Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
File: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft (raw, json)
Hash identifier: nCFli0pKfeG3lMB7/1gSo6tKRiqpuk/U2xwRFEcZnz4=
Subject key identifier: 5F:D2:C4:CF:08:7C:C0:A5:97:7D:DB:90:11:69:EF:88:FD:94:0E:73
Authority key identifier: 2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
Certificate issuer: /CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Certificate serial: 019CA945E75FCF0306BEA7298357B5895E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
Manifest number: 01C6
Signing time: Sun 01 Mar 2026 12:00:56 +0000
Manifest this update: Sun 01 Mar 2026 12:00:56 +0000
Manifest next update: Mon 02 Mar 2026 12:00:56 +0000
Files and hashes: 1: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl (hash: juMsnsGy2zOx/51AZ3ZNcBHfylGfNGcaY+2vXAzYFfQ=)
2: TV4yZeh5gb-YNu16ne89KzqjkHI.asa (hash: ZF+GnFpj0JJbI8NWDxgtBCaESGA8VYEeovm/zlGZB0A=)
3: b2FwzXwPA4h4cgwtnyc60OtTa88.roa (hash: lkanuRYvWV1r1485k4lQhFz2YZsaICmZonIaOSauHis=)
4: sX-7jKd4Jkup4SzLh7V9fhcXJIY.roa (hash: zRqjfBS/ZWhDgqQc0xO/XDUwPIazRjKs3hCDGDdnfh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:e7:5f:cf:03:06:be:a7:29:83:57:b5:89:5e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Validity
Not Before: Mar 1 12:00:56 2026 GMT
Not After : Mar 2 12:00:56 2026 GMT
Subject: CN=5fd2c4cf087cc0a5977ddb901169ef88fd940e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:1e:87:dd:b3:ab:aa:86:20:ef:cf:6e:82:b6:
64:fc:87:d1:34:fb:f2:86:49:75:11:3b:63:c1:8e:
fb:2d:de:02:fe:b0:79:40:53:d6:5b:46:a7:3c:ee:
23:07:7b:45:c5:15:c0:88:61:ac:12:69:5b:ab:a1:
b1:f1:a1:0f:a2:fa:92:38:6a:5b:db:7c:45:25:64:
24:01:4c:3b:77:9a:8e:e7:8b:a6:9e:4f:0e:46:bc:
5c:e1:13:13:99:8e:be:1d:c0:d2:59:25:29:8d:5f:
e1:48:04:d0:7a:76:d3:b6:75:bf:06:51:26:14:1f:
a0:e6:26:8d:d3:76:e6:e3:2c:fc:e6:0d:d2:fa:f8:
b2:31:24:1a:64:f5:6e:98:b5:8a:e1:41:f4:1a:e6:
08:1f:d9:4f:78:15:cd:48:8f:15:44:63:90:f2:d5:
9c:1b:b1:e0:c8:9d:5b:d5:93:fa:b2:f4:21:dd:7d:
f2:df:fd:03:07:22:18:9c:a5:13:ee:be:99:03:c3:
42:5b:df:0c:74:7f:6d:63:b0:d0:08:8e:db:fd:e9:
dc:fd:50:81:aa:60:ec:da:c8:64:7d:57:69:9c:ce:
05:03:8e:60:19:2f:a9:ed:14:e1:0c:b4:2f:24:c4:
51:6e:8b:66:4b:7f:0c:02:32:58:50:e8:cb:b4:28:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D2:C4:CF:08:7C:C0:A5:97:7D:DB:90:11:69:EF:88:FD:94:0E:73
X509v3 Authority Key Identifier:
keyid:2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c2:f3:d3:3e:ca:25:9c:9a:a4:61:a9:44:7d:3c:51:c0:77:
