Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
File: K_CgGXhoxtjDTdFrP0TezF5CNvU.mft (raw, json)
Hash identifier: YG5I96a5ghpLcRho7EAmgEWkj7OvQ4LHtVxtb/Ezw+I=
Subject key identifier: DC:79:99:90:18:1F:AD:D8:91:15:01:8C:E9:26:EB:C1:59:DC:38:71
Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
Certificate issuer: /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Certificate serial: 019CABD9EDBFF743AD211745653B49DBBC60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
Manifest number: 0FFF
Signing time: Mon 02 Mar 2026 00:01:51 +0000
Manifest this update: Mon 02 Mar 2026 00:01:51 +0000
Manifest next update: Tue 03 Mar 2026 00:01:51 +0000
Files and hashes: 1: 5MvGTIWvypnynatSCOFj8eEvQKU.roa (hash: zlpMkBrcV9PcuGvhpfeVQrRYScHNx6B9kKbHDGTMD3Y=)
2: K_CgGXhoxtjDTdFrP0TezF5CNvU.crl (hash: 9r3I1Ufqn54RP826e8mzYWBaDQZFDYIapARaGymRIsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ed:bf:f7:43:ad:21:17:45:65:3b:49:db:bc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Validity
Not Before: Mar 2 00:01:51 2026 GMT
Not After : Mar 3 00:01:51 2026 GMT
Subject: CN=dc799990181fadd89115018ce926ebc159dc3871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:4d:44:a0:02:f0:df:84:04:1b:0b:17:cf:
e2:4e:5a:81:27:ed:ab:a7:4f:0d:24:5a:56:33:c8:
9b:e0:36:3f:35:fd:47:80:10:ae:6a:43:b4:44:ad:
e0:f0:e0:7a:cc:00:a9:e4:e5:5f:cf:e4:e3:99:2b:
3a:f4:e6:f8:3f:74:8f:39:bb:98:24:9f:27:55:63:
97:aa:bd:e5:a7:1a:5c:2b:c7:53:88:65:f4:a3:b9:
56:5d:c0:6d:0e:a5:69:96:55:02:7d:56:77:a3:eb:
51:1d:dc:5f:c2:a2:b3:49:df:2c:ed:1f:4d:94:9f:
dd:c0:9e:9c:6d:f9:29:1b:c7:53:00:20:94:c7:25:
ca:1c:30:9c:e3:a5:36:5b:60:b2:76:1c:3d:c1:0c:
c2:c1:91:93:0e:73:23:a3:62:ab:7c:45:7c:f3:05:
ca:cc:06:f1:07:e3:aa:b7:99:65:81:72:f9:28:c8:
1e:54:09:31:a0:82:bd:64:0d:04:4a:6e:e4:6e:90:
c6:fe:a3:44:7d:5d:3a:d2:88:8a:8e:70:99:0d:53:
d3:9a:cf:95:bc:7d:9b:0f:ea:c6:35:86:7b:79:76:
7c:24:50:d7:cf:af:ae:f9:e0:55:c2:e0:01:3f:b0:
ed:56:ad:4e:54:ff:8c:06:ed:67:47:d2:55:07:8c:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:79:99:90:18:1F:AD:D8:91:15:01:8C:E9:26:EB:C1:59:DC:38:71
X509v3 Authority Key Identifier:
keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:5d:ad:f8:44:aa:88:38:bd:e6:f9:be:87:56:c0:39:cf:32:
c7:bf:60:f7:c9:c6:f9:13:2d:6e:0f:fb:d0:20:27:86:99:97:
37:5c:02:77:99:18:19:23:63:19:97:f3:23:cb:8d:4f:79:cd:
81:35:7b:f7:d0:e2:9e:76:b9:7a:7b:2a:5c:1f:4f:dd:57:d4:
02:3d:aa:45:05:4a:3d:5c:cb:86:c5:5e:4a:41:44:03:e9:46:
93:95:69:14:19:4e:f1:23:aa:74:9c:53:ae:24:72:7b:4f:a0:
52:dd:c6:e0:3d:65:1c:54:ec:16:8b:2c:b8:d3:fd:ca:ff:e9:
29:a2:db:aa:1f:ba:52:eb:4a:00:54:fd:ed:c9:72:56:d0:4b:
82:f7:04:43:1f:ba:0c:da:67:00:25:06:f4:cb:00:d2:aa:3e:
c7:2a:22:ab:62:51:19:90:35:dc:88:4f:69:2a:a0:a3:62:2c:
84:1f:4e:4c:7f:07:9d:d6:56:e5:d1:01:b9:b4:f3:73:c9:4c:
f2:a2:4f:5c:59:c3:64:1a:29:81:20:5e:70:58:d3:9e:45:6b:
e8:97:07:d1:91:0a:3d:25:e0:ee:cd:7d:d0:98:39:0f:52:f4:
d7:ce:65:0c:51:c1:78:b8:ab:d5:64:fe:21:1c:5a:2c:2f:16:
a4:85:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:16:56 2026 by rpki-client