Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
File: K8wc-LjiEGa27GR2l9SUXY-bsFs.mft (raw, json)
Hash identifier: ETePlIE3UUgo4nhI7trTbbwrwVC4x5ucE+1cVDGd5yE=
Subject key identifier: 80:63:5E:91:38:CE:DE:1F:FA:62:1A:CA:3E:E5:C7:CA:F4:C1:4B:C6
Authority key identifier: 2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
Certificate issuer: /CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Certificate serial: 019CAAFD8D1315F189B4CD488F3BEC7DAA24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
Manifest number: 13ED
Signing time: Sun 01 Mar 2026 20:01:09 +0000
Manifest this update: Sun 01 Mar 2026 20:01:09 +0000
Manifest next update: Mon 02 Mar 2026 20:01:09 +0000
Files and hashes: 1: K8wc-LjiEGa27GR2l9SUXY-bsFs.crl (hash: juOsVO6xn+8xwWod9UoVrQsgX8XKalhoGJNHzto4rcg=)
2: ZM57jrln1EaVHEwU5MBtcduC4e4.roa (hash: +8l3wG8lWR8TlssuoyNr7f8nQtvEX05fyS/cABW+fVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:8d:13:15:f1:89:b4:cd:48:8f:3b:ec:7d:aa:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Validity
Not Before: Mar 1 20:01:09 2026 GMT
Not After : Mar 2 20:01:09 2026 GMT
Subject: CN=80635e9138cede1ffa621aca3ee5c7caf4c14bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:29:3a:e5:8b:7e:52:fd:e4:b3:aa:b5:5a:
d8:6c:f8:83:d4:22:b9:a1:f4:9b:62:8a:25:02:8a:
89:b4:11:09:21:30:ad:2c:a0:c1:26:c6:b4:48:10:
e4:18:5c:9a:b7:5c:28:e2:65:67:86:c4:d9:3f:9a:
22:22:23:1a:25:c3:b5:59:02:4c:81:7a:06:bc:eb:
06:98:f4:06:91:8e:2e:22:c8:4a:1d:42:c9:22:a4:
91:cb:a5:34:5f:78:55:79:9e:5a:01:b3:4a:7d:1f:
8e:ec:2f:65:ca:36:1a:bd:80:1f:00:b0:38:d2:59:
50:63:2a:47:a6:5e:16:85:7f:28:0e:80:8b:92:14:
10:82:92:46:3c:7c:db:c8:3c:d9:90:c0:43:6b:72:
05:4b:04:a4:21:90:e7:a8:79:a5:5a:b0:b1:81:fe:
d7:82:6f:6c:33:4b:d9:da:e2:7f:76:75:ec:db:8b:
be:09:7f:f1:f8:87:99:f8:0a:50:ce:85:e7:05:c1:
80:19:32:5c:5f:1c:57:5a:89:a2:5b:8f:18:97:b7:
0d:dc:c0:e2:6a:bc:f1:52:6c:0a:23:69:c5:12:6c:
61:94:72:c9:67:8e:ed:24:73:7f:2f:a8:65:fd:05:
14:77:0c:32:7a:e0:d5:4e:f5:c1:cc:b9:87:f5:09:
d8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:63:5E:91:38:CE:DE:1F:FA:62:1A:CA:3E:E5:C7:CA:F4:C1:4B:C6
X509v3 Authority Key Identifier:
keyid:2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:d4:79:70:3a:ed:9f:3c:4b:f5:00:7d:09:c9:8b:7a:96:a9:
8a:43:a2:3a:13:65:ee:6b:d0:06:0c:1e:03:8f:37:72:da:5b:
