Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier: j99xntZQxQihe8eMPT4HjAtaBm3hG5oxjtlWvg60k9M=
Subject key identifier: 41:59:E7:90:18:18:EC:36:77:50:CC:20:81:E6:EC:11:35:01:C9:ED
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 019FAC3ECEF87D47E2E3D276DF31983F1FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number: 1674
Signing time: Wed 29 Jul 2026 05:00:25 +0000
Manifest this update: Wed 29 Jul 2026 05:00:25 +0000
Manifest next update: Thu 30 Jul 2026 05:00:25 +0000
Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: H/9vF9aeyq+G2igPfYNZ1v/JVEmgWRTE2k7jG9VycUg=)
2: bPwyaBbJqcQN7JQtu51i9S9uIaM.roa (hash: SC7PxmBSPghpd6hjRs92LdR0jqsFurZFEwEHVN8gVC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:ce:f8:7d:47:e2:e3:d2:76:df:31:98:3f:1f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Jul 29 05:00:25 2026 GMT
Not After : Jul 30 05:00:25 2026 GMT
Subject: CN=4159e7901818ec367750cc2081e6ec113501c9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:5d:3c:8a:16:d9:4a:86:09:ae:10:ea:e6:87:
ba:eb:6b:2a:fd:6b:d0:6a:74:98:b1:37:26:88:16:
fd:a2:98:92:a3:4d:9a:46:ed:57:8d:9a:dd:0a:c5:
78:82:95:70:65:0b:f2:cf:92:44:f4:c6:66:d4:30:
7f:aa:89:a9:de:51:66:fe:88:22:bb:6e:2d:86:28:
ad:1f:8e:cc:96:8d:24:f3:ae:a0:06:66:43:7d:42:
d3:6d:44:1e:9d:6c:c6:88:bf:21:17:af:41:62:31:
8d:84:ee:d7:05:3c:31:f1:62:2d:d9:b0:8e:44:c7:
c4:f8:af:3b:e6:92:79:c5:1e:b2:34:64:6c:b4:10:
ec:ce:a6:44:e7:c6:45:41:c2:69:b6:0a:22:92:ea:
84:74:7a:73:6c:07:12:bf:f5:c5:8a:e4:3f:7c:bc:
50:02:f5:ee:31:b0:ea:c0:f6:97:ea:fd:56:7e:ad:
8f:c3:d0:4c:d9:8b:3f:5a:77:c4:62:64:e8:95:0d:
56:41:6a:33:ee:bf:7e:5e:6f:34:e9:15:d5:dd:9a:
33:1c:b4:23:bb:69:84:40:74:ed:0b:5b:fd:d6:67:
50:26:8b:e7:16:e1:e9:00:e7:3d:6c:43:24:b7:c8:
ea:fe:0d:f3:cd:23:07:a8:c4:7c:f2:f0:45:5a:76:
87:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:59:E7:90:18:18:EC:36:77:50:CC:20:81:E6:EC:11:35:01:C9:ED
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:d3:8a:8d:5c:19:26:33:a1:13:93:02:c0:de:a5:9c:6c:b6:
f1:67:da:35:24:42:dc:9f:2d:59:ba:f7:ff:71:da:f4:2e:8d:
db:10:47:0d:15:51:d1:15:6e:9c:f5:e3:ce:49:42:98:f0:30:
1a:22:34:ee:db:a9:3c:7b:47:ed:b3:ef:a6:0f:4e:95:fb:1c:
cf:7e:74:ed:1a:50:8d:9b:31:1f:cb:80:d3:66:1f:0c:84:74:
12:65:b6:84:d9:80:c5:98:90:26:7a:24:62:0c:58:81:b7:ae:
40:a6:6f:a7:c0:7b:12:59:04:13:7b:5a:ce:53:4f:c2:d3:6e:
d5:a0:94:05:f5:da:4e:85:f4:05:fc:be:77:29:cd:24:b8:b9:
fd:05:b2:2a:ed:de:db:aa:b4:1c:3e:2f:e5:19:d9:61:ae:7e:
f1:7b:ab:af:38:18:a3:aa:ae:11:5e:4d:e7:97:ce:07:01:94:
5f:d2:a1:83:b0:4c:b8:27:84:06:ef:87:17:52:8c:b7:29:2f:
f8:6b:ed:cd:df:0a:24:45:4a:d2:c6:80:63:3c:68:17:9d:65:
10:6a:d4:0e:36:e7:5a:4f:16:19:51:f1:a1:33:d2:36:fa:5a:
fd:6e:fc:49:09:5d:c7:33:a4:42:b0:a8:5f:60:c3:6c:be:43:
e7:fd:16:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:32:26 2026 by rpki-client