Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier: 4WNTYz83wgYi9/SqkLY7SJWqoP82BZ8Eon6g8opTEXg=
Subject key identifier: 05:91:12:92:AC:BE:8E:6F:01:4F:7F:5A:D7:AE:C2:94:16:9B:20:80
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 019CAD90722CE49EEA3E7F0DC3CEC2DD9975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number: 14E7
Signing time: Mon 02 Mar 2026 08:00:50 +0000
Manifest this update: Mon 02 Mar 2026 08:00:50 +0000
Manifest next update: Tue 03 Mar 2026 08:00:50 +0000
Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: BSJNar786cpTepdv4aFL1CysrVmmSRTjXxnbdNL0eaY=)
2: bPwyaBbJqcQN7JQtu51i9S9uIaM.roa (hash: SC7PxmBSPghpd6hjRs92LdR0jqsFurZFEwEHVN8gVC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:72:2c:e4:9e:ea:3e:7f:0d:c3:ce:c2:dd:99:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Mar 2 08:00:50 2026 GMT
Not After : Mar 3 08:00:50 2026 GMT
Subject: CN=05911292acbe8e6f014f7f5ad7aec294169b2080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1e:8f:4c:d7:31:79:43:79:95:b8:d6:bf:a0:
a0:02:fb:3b:fc:d2:bd:6c:71:6e:22:9a:ff:2b:de:
ac:b8:79:cd:4e:6b:19:7b:9f:39:95:e0:6b:4b:29:
e9:57:72:5a:0f:eb:b5:10:2f:87:9e:96:9c:67:ea:
fe:ef:76:c1:c4:05:e0:bd:19:21:2a:20:2a:43:f1:
15:94:d1:28:10:ab:11:9a:e1:24:af:0e:07:4d:47:
3f:f9:d9:25:48:af:2d:69:0f:3e:3e:84:06:f1:7f:
81:1a:25:17:14:d7:23:53:5c:2d:97:09:8b:3b:4c:
44:b2:60:00:26:1c:9e:29:e2:45:52:45:4c:62:e5:
08:48:77:36:9d:65:b5:5a:1a:3d:41:80:66:f6:d4:
1c:1f:c4:6d:a5:24:fb:79:eb:a9:a1:c9:26:87:5f:
92:03:4e:97:c1:4f:73:57:d9:f4:73:02:65:38:67:
d3:aa:5f:8e:4d:fd:70:d6:72:48:64:79:e2:41:79:
b4:b5:06:98:ca:eb:43:a7:f5:98:78:7d:0a:9e:b0:
94:d8:8e:8d:70:13:c9:d6:12:d6:f5:12:f6:e9:b2:
cb:51:2c:d6:d3:c2:50:42:a6:73:79:b3:ce:e7:51:
ad:ab:44:f5:33:37:42:16:4c:aa:b7:5b:f5:5b:ec:
3e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:91:12:92:AC:BE:8E:6F:01:4F:7F:5A:D7:AE:C2:94:16:9B:20:80
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:02:a6:e9:df:ef:ce:13:a3:2c:3c:3d:d1:ea:30:e8:61:e1:
9c:e6:af:3a:27:1c:91:a4:18:b4:07:f9:04:c5:ba:58:5b:7e:
a4:fa:85:96:98:23:cf:86:14:58:58:22:37:9f:06:88:69:a9:
11:1d:00:96:58:2b:54:d3:f3:88:57:43:7d:eb:7c:a5:9f:e0:
4f:15:06:53:bf:cc:81:f5:5c:a1:03:a0:4f:72:34:20:e0:e6:
3d:6d:d2:a5:4a:26:26:21:61:e3:fb:6d:bc:52:2f:01:83:fb:
df:ac:38:ac:62:ea:13:16:05:be:81:38:49:2c:5d:1e:88:61:
e8:d5:f8:03:95:2a:30:80:c3:9f:c7:3f:f8:f1:c7:2a:c5:6e:
f4:5d:ee:87:c5:85:54:6e:7a:fd:ab:51:cd:97:31:f0:30:5f:
bd:2b:20:f1:1d:e2:91:6e:45:3e:55:89:b2:e4:8b:f9:6b:98:
7d:6c:59:08:5b:1b:da:7d:de:67:8f:67:1c:18:c5:a5:b1:c9:
7d:1c:eb:a9:14:5a:ba:12:91:25:0e:a2:eb:4a:0a:ff:27:90:
84:02:4d:d8:19:15:d1:63:12:6b:f9:4b:6b:00:98:09:35:bd:
34:0f:db:50:4a:53:46:34:fc:ef:05:3a:08:cb:d1:86:13:b9:
85:7a:95:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:41:44 2026 by rpki-client