b7:6f:2f:fb:30:3b:d7:0e:71:8c:d3:2a:b6:fa:cb:ae:31:b8:
05:5a:e5:96:37:f3:b0:5a:16:1e:7f:8a:97:d5:77:42:a1:1a:
e3:e1:46:76:fc:79:45:b3:5a:f7:82:c7:f5:ba:bb:fc:5b:85:
47:be:6e:1c:08:46:fe:e7:f7:c8:af:36:ed:a3:1d:14:d9:7f:
ab:b0:b8:4d:6b:66:0c:1e:30:ad:13:de:03:6c:7c:66:7c:c9:
df:0b:38:63:08:f8:83:00:53:bf:b9:33:ac:de:8f:66:ec:e3:
df:8b:27:07:ad:a2:eb:11:a5:0e:78:55:6f:05:d8:8e:13:b6:
e7:04:9a:f3:c9:d9:5d:20:d1:b1:12:46:54:6f:40:79:12:77:
52:73:77:b8:28:20:6c:6a:e7:9b:b3:9d:1a:d1:a8:a2:84:ff:
54:db:8a:78:d3:38:4e:72:f6:b6:42:bd:58:df:ec:51:a2:66:
7c:98:d3:dd:42:0d:3c:79:cc:f5:4e:b2:5d:61:79:7f:ef:7f:
ab:9a:9f:bc:12:a0:6f:dc:7c:2b:ee:f9:44:d4:26:d5:7a:81:
4d:86:75:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Y0TFfGJtM1IjzvsfaokMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiY2MxY2Y4YjhlMjEwNjZiNmVjNjQ3Njk3ZDQ5NDVkOGY5
YmIwNWIwHhcNMjYwMzAxMjAwMTA5WhcNMjYwMzAyMjAwMTA5WjAzMTEwLwYDVQQD
Eyg4MDYzNWU5MTM4Y2VkZTFmZmE2MjFhY2EzZWU1YzdjYWY0YzE0YmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJUpOuWLflL95LOqtVrYbPiD1CK5
ofSbYoolAoqJtBEJITCtLKDBJsa0SBDkGFyat1wo4mVnhsTZP5oiIiMaJcO1WQJM
gXoGvOsGmPQGkY4uIshKHULJIqSRy6U0X3hVeZ5aAbNKfR+O7C9lyjYavYAfALA4
0llQYypHpl4WhX8oDoCLkhQQgpJGPHzbyDzZkMBDa3IFSwSkIZDnqHmlWrCxgf7X
gm9sM0vZ2uJ/dnXs24u+CX/x+IeZ+ApQzoXnBcGAGTJcXxxXWomiW48Yl7cN3MDi
arzxUmwKI2nFEmxhlHLJZ47tJHN/L6hl/QUUdwwyeuDVTvXBzLmH9QnYowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIBjXpE4zt4f+mIayj7lx8r0wUvGMB8GA1UdIwQY
MBaAFCvMHPi44hBmtuxkdpfUlF2Pm7BbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzh3Yy1MamlFR2EyN0dSMmw5U1VYWS1ic0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8xOWFjNTgtYzdhZi00MGZkLWIyZjct
MGE3ZTAxOTg5OWNmLzEvSzh3Yy1MamlFR2EyN0dSMmw5U1VYWS1ic0ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8xOWFjNTgtYzdhZi00MGZkLWIyZjctMGE3ZTAxOTg5OWNm
LzEvSzh3Yy1MamlFR2EyN0dSMmw5U1VYWS1ic0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv9R5cDrt
nzxL9QB9CcmLepapikOiOhNl7mvQBgweA483ctpbt28v+zA71w5xjNMqtvrLrjG4
BVrlljfzsFoWHn+Kl9V3QqEa4+FGdvx5RbNa94LH9bq7/FuFR75uHAhG/uf3yK82
7aMdFNl/q7C4TWtmDB4wrRPeA2x8ZnzJ3ws4Ywj4gwBTv7kzrN6PZuzj34snB62i
6xGlDnhVbwXYjhO25wSa88nZXSDRsRJGVG9AeRJ3UnN3uCggbGrnm7OdGtGoooT/
VNuKeNM4TnL2tkK9WN/sUaJmfJjT3UINPHnM9U6yXWF5f+9/q5qfvBKgb9x8K+75
RNQm1XqBTYZ1HA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:53 2026 by rpki-client