Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
File: K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft (raw, json)
Hash identifier: iN+cXnkjzmWReFIefqjN+6MoKpahy0bqljzr/c08pS4=
Subject key identifier: 1D:B0:CC:66:F0:A3:6D:9D:1F:3B:77:84:48:F2:D3:A6:FA:14:F5:F1
Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
Certificate issuer: /CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Certificate serial: 019D9AAC1B25CA3ACA7F0AF75AD5EE93B518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
Manifest number: 0670
Signing time: Fri 17 Apr 2026 09:01:03 +0000
Manifest this update: Fri 17 Apr 2026 09:01:03 +0000
Manifest next update: Sat 18 Apr 2026 09:01:03 +0000
Files and hashes: 1: Fz37EzbKmOLuj47DZyVy-jxm8-Q.roa (hash: A6w0ljzejsJu2FbOvEwlydaqHScmNkC+q2dwLDsAXsw=)
2: K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl (hash: Ej66FWM3ionOEIKypuchqXRNRfwxz8M8CsGy61OyCFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:1b:25:ca:3a:ca:7f:0a:f7:5a:d5:ee:93:b5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Validity
Not Before: Apr 17 09:01:03 2026 GMT
Not After : Apr 18 09:01:03 2026 GMT
Subject: CN=1db0cc66f0a36d9d1f3b778448f2d3a6fa14f5f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:79:b8:7f:42:5b:7a:4b:d6:da:cd:db:bb:
13:f2:27:9a:37:e0:c6:22:7d:a0:06:07:8c:32:8e:
48:e4:12:80:7d:d4:1e:10:41:66:c1:15:eb:10:7d:
e9:46:21:41:fb:a0:7b:a5:cf:39:89:da:2a:f3:97:
ba:24:ca:6e:bb:e5:98:b1:33:76:34:42:12:66:84:
3e:4a:ee:71:3b:36:c6:bd:32:e1:ed:7c:93:17:03:
f4:18:7a:21:b6:df:bf:cb:c0:54:59:0b:3c:db:36:
46:e1:12:97:9d:f2:ce:dc:36:8d:8a:93:7c:5a:6a:
8f:1d:59:c5:34:50:ad:78:7b:46:87:d5:31:0b:c0:
84:32:65:ff:82:49:e1:5e:15:ba:8b:d8:d4:8d:bd:
44:9b:71:4c:34:94:2c:70:4c:dd:72:9d:35:d0:ee:
8c:07:77:b6:56:f9:c6:36:89:d3:be:d3:b2:d8:a7:
06:53:95:fd:98:34:47:2c:c8:58:80:e8:f6:8b:33:
0d:c5:c8:3e:1c:f9:36:1d:e9:f7:e8:e3:34:10:d5:
3e:98:ad:a2:58:81:95:a5:6f:a0:16:b7:a6:f7:0b:
f2:50:b9:e1:3f:fd:a8:ab:77:a3:d0:a0:26:08:da:
61:12:60:fa:cd:a3:39:bf:41:1d:95:bb:31:a4:23:
6c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B0:CC:66:F0:A3:6D:9D:1F:3B:77:84:48:F2:D3:A6:FA:14:F5:F1
X509v3 Authority Key Identifier:
keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2b:bf:3d:35:90:e0:ec:c9:66:a6:22:14:5a:ce:f4:56:6b:
78:0b:ff:bd:36:ac:bd:c0:37:6a:c9:c8:bf:4a:78:65:95:6a:
ad:f9:ee:90:b0:f6:5d:00:aa:0f:25:40:7d:df:82:b1:5d:7c:
8d:64:f9:89:36:d1:b0:6d:34:a5:fe:c6:12:b3:a4:bb:35:c1:
5b:0c:6f:0b:a9:36:c6:b8:ac:bd:8c:97:25:87:0a:c3:f3:96:
7c:09:d0:01:65:bf:a6:6c:24:e5:6f:23:db:0a:e4:4a:e5:39:
89:f2:3c:77:b1:66:e3:a2:2f:33:79:f2:72:25:ef:c1:84:2d:
6a:46:98:21:a4:d0:a4:28:a1:6d:16:13:c1:43:8c:10:9a:9b:
cd:ab:ff:0f:13:c5:6f:10:1e:4b:35:2d:23:aa:78:fe:b3:46:
f7:b8:60:8b:6e:a9:08:77:e5:43:b7:1a:93:ef:52:a1:2d:a3:
0c:ce:b5:a8:a6:23:17:47:9c:85:b7:7e:62:5b:4b:ec:67:80:
81:68:60:0d:e4:30:9b:34:2c:7c:cb:20:97:27:8f:8b:75:63:
a6:5c:4e:86:b8:9a:64:f7:3a:f4:ba:e7:c7:66:c8:1f:1c:66:
54:2e:d2:51:92:40:ff:8c:e7:6a:10:9d:24:c1:b7:87:f9:69:
02:c2:67:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:22:57 2026 by rpki-client