrDOhTmh6ldo.roa (hash: uhGLiCFEBOn6o6kgW6SCO1d0PO9VmCMZayR7rM7fOKo=)
3: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: nzjcmYkQQgjyiGN2odUf2cCK4MyIASZubaaV5fZ1OoI=)
4: b2hDoC2QeOdetXxS8h0K7-tyYmI.roa (hash: 9C3SPDVj2hN5qln0VFtPBwpA+3WenkqM7y2GLRnn6bw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:9d:54:07:75:f3:b1:19:33:b2:62:70:b7:17:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Mar 25 16:01:19 2026 GMT
Not After : Mar 26 16:01:19 2026 GMT
Subject: CN=cccd2d5a53c6cc5a658d2b53ef65ebf6d1b0bb4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:a2:d7:4c:bb:f4:59:0d:63:47:50:e8:2c:
de:dc:c0:c3:c6:80:19:cc:ce:57:c2:a9:47:03:b8:
46:35:c0:ac:75:3a:6b:7a:dd:00:e0:05:32:ca:2e:
46:5f:99:ef:69:68:d6:49:6a:d0:c3:b6:68:05:b0:
72:d3:1f:0f:1e:ea:86:9e:ff:00:bf:3e:33:c5:51:
be:31:26:3a:0c:45:8a:18:ec:79:d0:4c:93:b6:04:
e0:90:74:38:f7:54:a9:5a:1f:6d:cb:16:ec:e2:fd:
04:34:2e:d4:0d:3f:e4:b4:17:c6:5a:ed:d0:68:5c:
b6:c0:de:2c:de:b1:9f:f5:58:37:5c:c1:b5:d8:af:
ce:bd:13:28:37:bb:40:96:a0:2f:fe:c2:05:9e:61:
ca:ab:64:ef:64:4c:7b:06:d4:03:36:36:76:32:01:
66:d5:0b:0b:67:ca:0a:40:3f:a9:4d:8a:62:db:3c:
ce:0f:87:26:65:25:d0:c0:aa:f2:4e:71:7f:be:ae:
43:cc:ea:63:a8:a2:3b:9a:53:43:88:9f:3d:47:b3:
84:b9:b9:9d:75:d0:8c:a1:e6:8c:99:b5:39:26:9f:
1c:c9:d2:43:fc:b6:55:14:6c:37:d8:dd:a0:01:1d:
d4:a0:4a:09:c9:28:f5:ff:02:02:11:61:09:a8:e1:
63:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CD:2D:5A:53:C6:CC:5A:65:8D:2B:53:EF:65:EB:F6:D1:B0:BB:4D
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d3:79:95:92:26:b0:ef:e8:e6:8f:2d:7a:21:9e:ea:50:76:
4b:cc:ae:64:c6:80:ce:e1:5c:d9:f7:24:45:93:2f:0c:89:b2:
6c:b1:34:df:29:f2:5c:83:4a:52:57:8a:2f:e6:1a:6f:f0:35:
99:8a:02:d6:02:96:ca:29:3a:b9:9b:8e:c8:e5:72:06:63:9e:
df:82:80:31:60:aa:43:87:08:4c:1c:95:2d:db:30:42:b3:cc:
5a:9a:d3:96:01:93:39:e0:e7:fc:6c:65:01:88:24:2b:bd:3e:
76:a7:fe:4a:bd:1d:4b:52:1c:04:bd:63:1a:2b:b1:1c:fc:94:
da:29:d4:fa:54:d8:59:5a:d7:d0:ef:09:e3:93:1b:ed:17:fa:
b9:8c:1e:75:37:0d:6e:16:99:80:d1:31:1e:a2:36:37:81:f6:
b0:43:73:23:53:06:22:bb:25:6f:9f:1f:8a:87:b6:05:c2:ae:
ba:53:f3:02:41:14:a9:1f:56:ff:18:f0:cf:0d:86:ca:c1:b8:
d6:8a:87:cd:18:13:00:22:13:a4:bc:b2:78:8e:2b:3a:2d:c6:
09:b4:11:f1:e4:86:39:0f:90:69:ba:ef:81:ce:db:c1:51:88:
8c:82:43:38:3b:eb:a5:b8:87:b6:51:fd:b4:2d:01:7a:7b:d6:
06:4f:0b:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lup1UB3XzsRkzsmJwtxd0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZTUzZDM0MGE4YmY0N2MxYmYzNGQzMjU1ZTEwMmVmYjE4
MWFkMTkwHhcNMjYwMzI1MTYwMTE5WhcNMjYwMzI2MTYwMTE5WjAzMTEwLwYDVQQD
EyhjY2NkMmQ1YTUzYzZjYzVhNjU4ZDJiNTNlZjY1ZWJmNmQxYjBiYjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Kmi10y79FkNY0dQ6Cze3MDDxoAZ
zM5XwqlHA7hGNcCsdTpret0A4AUyyi5GX5nvaWjWSWrQw7ZoBbBy0x8PHuqGnv8A
vz4zxVG+MSY6DEWKGOx50EyTtgTgkHQ491SpWh9tyxbs4v0ENC7UDT/ktBfGWu3Q
aFy2wN4s3rGf9Vg3XMG12K/OvRMoN7tAlqAv/sIFnmHKq2TvZEx7BtQDNjZ2MgFm
1QsLZ8oKQD+pTYpi2zzOD4cmZSXQwKryTnF/vq5DzOpjqKI7mlNDiJ89R7OEubmd
ddCMoeaMmbU5Jp8cydJD/LZVFGw32N2gAR3UoEoJySj1/wICEWEJqOFjDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzNLVpTxsxaZY0rU+9l6/bRsLtNMB8GA1UdIwQY
MBaAFCvlPTQKi/R8G/NNMlXhAu+xga0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEt
NzRmMGMzZTY2M2NiLzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy9mNzI1NjItNDVmNS00MDE5LTgzYTEtNzRmMGMzZTY2M2Ni
LzEvSy1VOU5BcUw5SHdiODAweVZlRUM3N0dCclJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAidN5lZIm
sO/o5o8teiGe6lB2S8yuZMaAzuFc2fckRZMvDImybLE03ynyXINKUleKL+Yab/A1
mYoC1gKWyik6uZuOyOVyBmOe34KAMWCqQ4cITByVLdswQrPMWprTlgGTOeDn/Gxl
AYgkK70+dqf+Sr0dS1IcBL1jGiuxHPyU2inU+lTYWVrX0O8J45Mb7Rf6uYwedTcN
bhaZgNExHqI2N4H2sENzI1MGIrslb58fioe2BcKuulPzAkEUqR9W/xjwzw2GysG4
1oqHzRgTACITpLyyeI4rOi3GCbQR8eSGOQ+Qabrvgc7bwVGIjIJDODvrpbiHtlH9
tC0BenvWBk8LjA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:50:49 2026 by rpki-client