46:7d:ae:67:76:9e:c6:76:e2:bf:bb:52:5a:90:82:81:0a:f8:
bc:c1:3b:63:f7:0b:7e:4b:62:3a:6b:74:5d:81:e5:5b:69:4b:
0e:b4:2f:22:46:f0:22:96:0c:69:7d:18:5a:42:f3:08:d6:4e:
17:5c:e9:bb:62:30:2d:a0:f4:b1:5b:87:35:ef:7c:3b:75:90:
c7:44:81:14:3e:80:df:58:34:32:cb:ad:cf:66:0b:4a:66:3b:
91:01:7a:79:bb:22:80:69:88:5d:62:1e:a0:8f:c9:e8:2e:5c:
46:f9:b8:bd:23:ee:7c:9e:3e:ee:f9:fb:76:ce:20:36:3f:d8:
c2:cc:d9:63:2d:e7:50:78:63:2b:f3:96:0d:bb:fe:3a:63:44:
98:cb:d1:1f:83:cd:09:fb:2c:69:ff:8f:9b:63:c3:f9:b9:6d:
3e:11:bd:79:94:9d:c3:ef:7d:66:e5:7b:03:34:4e:5e:54:f1:
f6:98:ae:dc:9b:61:2f:66:38:ae:bd:66:03:a4:e6:7a:1e:5e:
30:c3:e1:46:be:12:5b:b6:01:03:28:04:55:97:4b:38:db:20:
af:0a:3e:f8:f4:bc:41:a6:b0:f8:e8:28:d0:95:a1:a2:fc:d5:
0c:85:93:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRedfzwMGvqcpg1e1iV6LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTM2MTQ5NjU3YTYyYmUzMmUwZTE1NzE4MjdjMmIyZjM1
YTBkM2QwHhcNMjYwMzAxMTIwMDU2WhcNMjYwMzAyMTIwMDU2WjAzMTEwLwYDVQQD
Eyg1ZmQyYzRjZjA4N2NjMGE1OTc3ZGRiOTAxMTY5ZWY4OGZkOTQwZTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhx6H3bOrqoYg789ugrZk/IfRNPvy
hkl1ETtjwY77Ld4C/rB5QFPWW0anPO4jB3tFxRXAiGGsEmlbq6Gx8aEPovqSOGpb
23xFJWQkAUw7d5qO54umnk8ORrxc4RMTmY6+HcDSWSUpjV/hSATQenbTtnW/BlEm
FB+g5iaN03bm4yz85g3S+viyMSQaZPVumLWK4UH0GuYIH9lPeBXNSI8VRGOQ8tWc
G7HgyJ1b1ZP6svQh3X3y3/0DByIYnKUT7r6ZA8NCW98MdH9tY7DQCI7b/enc/VCB
qmDs2shkfVdpnM4FA45gGS+p7RThDLQvJMRRbotmS38MAjJYUOjLtCiPDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/SxM8IfMCll33bkBFp74j9lA5zMB8GA1UdIwQY
MBaAFCuTYUllemK+MuDhVxgnwrLzWg09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVOaFNXVjZZcjR5NE9GWEdDZkNzdk5hRFQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jM2U0MTktODY5MC00NWUwLTg1NGIt
NzgyMGE1MWVkODM0LzEvSzVOaFNXVjZZcjR5NE9GWEdDZkNzdk5hRFQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9jM2U0MTktODY5MC00NWUwLTg1NGItNzgyMGE1MWVkODM0
LzEvSzVOaFNXVjZZcjR5NE9GWEdDZkNzdk5hRFQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMLz0z7K
JZyapGGpRH08UcB3Rn2uZ3aexnbiv7tSWpCCgQr4vME7Y/cLfktiOmt0XYHlW2lL
DrQvIkbwIpYMaX0YWkLzCNZOF1zpu2IwLaD0sVuHNe98O3WQx0SBFD6A31g0Msut
z2YLSmY7kQF6ebsigGmIXWIeoI/J6C5cRvm4vSPufJ4+7vn7ds4gNj/YwszZYy3n
UHhjK/OWDbv+OmNEmMvRH4PNCfssaf+Pm2PD+bltPhG9eZSdw+99ZuV7AzROXlTx
9piu3JthL2Y4rr1mA6Tmeh5eMMPhRr4SW7YBAygEVZdLONsgrwo++PS8Qaaw+Ogo
0JWhovzVDIWTMQ==
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:01:56 2026 by rpki-client