Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
File: Kw51nA6mfY_3IqrIh8fszs3tPsc.mft (raw, json)
Hash identifier: cg0fW5QU+XJnqld1NnEEqpJKwguVxqPdMbM12Bu+DVc=
Subject key identifier: D5:76:51:BB:38:6C:B3:BF:21:21:00:D3:9C:77:BD:7F:DC:DA:6D:F1
Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
Certificate issuer: /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Certificate serial: 019CAAFD813E887F97A954BE4085124016A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
Manifest number: 13F4
Signing time: Sun 01 Mar 2026 20:01:06 +0000
Manifest this update: Sun 01 Mar 2026 20:01:06 +0000
Manifest next update: Mon 02 Mar 2026 20:01:06 +0000
Files and hashes: 1: 0jTzYvTvypbh1yQ9qTkBShn1rSM.roa (hash: QibTqze93VmbmNq8kPjpcqM+im2jq6u0y0JdEMbhwrI=)
2: Kw51nA6mfY_3IqrIh8fszs3tPsc.crl (hash: c8njna1Y0KjbYww0U0eM2qylI3TtvrBUF3jlreD/B48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:81:3e:88:7f:97:a9:54:be:40:85:12:40:16:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Validity
Not Before: Mar 1 20:01:06 2026 GMT
Not After : Mar 2 20:01:06 2026 GMT
Subject: CN=d57651bb386cb3bf212100d39c77bd7fdcda6df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:1b:9d:c3:cb:ad:ff:c1:a8:8b:70:ea:74:
66:b8:ea:0b:48:ae:25:74:00:eb:ce:d2:ac:d3:e9:
5d:fa:2e:b0:3a:64:36:6c:88:d3:54:02:57:05:d3:
54:a4:8b:54:dd:06:20:c5:40:27:23:26:64:94:bf:
93:e4:5b:3f:6f:a0:e9:a2:e9:b4:b1:f4:05:4d:d5:
f6:fd:d2:c4:66:f0:1b:32:14:82:5e:01:87:ab:70:
dd:ea:fc:eb:77:75:3e:4e:d8:b1:8c:0a:25:62:8f:
85:f0:a8:8b:cb:6c:fd:32:73:ea:b0:f3:41:b2:a8:
18:31:33:1b:ad:c6:6e:68:17:d1:d5:e7:ab:20:07:
de:4d:ca:78:3d:13:5f:2f:7e:ce:bd:6f:2f:5e:41:
f6:e6:d8:6b:43:81:4a:aa:66:38:a3:02:99:ef:16:
5c:2d:a9:9b:ea:02:b2:e0:72:70:92:0b:29:48:c9:
d4:bf:6a:27:4b:fc:4a:c7:fd:51:18:6c:a0:c8:94:
c1:88:f6:d6:0f:cb:44:6d:10:a9:15:42:d5:f1:fe:
89:de:39:e1:49:55:d3:2b:45:9b:5b:96:0d:5c:2b:
6b:dd:10:c9:73:44:e3:bb:75:87:b8:07:7a:ba:0f:
f5:32:8c:30:48:70:ce:50:29:1a:49:a3:a8:cb:1f:
59:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:76:51:BB:38:6C:B3:BF:21:21:00:D3:9C:77:BD:7F:DC:DA:6D:F1
X509v3 Authority Key Identifier:
keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:10:69:54:ba:d6:80:72:e1:20:15:a6:69:6e:34:89:1b:17:
c8:2b:b4:ec:71:6c:89:04:5a:b2:fe:f5:5b:62:51:06:08:40:
de:28:45:bf:46:8c:5a:b8:2e:18:ce:ab:fd:89:0f:a1:ad:9c:
ae:d8:df:00:02:4a:10:1d:5a:e8:87:69:1c:72:ce:ed:92:0c:
6e:62:5b:63:89:6d:2f:61:fa:39:0c:3c:ff:ea:a6:69:5b:25:
5e:74:cd:d7:b5:76:30:71:d1:26:b6:4b:5d:ff:2c:75:70:a6:
04:ed:bd:aa:c4:17:47:3e:92:0c:9d:23:e2:a8:d1:b7:48:ed:
c1:37:a1:59:0b:e3:a8:7c:70:d8:8b:42:f4:92:b4:0e:4a:b4:
ce:ca:14:ea:56:49:4a:de:43:2b:c7:dd:d0:30:d2:e9:82:ce:
71:65:b0:37:c8:f3:55:ba:33:57:ca:4f:ce:18:aa:93:5c:95:
93:26:06:42:9f:49:d6:bf:63:80:21:05:8a:b4:d7:a1:4e:af:
62:cb:96:66:f6:e0:99:b4:76:e5:37:72:e0:d7:31:cc:db:31:
74:6f:31:dd:0c:a2:10:d5:92:dd:df:df:ff:e5:fc:0c:f7:d1:
3a:99:2b:bf:6e:ba:86:5c:fb:b6:4e:e5:76:21:3a:24:6b:21:
d1:f0:cc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:34:40 2026 by rpki-client