Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier: ntiyO1E3sWJie1+tIY7eg1Whncilb1wj56zPgpwUVY4=
Subject key identifier: E6:6B:94:C0:2D:62:4D:13:63:80:E2:E4:DD:4B:D1:4F:95:5D:B1:AD
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 019D9D07EFEC2E95715EC024518B37049F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number: 1563
Signing time: Fri 17 Apr 2026 20:00:36 +0000
Manifest this update: Fri 17 Apr 2026 20:00:36 +0000
Manifest next update: Sat 18 Apr 2026 20:00:36 +0000
Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: 3NXoy30hJBx7vs+oyomDPW12E/DSAnPKUJtcVIMdOoE=)
2: bPwyaBbJqcQN7JQtu51i9S9uIaM.roa (hash: SC7PxmBSPghpd6hjRs92LdR0jqsFurZFEwEHVN8gVC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:07:ef:ec:2e:95:71:5e:c0:24:51:8b:37:04:9f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Apr 17 20:00:36 2026 GMT
Not After : Apr 18 20:00:36 2026 GMT
Subject: CN=e66b94c02d624d136380e2e4dd4bd14f955db1ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:e6:ff:d0:ff:85:66:62:09:2b:d5:15:9a:
4a:4f:41:36:02:56:19:73:d9:b8:46:be:82:27:33:
11:d9:5f:9e:ea:d4:32:9c:aa:34:43:c8:a1:f0:d7:
89:64:ab:57:41:7e:ca:c2:94:c8:6b:d7:74:fa:c0:
3d:8b:f9:de:a4:97:62:2e:7f:a5:44:8c:44:7b:11:
73:65:dd:27:45:bb:1a:10:f1:87:aa:17:f7:8d:43:
15:8b:a4:48:b5:f8:5a:b8:70:2d:cb:9e:95:2b:91:
2e:e2:12:e7:ff:c7:8b:1b:83:8f:08:b7:22:d9:7d:
30:47:b3:dc:ae:bc:f6:53:ea:7b:58:0f:c7:5c:c7:
a7:0c:60:ca:6f:7c:b2:e0:68:a5:c4:72:cf:91:e0:
c9:0e:d9:84:e4:8b:a3:16:61:a0:91:2c:6c:b7:15:
ea:98:ab:16:c3:2d:41:4a:82:a2:36:7f:29:03:65:
6f:9f:be:c7:7e:7d:c8:34:13:81:66:62:96:f6:9f:
06:b4:61:ce:d6:a4:cc:21:6f:39:6f:a0:58:d9:7e:
7c:f3:65:41:8f:99:ea:64:e1:11:58:c6:39:3c:41:
5b:25:a8:0c:9f:ea:ad:e7:71:8d:da:69:49:32:93:
df:00:15:85:49:0c:cb:dd:84:b7:1b:88:5a:a3:b4:
dc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6B:94:C0:2D:62:4D:13:63:80:E2:E4:DD:4B:D1:4F:95:5D:B1:AD
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:78:80:6c:4e:b7:9f:3c:0d:72:76:7d:29:66:1b:f2:3b:f0:
54:8c:f5:5e:3f:2c:a4:3c:89:d7:27:e4:06:0a:fd:27:18:d3:
ab:e8:23:21:99:af:7e:ff:d9:2d:1c:6b:03:61:1a:69:e3:d7:
ef:91:13:b1:12:34:ca:7e:06:66:0e:09:1c:25:58:79:33:82:
d1:53:01:5e:5b:0b:b4:98:fa:5f:b1:66:ec:e6:c8:f3:18:86:
ec:25:9a:1f:24:31:29:16:20:39:0f:da:08:68:d9:f0:25:19:
31:52:09:a4:84:92:76:3d:14:4b:5a:d3:77:7e:ed:16:49:25:
93:51:eb:36:30:93:d6:4d:f3:89:82:f0:26:15:7f:19:1b:a2:
ec:ce:b1:f8:77:03:0b:b9:5d:84:85:b0:04:72:85:be:6c:f7:
58:fd:39:56:70:31:db:82:29:ee:db:1d:92:90:73:cf:27:91:
7d:0e:08:10:7b:b9:46:e8:fa:41:24:af:88:ee:86:fe:aa:e9:
0d:27:0c:1d:a9:b9:ac:21:65:76:9f:c9:5e:54:8c:6a:35:8b:
ff:3a:69:44:7a:a6:13:c7:23:d1:73:e0:41:97:98:cb:31:ab:
e6:bf:74:b3:ea:73:b3:c5:d7:4a:b0:6e:62:d2:e9:f6:40:2a:
4b:2a:3a:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:06:53 2026 by rpki-client