Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
File: K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft (raw, json)
Hash identifier: HJqSFLYzZjkFawGPJpyWtWaVmtJB1Z5GYXvuvzVCA8s=
Subject key identifier: C5:D8:95:06:EC:45:9B:6D:8A:1E:A9:E0:03:35:E4:D5:AA:17:4D:97
Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
Certificate issuer: /CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Certificate serial: 019CA9461D260B00C66372DC84533FF25960
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
Manifest number: 05F3
Signing time: Sun 01 Mar 2026 12:01:10 +0000
Manifest this update: Sun 01 Mar 2026 12:01:10 +0000
Manifest next update: Mon 02 Mar 2026 12:01:10 +0000
Files and hashes: 1: Fz37EzbKmOLuj47DZyVy-jxm8-Q.roa (hash: A6w0ljzejsJu2FbOvEwlydaqHScmNkC+q2dwLDsAXsw=)
2: K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl (hash: 0OaYuhXN58TavAvQFCvC9HY7RSz9Kad8lfNE9cpTUCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:1d:26:0b:00:c6:63:72:dc:84:53:3f:f2:59:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Validity
Not Before: Mar 1 12:01:10 2026 GMT
Not After : Mar 2 12:01:10 2026 GMT
Subject: CN=c5d89506ec459b6d8a1ea9e00335e4d5aa174d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:23:10:af:51:17:1c:c3:87:53:56:1c:48:a4:
da:d5:ff:d0:b0:a8:b5:2f:b5:f4:c9:d8:7a:a7:9c:
87:61:77:ba:ed:b3:dc:1d:f5:0d:9b:83:cd:a1:f5:
a5:b2:3c:25:2f:33:97:e3:f6:b1:8f:f4:0c:23:b2:
2a:ed:bf:02:a5:f9:0e:42:13:bd:b6:61:7c:ef:a9:
cc:a2:db:15:e4:84:26:26:7c:e2:33:70:68:64:de:
a5:08:5d:b5:62:2a:81:29:39:a6:75:94:9e:f2:18:
2c:25:ed:0d:84:43:ea:8a:7d:44:19:3c:83:27:8c:
61:da:9c:b8:0a:13:0d:c3:ac:71:13:4c:4f:6d:80:
f3:5e:65:59:ef:d2:f1:d0:80:14:4a:51:64:d3:68:
f1:5b:00:c7:b7:9d:5d:19:18:6d:f6:46:68:85:c4:
7e:dd:59:97:00:34:75:5e:de:38:91:6e:f6:ae:c6:
c3:8b:b0:df:ea:ab:30:ab:3a:91:b4:4e:08:4e:99:
8d:34:f2:73:7c:c5:2d:b6:f8:2d:db:11:9f:b6:a2:
75:b3:da:86:43:72:53:e4:96:8d:01:9c:83:6e:ba:
48:31:9a:04:d8:86:e3:c6:f0:61:57:f6:d7:ed:60:
70:2d:93:85:41:e0:cb:b2:68:d3:b4:8d:1a:18:12:
23:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D8:95:06:EC:45:9B:6D:8A:1E:A9:E0:03:35:E4:D5:AA:17:4D:97
X509v3 Authority Key Identifier:
keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:01:ac:fb:68:af:5a:29:0f:d8:3a:98:cb:f0:59:77:3b:28:
83:ea:02:42:49:7c:67:73:ee:7e:16:7a:7f:74:8c:8a:df:fb:
b9:da:0f:69:c2:12:12:75:74:9c:8f:d4:f9:c5:9d:55:ec:8b:
c7:25:c3:4b:2f:27:b4:20:8b:83:fe:a4:e8:c6:de:59:b6:94:
0b:93:d0:6e:d1:f5:df:e5:29:65:90:f1:00:2a:28:5a:48:c5:
79:4a:18:d8:4e:ae:88:93:dc:21:2a:d1:8b:38:77:29:c3:b7:
21:ab:e3:47:55:ce:9e:ea:1f:86:d7:b9:2d:35:2b:d3:af:8f:
09:28:26:07:0c:98:30:fc:d7:d9:1f:1b:15:39:05:c8:0d:4d:
72:e6:83:f5:bf:1e:c7:d6:b2:91:c0:72:7a:84:f0:6e:9c:1f:
78:6e:bc:0c:58:45:de:00:2d:62:8f:64:ad:83:ad:ae:e7:1c:
f2:ac:35:eb:ca:b9:bd:14:7b:e9:80:28:47:13:a5:a1:d4:d7:
13:9e:90:b3:9a:21:a4:3a:13:94:73:52:dc:e2:63:25:07:95:
50:3d:1c:1e:9f:7f:2c:fd:dc:39:15:2c:f1:25:b3:fb:15:ad:
b6:81:79:02:df:60:cd:36:01:01:b1:54:24:51:10:b4:43:b7:
ec:a0:0f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:06:45 2026 by rpki-client