Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
File: K1PcIaJCAlQoIMyobiZfioeX0lA.mft (raw, json)
Hash identifier: hfNVSnJcUg9t0AXfxr2lz1dg5JfHIupQvL7IqLqdpzI=
Subject key identifier: C3:41:CF:A8:9E:DF:05:18:40:D8:73:DB:50:FE:E4:30:43:B1:A8:34
Authority key identifier: 2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
Certificate issuer: /CN=2b53dc21a24202542820cca86e265f8a8797d250
Certificate serial: 019CADC7DCA0693EA4592E6954D212F2AFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
Manifest number: 5F
Signing time: Mon 02 Mar 2026 09:01:22 +0000
Manifest this update: Mon 02 Mar 2026 09:01:22 +0000
Manifest next update: Tue 03 Mar 2026 09:01:22 +0000
Files and hashes: 1: K1PcIaJCAlQoIMyobiZfioeX0lA.crl (hash: D7hfpSwJZfcYGQ4HoEHCqP1E+eN9X76NW2Wuobnbw60=)
2: kD6G2PoyT4Y9hFb7K8_JYQqd5fY.roa (hash: GDKNpiIO5829SnDrPg3nh1X5rP785rc0edBI69dLKGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:dc:a0:69:3e:a4:59:2e:69:54:d2:12:f2:af:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b53dc21a24202542820cca86e265f8a8797d250
Validity
Not Before: Mar 2 09:01:22 2026 GMT
Not After : Mar 3 09:01:22 2026 GMT
Subject: CN=c341cfa89edf051840d873db50fee43043b1a834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:88:58:ba:3f:07:79:76:08:02:b7:90:89:2a:
29:cc:cb:24:e7:e9:ad:d8:1e:eb:88:07:ef:70:84:
9f:b3:52:38:e9:32:f9:59:3a:61:3c:cc:c2:cc:ae:
36:5f:65:00:19:5b:3b:dc:c1:5d:d0:ca:db:8a:16:
d6:8e:51:c0:8a:2e:29:4a:9a:6b:c5:72:9a:fb:e7:
37:a4:e3:9e:88:9f:3d:81:95:2a:2f:ff:c9:8c:ce:
c5:df:99:46:5d:a3:98:cf:08:e9:d1:1a:9d:57:07:
3e:f8:d6:8a:f3:39:66:04:51:7b:ee:24:7a:5a:da:
de:8c:c6:df:40:c2:ad:b9:2c:c3:0f:fb:f4:49:20:
cd:12:5d:1a:63:27:33:ca:4d:1e:e5:67:16:0a:c4:
86:04:ce:3c:62:16:90:8d:58:e4:14:33:66:b3:c1:
17:95:e2:6c:47:fc:18:1a:a0:ff:69:98:9b:b3:a0:
c9:7e:8f:5e:ab:6d:f2:91:8e:19:e8:70:bc:93:08:
2b:41:83:c6:b6:3c:e8:92:a9:92:d1:a5:cb:50:2b:
46:e1:bf:4e:70:04:72:fc:94:c9:86:86:51:27:66:
18:06:7a:02:b5:7c:a2:7b:4e:26:4c:bd:15:c0:a2:
55:d1:38:20:57:0a:9f:91:3a:73:7b:45:d8:fb:a3:
23:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:41:CF:A8:9E:DF:05:18:40:D8:73:DB:50:FE:E4:30:43:B1:A8:34
X509v3 Authority Key Identifier:
keyid:2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:80:ba:0b:8e:2c:5f:88:c7:3d:ab:d2:b3:df:32:fe:a6:6c:
be:52:e8:05:61:47:aa:5d:8c:03:d4:e9:6e:dd:d9:ef:fd:d4:
f3:54:19:6c:28:c7:64:00:6a:04:c8:47:0a:f1:ce:67:57:93:
60:59:a3:b8:5d:5d:1a:59:ce:a3:4b:f7:69:96:ce:ba:46:5e:
9c:3e:5f:c0:a2:e6:5e:ed:21:50:75:b4:f2:72:49:e6:e6:6c:
7f:65:5a:17:9b:8c:c5:71:47:fe:b3:f7:e9:b9:9f:17:ea:71:
aa:08:28:7e:8c:49:82:c0:83:aa:19:7d:fb:1f:12:73:51:c1:
44:2b:cb:ea:65:bf:07:30:14:9c:4e:92:3c:74:2d:66:8c:32:
5b:d2:82:ec:9c:0a:79:09:9d:2f:70:02:3a:65:f2:18:4f:bd:
92:95:3e:cc:af:60:d5:43:09:a8:44:b3:d0:4d:d3:c8:ae:92:
9e:2f:5f:17:07:1a:63:a7:cd:cb:c4:29:c2:51:74:f1:f7:ff:
0f:65:23:4d:8f:bd:1a:f7:2f:55:6b:a4:d1:f6:6b:5a:a8:c6:
11:ad:2e:ab:0a:eb:93:46:05:61:2c:74:39:f4:b2:74:e0:5f:
3e:c5:49:42:e8:e2:47:7d:f1:6a:c3:40:30:78:50:e8:82:5d:
ea:59:d6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:35:46 2026 by rpki-client