Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: qMO+Rmr1FJzAx+d++GQ2lSkem+d1xSqoAtnUxSZwWUY=
Subject key identifier: CD:E0:65:29:DB:D8:5E:3E:37:FD:CB:B3:8B:D0:56:F4:E9:B6:40:41
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 019CA9B39D407A93BF7F0DFF40590AA01EC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 14:00:46 +0000
Manifest this update: Sun 01 Mar 2026 14:00:46 +0000
Manifest next update: Mon 02 Mar 2026 14:00:46 +0000
Files and hashes: 1: 267NH16MzH47Zyj0K4t3Pr0uSro.roa (hash: mBBDPMXvF9insE4ynTzv2acZX93bp3bRK4WTLefzCSs=)
2: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: 87+EXGGWq8adhYgAAHK2o0Yn2UdfoTrrrBwnI5DL1rY=)
3: u8GJzQSAm-GKtJeGy5swVGHnmuw.roa (hash: XBITkt7W+EBNbhhroLYYPKNKyDfk5alZ3rm7ik7fTf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:9d:40:7a:93:bf:7f:0d:ff:40:59:0a:a0:1e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Mar 1 14:00:46 2026 GMT
Not After : Mar 2 14:00:46 2026 GMT
Subject: CN=cde06529dbd85e3e37fdcbb38bd056f4e9b64041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ca:e8:1e:b0:33:6f:9b:1d:eb:44:dc:39:88:
5d:71:51:83:7a:82:04:93:b1:75:58:1d:0a:5d:b1:
33:16:03:5c:6c:39:96:81:af:9b:64:c6:02:ec:b8:
67:ae:3e:61:61:bc:ea:40:a4:48:77:d0:f9:b3:4f:
93:49:a5:8e:2b:0a:be:95:23:9a:ee:72:9e:75:32:
22:93:c6:01:9f:3b:15:98:a5:1e:00:45:6a:e0:5c:
46:34:2f:7f:0b:1a:e9:21:6d:52:4c:e2:33:6e:16:
25:d9:ed:cd:38:6a:cd:af:b2:7e:3b:7f:eb:4f:c0:
be:32:3e:90:83:4e:79:23:63:28:9d:7d:ea:ed:b7:
7c:8c:35:43:d7:16:e0:1d:b2:db:ae:7d:b3:16:19:
93:a1:9f:80:73:6f:10:23:06:1f:26:d0:ad:30:92:
08:6b:a0:c9:bb:6d:58:1a:f0:bc:2a:19:65:21:65:
a5:a4:1e:47:e3:c3:48:82:1b:69:c1:21:85:6c:66:
73:9f:92:1d:02:ee:11:d9:c1:d2:39:76:89:44:13:
fb:a3:f1:06:c8:80:ce:de:74:c2:0e:30:fc:eb:cf:
8d:fc:44:f3:bb:3b:bb:17:5d:85:a2:eb:63:a7:6b:
30:00:59:c6:ef:b9:22:4f:e4:bf:7a:9d:63:72:ea:
df:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E0:65:29:DB:D8:5E:3E:37:FD:CB:B3:8B:D0:56:F4:E9:B6:40:41
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4e:09:99:84:71:ee:c5:c0:b5:a8:18:a6:90:a4:70:38:16:
17:98:a8:a1:63:23:8b:0e:a7:d5:84:93:ca:a2:4e:bb:b2:b8:
e9:da:31:2a:19:03:5a:69:ae:08:68:d2:4a:a3:6e:77:5a:f0:
2d:6b:4a:ae:ca:8f:da:85:ce:7b:e8:23:09:53:9f:87:66:f4:
52:b9:7c:ac:fd:6e:7c:6e:bc:3c:e9:0d:20:c1:70:f5:f4:1c:
0a:40:28:17:7c:98:74:8e:a1:cd:e4:ee:1f:1e:75:59:28:0d:
86:af:6d:4b:99:fd:32:a7:d4:4d:f2:6b:7c:52:bd:6c:22:73:
af:10:79:0b:12:cb:2d:78:15:99:3a:bf:8f:c6:45:42:9e:52:
4c:79:f2:00:1b:e5:db:45:a6:e1:28:ad:bc:08:3f:ac:0b:92:
ef:bb:5c:5c:fa:65:6d:20:c9:ba:00:e9:fc:ac:4c:3f:0e:0b:
34:0a:04:99:77:5e:5e:1d:78:6f:c6:11:31:1a:90:f7:ee:92:
c6:af:d7:f1:49:13:e3:dd:f8:e1:40:2a:79:22:94:3b:5b:64:
85:f9:b6:13:07:35:78:1c:86:22:12:0d:78:3a:da:61:91:eb:
0d:11:8b:db:cc:69:b0:43:d5:62:05:81:7b:0c:3e:69:71:4e:
e1:54:12:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:42 2026 by rpki-client