Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
File: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft (raw, json)
Hash identifier: n4dTKAlgbZ5XJF2pLl+A/agaWwZEKZcJwGTkthXus9o=
Subject key identifier: 0D:F5:76:D3:40:61:D3:B6:09:3F:27:75:85:F1:AA:B0:0D:7A:D7:DF
Authority key identifier: 2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
Certificate issuer: /CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Certificate serial: 019CAF111424002A2F6292C09E2D9FB68234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
Manifest number: 01C9
Signing time: Mon 02 Mar 2026 15:00:57 +0000
Manifest this update: Mon 02 Mar 2026 15:00:57 +0000
Manifest next update: Tue 03 Mar 2026 15:00:57 +0000
Files and hashes: 1: K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl (hash: mQCpCsK/LP/B0h/CprncHrcwXfZnoIeNRwBfkB501gM=)
2: TV4yZeh5gb-YNu16ne89KzqjkHI.asa (hash: ZF+GnFpj0JJbI8NWDxgtBCaESGA8VYEeovm/zlGZB0A=)
3: b2FwzXwPA4h4cgwtnyc60OtTa88.roa (hash: lkanuRYvWV1r1485k4lQhFz2YZsaICmZonIaOSauHis=)
4: sX-7jKd4Jkup4SzLh7V9fhcXJIY.roa (hash: zRqjfBS/ZWhDgqQc0xO/XDUwPIazRjKs3hCDGDdnfh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:14:24:00:2a:2f:62:92:c0:9e:2d:9f:b6:82:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b936149657a62be32e0e1571827c2b2f35a0d3d
Validity
Not Before: Mar 2 15:00:57 2026 GMT
Not After : Mar 3 15:00:57 2026 GMT
Subject: CN=0df576d34061d3b6093f277585f1aab00d7ad7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8d:31:e5:66:18:23:c5:50:3e:be:b3:17:94:
be:e6:00:48:d3:29:e5:4f:da:ec:ed:78:bb:f1:d0:
d8:4e:2d:55:fb:4f:a9:41:57:33:83:9c:7e:1a:69:
7a:1d:23:02:9e:49:3a:19:21:57:12:95:a6:b8:c2:
62:a6:f4:96:4d:cb:22:82:99:74:32:aa:49:85:8e:
3a:57:52:7f:51:87:33:37:2a:50:2c:06:77:62:3b:
e5:91:43:58:a3:b5:5d:24:8f:d5:b0:9a:60:43:9d:
cb:bd:1f:93:c0:74:d0:fb:04:d0:3e:1e:2b:fd:53:
f3:ea:8b:85:c8:7f:a4:39:d8:d0:5e:77:53:10:92:
f3:1d:79:9d:57:f8:0f:80:09:95:8f:5d:6c:aa:4b:
6f:6b:db:49:8f:25:ec:0d:74:40:10:7e:f5:66:c8:
09:6c:cb:ed:85:b0:b5:15:6c:00:d6:f5:24:0f:11:
58:ed:30:4f:fa:2d:bd:36:f5:3f:87:a5:84:0f:b9:
a9:19:b7:fb:db:ba:44:2d:c8:96:d3:07:4b:2e:35:
67:96:9f:39:cd:5a:97:92:26:e0:58:99:de:f0:a2:
4f:19:ec:26:f3:cf:fd:2e:a3:a7:54:79:76:15:39:
03:2d:f0:d3:2c:dd:f8:89:fa:db:f2:ca:9a:dc:a3:
d8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F5:76:D3:40:61:D3:B6:09:3F:27:75:85:F1:AA:B0:0D:7A:D7:DF
X509v3 Authority Key Identifier:
keyid:2B:93:61:49:65:7A:62:BE:32:E0:E1:57:18:27:C2:B2:F3:5A:0D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c3e419-8690-45e0-854b-7820a51ed834/1/K5NhSWV6Yr4y4OFXGCfCsvNaDT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:3f:bf:c8:15:43:e7:8a:ca:9a:f8:25:03:2e:c5:96:2a:8a:
10:d0:cb:bc:5a:67:ee:ac:0e:78:64:4c:19:f8:73:8b:2a:9e:
09:49:2b:ec:0a:f4:71:e4:16:8d:9d:e4:22:91:a9:da:92:aa:
1b:63:ce:ee:39:8d:70:8e:5a:e2:5d:9b:60:0d:d9:b8:79:ee:
8b:8f:f0:b6:16:cc:44:0f:45:80:e7:57:6f:6b:0c:e1:7e:54:
86:cb:b7:2b:1c:26:10:0e:f9:62:37:f0:ef:ab:a3:41:d2:f6:
6d:c6:8f:69:8c:3d:54:90:3a:7f:80:d0:14:2b:38:08:5e:01:
64:a1:e4:1f:8e:e9:9d:8f:61:72:cb:b4:6c:c3:e9:34:09:86:
6c:b2:7f:44:28:62:01:78:1c:6d:74:17:be:53:ef:48:24:4b:
28:a0:83:30:1d:b1:dc:50:67:5a:f8:e9:dd:90:95:40:60:63:
e0:c5:3f:b9:55:9f:02:89:af:43:6a:be:99:bf:c5:0d:e8:bd:
71:2e:54:82:9b:ea:2f:f3:99:09:94:b6:c9:d2:71:38:9a:5c:
6c:c5:d1:cc:5f:39:57:1f:6b:43:56:0c:8b:48:bb:7d:e4:97:
1f:74:be:d4:28:f7:e2:b2:19:ef:43:13:54:6d:4a:22:a8:8f:
11:90:2a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:24:38 2026 by rpki-client