Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: WmHDmFVakbBQlP8GspiUxm0cEFjVU13QRCvE/Y5msBY=
Subject key identifier: 58:56:5D:C7:F3:1B:3A:17:C2:4A:BF:D5:16:C0:38:DB:21:91:B2:54
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 019CAA8FC5624CDD6F4C1F2E6AEB2D9F7EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 18:01:14 +0000
Manifest this update: Sun 01 Mar 2026 18:01:14 +0000
Manifest next update: Mon 02 Mar 2026 18:01:14 +0000
Files and hashes: 1: HXApDbBFjZ5P8YYPxxOP43B_61E.roa (hash: PABHtWG+f2nnmj23DcOFA1VpAaq32GiJAfPfR67Vqzs=)
2: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: U1U1gCK8IvcHB1nMD0eAqgSWbOXuYUTdIOekYrou72Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:c5:62:4c:dd:6f:4c:1f:2e:6a:eb:2d:9f:7e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Mar 1 18:01:14 2026 GMT
Not After : Mar 2 18:01:14 2026 GMT
Subject: CN=58565dc7f31b3a17c24abfd516c038db2191b254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4d:1f:44:7c:44:73:78:62:ca:db:c0:90:10:
d5:bd:7c:2c:12:33:13:67:db:d8:5d:ef:1f:56:98:
23:34:bf:ff:c8:56:1e:aa:3e:01:8f:96:36:84:78:
7f:53:83:c8:1d:e8:61:1b:c1:28:cc:68:14:73:bb:
48:6d:f9:bf:51:81:8f:b2:c2:1d:62:53:cf:41:7b:
8b:0e:22:6b:39:50:99:45:21:40:7e:fe:1b:42:98:
7e:51:8f:4e:f6:9b:a9:74:3b:8a:6d:1f:38:0f:de:
cd:91:72:70:a2:8f:ca:71:c0:65:90:01:ac:ca:1c:
dd:00:68:39:4f:03:da:5e:d6:24:1b:f0:88:0d:7b:
af:12:6d:7d:f0:0c:26:99:67:9a:e7:c9:17:bf:5b:
04:6e:48:74:9a:8e:2e:03:d4:2d:ac:06:9d:d3:3b:
84:c0:b6:01:67:cb:c9:f0:a5:7e:06:eb:4e:ee:07:
b3:38:36:d7:d9:1f:c6:96:09:a4:3f:a1:4d:2f:78:
66:dc:8c:86:d2:46:bd:40:f0:a3:8b:ca:11:a0:b8:
e2:17:d5:8d:f7:74:5b:f5:d2:75:2c:21:5d:ef:bd:
ac:cc:51:ee:c5:d3:3b:59:30:58:c6:23:a7:1a:52:
03:1e:68:bd:c3:6a:c3:92:6b:f4:a1:61:5c:db:76:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:56:5D:C7:F3:1B:3A:17:C2:4A:BF:D5:16:C0:38:DB:21:91:B2:54
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e7:45:e5:4a:30:9c:b0:f7:c9:b5:b4:f2:65:82:a3:5d:02:
da:7d:f5:58:a0:e5:86:a8:e6:f9:31:a9:65:b1:9d:69:cb:36:
93:50:59:58:7d:c6:b2:59:f0:fe:73:8c:b4:1b:a9:87:92:c2:
56:8d:00:c2:b7:c2:b2:1f:3b:46:25:a2:2b:9d:d7:ef:a0:7a:
35:ad:73:9e:92:3b:46:b4:86:0a:35:a6:5c:08:45:f8:7e:91:
42:84:36:55:68:cb:e5:cc:28:be:31:64:35:95:09:04:52:83:
d8:a4:ec:5d:47:b0:4d:5a:d3:db:19:9e:3f:d5:f3:46:03:6e:
8c:8e:35:9f:56:29:67:95:6c:b5:e9:87:a9:ef:e1:dd:4e:65:
fe:0b:24:c7:e8:1b:fa:ab:f0:41:e6:d1:04:20:2a:d3:5e:0c:
6c:61:91:0f:57:9b:09:6d:e1:52:a4:95:2b:93:80:45:cb:cc:
6c:0f:21:31:74:23:e6:3b:a4:b2:1c:c8:d3:d7:46:dc:2d:33:
90:54:74:ea:6c:99:15:75:75:bf:2d:9f:52:fc:da:89:ec:48:
ed:eb:26:45:78:72:dc:ac:e2:11:78:df:50:48:0a:74:76:18:
79:71:97:ae:30:27:92:75:98:bd:37:58:58:f5:8c:26:a2:6e:
e6:8c:12:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:37:03 2026 by rpki-client