Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
File: K0q0wVF_cy34suyD3krSNo1Fz98.mft (raw, json)
Hash identifier: Xp28SgIkX+0RiXwT+PIW8u8Mq+rod6CnZ/QAJvrrwEk=
Subject key identifier: BE:19:56:B7:A9:0F:2D:A9:81:7B:16:3C:22:B2:0D:9E:00:EE:CD:A9
Authority key identifier: 2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
Certificate issuer: /CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Certificate serial: 019CACB5658246CA50D167FF20CC997A6568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
Manifest number: 1720
Signing time: Mon 02 Mar 2026 04:01:34 +0000
Manifest this update: Mon 02 Mar 2026 04:01:34 +0000
Manifest next update: Tue 03 Mar 2026 04:01:34 +0000
Files and hashes: 1: K0q0wVF_cy34suyD3krSNo1Fz98.crl (hash: TdeSp0lhEnUoWazLbg7oLI8jYsDS7Osr7BUF6KmG0sk=)
2: wtRGbtfLMxnElaTSLfs0-HNZBr4.roa (hash: K9c87c2YTSSv0jFPr/9LcJtSSXghKUVoycOdYeNEeGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:65:82:46:ca:50:d1:67:ff:20:cc:99:7a:65:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Validity
Not Before: Mar 2 04:01:34 2026 GMT
Not After : Mar 3 04:01:34 2026 GMT
Subject: CN=be1956b7a90f2da9817b163c22b20d9e00eecda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:57:19:dd:34:98:15:4f:b4:1a:3c:f5:18:9f:
df:c5:58:20:12:80:4b:c6:35:be:41:e6:12:fe:6a:
e6:58:d7:50:b3:e3:d0:c7:d0:17:95:c0:1e:30:61:
3f:b6:33:47:9b:ad:2b:c8:f7:f1:c0:58:23:d7:e4:
5a:2f:a6:a6:58:77:61:a4:5f:bd:fb:e4:02:19:70:
88:d2:30:eb:27:3c:c3:87:e6:81:30:e5:e1:88:c9:
43:08:e2:0b:e9:a9:10:19:4b:4a:c4:07:99:11:86:
16:5d:ce:aa:2e:01:56:44:26:f7:e3:b3:14:95:98:
9e:52:10:9e:95:f7:ce:56:22:6f:33:88:4a:72:84:
7b:d6:7e:b0:b6:79:0f:7c:de:77:64:9f:45:ae:3c:
e8:54:b0:81:c5:93:de:64:8a:88:4e:45:45:25:1d:
0f:42:ed:d0:b6:55:f9:48:4e:3e:2d:09:6a:98:0e:
2a:e5:a3:22:99:27:3e:fe:78:65:3c:7d:d4:98:86:
13:01:29:3f:04:79:17:95:a1:f5:a9:aa:fd:ea:66:
27:51:01:46:4d:a9:e8:a3:de:7b:6c:e2:65:76:59:
04:9f:52:f7:1f:68:21:d6:e1:31:d7:13:16:60:19:
7d:23:a0:5b:24:cc:f4:5e:06:75:6b:f5:8b:9e:43:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:19:56:B7:A9:0F:2D:A9:81:7B:16:3C:22:B2:0D:9E:00:EE:CD:A9
X509v3 Authority Key Identifier:
keyid:2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:aa:0e:d1:ca:e2:85:e8:22:0f:46:92:05:9b:71:af:b9:3d:
c0:72:a6:e8:c0:5a:d7:2d:96:23:39:0b:2b:cf:4e:a7:2e:f8:
29:10:63:3c:a1:b2:9f:a5:2f:b2:26:d4:8b:f6:40:81:c7:cf:
da:e5:39:7e:65:36:ac:42:14:c7:5a:ed:89:c6:3a:94:0e:db:
b2:5d:8d:18:15:2f:5c:cc:b2:3c:6b:5e:83:65:28:ca:81:3a:
1e:e9:57:f8:c6:9d:00:37:a4:e0:17:f4:43:32:5e:eb:ef:2c:
a0:ba:87:e1:4f:c5:34:3f:cc:86:1e:f1:39:64:ed:fe:d5:e7:
dd:ee:e8:4d:c3:b3:be:90:11:a1:90:44:12:aa:38:b1:78:6a:
70:95:19:dd:d3:ab:54:9e:84:f6:dc:cb:c2:51:2d:90:3a:ec:
88:bd:ae:a3:0f:a6:ae:b3:6b:c8:d8:8f:04:37:e8:ff:e9:e0:
c6:ac:62:7c:f2:3b:12:7a:a1:b8:82:1d:c4:81:13:00:a7:e0:
d1:2a:76:99:7a:37:17:69:bc:e7:d4:49:85:95:1b:91:18:e9:
bb:8e:15:35:70:09:e7:6d:95:54:39:a9:e0:b1:2e:d2:d0:7e:
6d:39:8d:d5:20:6c:06:bb:3b:14:75:0c:c2:65:18:41:75:9c:
d2:3f:c5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:16:48 2026 by rpki-client