Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
File: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft (raw, json)
Hash identifier: Dk+SO3LCl31Z2pOtYZETURcU3ZAo4REwVy/ARAfIAZ0=
Subject key identifier: A7:F2:B5:C6:95:7A:13:3B:CF:00:91:DC:CC:6E:1D:31:21:64:8D:53
Authority key identifier: 2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
Certificate issuer: /CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Certificate serial: 019D9C99FF2C04D39727886B8C5B9BB7873F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
Manifest number: 0244
Signing time: Fri 17 Apr 2026 18:00:31 +0000
Manifest this update: Fri 17 Apr 2026 18:00:31 +0000
Manifest next update: Sat 18 Apr 2026 18:00:31 +0000
Files and hashes: 1: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl (hash: xZ+zQBsgSpUxBm93G8nLIlWbICBnUNFaV8kXZdBwk2Q=)
2: TV4yZeh5gb-YNu16ne89KzqjkHI.asa (hash: ZF+GnFpj0JJbI8NWDxgtBCaESGA8VYEeovm/zlGZB0A=)
3: b2FwzXwPA4h4cgwtnyc60OtTa88.roa (hash: lkanuRYvWV1r1485k4lQhFz2YZsaICmZonIaOSauHis=)
4: sX-7jKd4Jkup4SzLh7V9fhcXJIY.roa (hash: zRqjfBS/ZWhDgqQc0xO/XDUwPIazRjKs3hCDGDdnfh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:99:ff:2c:04:d3:97:27:88:6b:8c:5b:9b:b7:87:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Validity
Not Before: Apr 17 18:00:31 2026 GMT
Not After : Apr 18 18:00:31 2026 GMT
Subject: CN=a7f2b5c6957a133bcf0091dccc6e1d3121648d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:84:44:39:d9:8f:d0:07:44:6b:c9:74:8f:fd:
be:24:d3:b3:1a:30:a0:a2:07:71:a8:36:fc:69:7b:
3d:e1:f3:6f:bd:01:8f:24:c6:10:ef:38:b6:f2:38:
45:98:27:75:fb:fe:7d:f9:93:84:05:4a:bc:f5:6c:
da:50:f1:00:f6:5f:aa:3c:34:ee:92:52:82:14:11:
44:e4:b5:ae:20:0e:c3:73:e1:7f:b8:3e:3d:50:24:
79:6c:ac:9a:ca:6d:b9:7d:9a:3a:14:2a:73:6c:86:
68:1c:17:cf:bd:59:d2:f9:bb:81:29:9b:58:91:05:
ba:a8:3a:bd:5f:56:23:b6:9f:7f:47:7a:5b:38:f2:
d5:64:22:aa:7a:61:a6:21:59:54:3f:ca:6c:91:df:
dd:5c:f8:8e:21:37:21:5d:0f:57:f2:47:93:fc:99:
41:f5:87:31:a3:37:12:15:e9:d4:19:95:48:31:40:
8d:4a:dd:5a:9e:c2:a8:75:ec:00:43:68:6f:a5:f5:
a1:b5:01:70:81:17:69:6e:2d:55:60:0e:ea:5a:1e:
4a:bd:9f:28:df:1e:e7:e5:95:33:dd:71:6f:93:3d:
79:84:92:28:84:07:39:87:6b:3d:7c:bd:cd:3e:0a:
e0:d6:44:4b:25:6a:2b:17:19:f7:9c:90:67:a4:f5:
dc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F2:B5:C6:95:7A:13:3B:CF:00:91:DC:CC:6E:1D:31:21:64:8D:53
X509v3 Authority Key Identifier:
keyid:2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3b:61:a3:11:3d:97:17:f3:fd:e3:d2:aa:47:5d:e8:fc:b8:
80:13:67:fb:a7:c5:15:db:07:bf:56:40:28:d2:b5:31:e1:1a:
04:7d:cc:45:81:fa:05:ee:8f:20:03:bd:00:f8:c0:b5:97:f1:
11:c2:c9:d7:26:0a:fa:29:e0:e4:0c:63:ff:1e:21:21:ba:3a:
2f:bb:65:21:60:f0:2d:af:07:16:b9:5d:09:5b:ad:28:bf:2c:
3d:8d:58:8b:e0:7a:75:26:d8:6b:8c:fc:56:95:bb:fd:e0:8b:
b8:e4:ec:9f:fb:7f:54:f1:a2:a3:ae:00:87:0d:e8:fe:21:76:
28:4a:18:f5:1b:21:91:a7:31:e5:97:96:47:bd:70:b3:ec:40:
fe:94:c1:92:db:17:6a:54:ed:b4:10:dc:56:2c:98:66:d2:25:
b0:96:47:a5:b0:c3:d8:95:ea:fb:22:45:7f:ef:76:dd:b4:bc:
41:4a:fd:09:25:47:d8:cf:77:2c:38:65:91:f2:fd:04:67:5d:
08:db:d7:5a:4d:20:36:51:ff:98:ea:82:20:25:0e:49:54:b6:
97:27:a2:3d:a3:fd:22:94:de:8e:67:71:62:e4:70:15:5a:d8:
ab:fa:6d:50:7e:89:30:4b:78:52:d9:e9:c2:9c:f9:ef:94:6f:
cf:89:87:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:00:44 2026 by rpki-client