Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
File: K8J94IFvfguHpzPdMZkInlN_Jhw.mft (raw, json)
Hash identifier: zVaPGyw6w4dQQu+x9TMPKZh36sjFlIIXKDdGOGBYF7k=
Subject key identifier: 6F:E1:97:08:82:94:27:BE:37:C9:69:2A:E2:35:F4:C5:43:C8:9C:5E
Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
Certificate issuer: /CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Certificate serial: 019CAB349513E7C8D7BACB1FDC5036B433A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
Manifest number: 0E37
Signing time: Sun 01 Mar 2026 21:01:15 +0000
Manifest this update: Sun 01 Mar 2026 21:01:15 +0000
Manifest next update: Mon 02 Mar 2026 21:01:15 +0000
Files and hashes: 1: 834MSKGMZ57M-pHmOtnxmOs679Y.roa (hash: UkqP5BZI7xAVc7q2Wx7u9sbbq4cIz5WBnS1sWMLQ5HE=)
2: K8J94IFvfguHpzPdMZkInlN_Jhw.crl (hash: bLCrV0JA3UqucBtMktPAgoTN/VNJwNEAxQ3LSil+BvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:95:13:e7:c8:d7:ba:cb:1f:dc:50:36:b4:33:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Validity
Not Before: Mar 1 21:01:15 2026 GMT
Not After : Mar 2 21:01:15 2026 GMT
Subject: CN=6fe19708829427be37c9692ae235f4c543c89c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:16:00:3f:eb:7c:3b:6b:b0:f2:69:88:8f:
c8:a1:d5:23:87:00:b5:8e:0a:67:ee:7c:7f:f4:70:
45:19:7b:fc:a6:25:24:13:ed:df:5b:9f:aa:82:4a:
d3:84:04:94:78:8d:b8:46:e3:6b:fd:28:fd:84:da:
fc:dc:24:b6:23:2f:3c:ec:bf:60:37:70:27:81:a9:
b5:04:61:74:5f:55:18:8d:fc:8f:08:4f:18:86:98:
5a:0e:a1:12:98:35:06:2f:93:89:a3:ac:4f:d8:18:
94:c6:65:f2:61:9d:5c:c4:10:06:9e:87:05:60:72:
a5:db:e3:83:56:0f:21:58:b6:92:88:18:cd:4f:7c:
2e:63:51:2c:9d:d9:d4:e1:ab:de:9b:21:f3:3c:76:
42:58:60:ea:b6:cb:d2:36:1b:c5:b9:af:75:62:5f:
cf:f2:bd:25:01:3d:b8:f0:34:f1:68:22:b7:84:44:
dd:ce:01:92:58:c5:a4:7e:fa:a6:96:c4:c7:b1:e1:
7e:af:44:1e:2b:81:af:22:35:15:e3:30:28:e4:b5:
5f:e0:f7:9b:a6:81:e7:67:8e:b7:b2:83:4a:7b:0a:
6e:fd:e6:43:84:00:56:61:cf:88:7a:fa:94:d6:04:
63:29:5a:fe:a4:74:62:1b:96:cf:2e:7b:d0:10:dc:
93:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E1:97:08:82:94:27:BE:37:C9:69:2A:E2:35:F4:C5:43:C8:9C:5E
X509v3 Authority Key Identifier:
keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7f:a8:d6:dd:30:ce:0b:f9:1f:83:91:54:27:7b:29:89:2c:
0a:54:27:b9:1e:6b:8e:1c:84:0a:33:4b:c1:3b:49:01:9e:5d:
f4:80:a9:c2:f9:26:ab:72:24:fe:ff:ef:e6:32:fd:d1:85:c3:
f5:81:1f:f9:60:7d:c6:15:df:2a:9f:2d:7a:04:de:0d:3b:dc:
db:65:9b:6b:b6:e3:c3:d1:0f:5f:92:2e:78:c4:41:ed:b2:ac:
b2:04:c5:bc:09:bd:77:18:8e:eb:9e:88:d6:de:06:68:41:f3:
51:52:2c:fa:1c:5a:62:a0:ed:85:e6:15:aa:3e:6e:ca:c5:1e:
ce:ce:93:c1:b2:67:e9:ba:79:78:a7:67:d8:19:cf:f6:fc:1b:
21:1b:e2:f0:8c:e1:ca:19:31:b5:bc:78:84:1f:84:5f:b0:b0:
20:82:20:04:00:49:ae:42:80:a3:68:08:83:c8:d1:1f:36:2d:
2e:7f:55:e8:68:b2:81:0d:d0:6e:c5:d1:8e:05:24:f9:1c:ff:
d5:18:04:ff:21:28:57:db:c6:be:51:02:2f:ca:9e:7d:5a:08:
f5:30:6f:4c:a1:26:69:7c:c1:f5:eb:01:4e:ed:a3:29:5c:ab:
3b:b3:d0:03:84:05:ad:d9:7c:f5:37:61:f0:47:d3:24:43:3e:
34:58:2e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:15:50 2026 by rpki-client