Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
File: K8wc-LjiEGa27GR2l9SUXY-bsFs.mft (raw, json)
Hash identifier: 5MdZ5wrWP5mV92HFij9eFa9GF4Dmc9Iu/lLY8kTOCIE=
Subject key identifier: 63:E9:2D:20:5E:27:F8:83:30:0E:F6:E5:48:EA:4B:FB:D1:DF:C1:4E
Authority key identifier: 2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
Certificate issuer: /CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Certificate serial: 019DA41D1A9E2C06816F2D9A05A754111B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
Manifest number: 146E
Signing time: Sun 19 Apr 2026 05:01:03 +0000
Manifest this update: Sun 19 Apr 2026 05:01:03 +0000
Manifest next update: Mon 20 Apr 2026 05:01:03 +0000
Files and hashes: 1: K8wc-LjiEGa27GR2l9SUXY-bsFs.crl (hash: B1RLJ8ZNPh/otLqZVtyfxiYij0YgDNRFin0u8PwbN10=)
2: ZM57jrln1EaVHEwU5MBtcduC4e4.roa (hash: +8l3wG8lWR8TlssuoyNr7f8nQtvEX05fyS/cABW+fVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:1a:9e:2c:06:81:6f:2d:9a:05:a7:54:11:1b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Validity
Not Before: Apr 19 05:01:03 2026 GMT
Not After : Apr 20 05:01:03 2026 GMT
Subject: CN=63e92d205e27f883300ef6e548ea4bfbd1dfc14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:86:63:fb:7f:a9:5a:87:5d:d8:c2:53:58:
77:27:8a:52:fd:17:fe:c5:24:58:21:b2:55:c7:4b:
d8:04:b7:9d:a1:bd:5f:f0:38:82:d5:83:fb:a9:91:
6a:22:8c:65:14:46:a1:0d:bb:7e:ca:26:c9:d6:c1:
1f:a1:05:79:3b:84:10:87:11:db:77:be:29:77:72:
b3:4f:e7:85:f7:a9:30:75:d6:37:5e:c9:ba:1d:15:
85:a6:33:69:96:86:7d:3a:4b:52:04:84:af:9c:d1:
dc:c1:ff:d0:cb:27:47:b1:2b:3a:7c:48:e1:88:1e:
ac:94:7b:61:5f:0e:5f:f8:e7:42:a1:f2:5b:05:28:
12:32:21:23:c0:64:5d:e5:a1:4a:25:67:cb:e8:81:
8a:0b:b1:8b:12:3b:9d:22:52:89:84:6e:d2:58:36:
b2:29:c6:ee:ab:cb:c4:09:e5:f4:97:6f:df:ca:de:
db:c5:1a:8d:31:75:8d:67:7c:80:89:6d:5f:2c:92:
1a:22:4e:c5:64:84:f7:df:16:74:65:8c:ca:a0:e8:
ea:80:3f:35:3b:16:a8:95:c7:55:21:68:8d:b6:a6:
90:38:90:11:2f:35:ba:47:e7:eb:5c:6d:ae:5a:86:
6f:81:6f:74:da:0f:f8:75:f2:ec:17:0e:a1:2d:79:
4e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E9:2D:20:5E:27:F8:83:30:0E:F6:E5:48:EA:4B:FB:D1:DF:C1:4E
X509v3 Authority Key Identifier:
keyid:2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:cd:fa:ca:14:f9:b7:f6:d5:47:59:68:cd:74:51:cf:bb:4f:
42:64:bf:69:ba:a7:fc:5e:42:58:48:ca:60:2c:d0:41:f1:52:
77:e9:12:4a:d5:86:40:d9:4e:d5:38:31:c4:64:1d:7a:0e:f2:
c0:4b:a6:19:ca:65:4e:94:32:9b:93:57:25:e1:da:fe:09:e4:
da:ff:01:df:4d:15:5d:46:13:05:9f:65:be:e3:3a:fe:74:8a:
c1:78:80:7f:c9:d7:90:f2:3f:06:0f:ce:35:30:b8:a1:9d:c8:
76:c8:18:b4:d2:52:99:ed:53:ba:fe:7c:39:3c:96:0a:e8:54:
39:c4:89:b8:5f:86:37:da:bd:44:f8:31:1e:3f:af:3c:2e:f2:
d2:bc:31:2b:ee:a6:84:e2:97:93:f2:87:b0:32:f4:52:d9:ed:
9f:ec:4b:b6:dc:db:d7:24:eb:20:da:87:ad:a3:2f:21:49:a7:
5c:72:28:63:e9:e3:0f:01:28:4b:23:98:a1:50:59:dd:2e:48:
e3:05:82:cb:4b:0f:b1:c6:9a:7f:6f:30:8e:45:c5:51:42:bd:
0e:78:83:0e:21:ce:c6:b8:61:2a:87:30:c2:21:d8:87:70:07:
61:95:88:4d:62:3f:e9:35:a1:69:76:75:35:9d:76:18:07:b1:
62:fa:a2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:51 2026 by rpki-client