Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier: dojNr0ASvOCmNT3M8ZtbhdDTC/KHB67gp4do4M+MulA=
Subject key identifier: AC:91:74:6E:9A:67:D2:EF:08:EF:C7:83:C8:F4:36:CD:2D:78:B1:6A
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 019CAC46F5D464D1A4E157012E3FDF7F7608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 02:00:57 +0000
Manifest this update: Mon 02 Mar 2026 02:00:57 +0000
Manifest next update: Tue 03 Mar 2026 02:00:57 +0000
Files and hashes: 1: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: +sgWdKFyzC3dKPKbUyLLLDFCbOxJRNkmScpACAeV9J8=)
2: jW75sPmmFSuAByKBWvYaeRnFXOM.roa (hash: v2zg0sfjDzeH0JGU5ldDB2qU5wPCOcMy8diYca8w+d4=)
3: rYSG2dYjGVa3YG5opt3m2blLdDQ.roa (hash: 0jQGDr8z5IsaWt/3i/Wtvl19AvDMpjEhc4vCy+qWV/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:f5:d4:64:d1:a4:e1:57:01:2e:3f:df:7f:76:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Mar 2 02:00:57 2026 GMT
Not After : Mar 3 02:00:57 2026 GMT
Subject: CN=ac91746e9a67d2ef08efc783c8f436cd2d78b16a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8a:68:bf:7f:55:40:4a:2d:6f:82:f2:48:2f:
6b:c6:fb:55:fe:c2:16:75:25:74:de:8e:12:9f:a1:
6f:1c:e8:ae:b0:67:c1:8b:84:4f:be:7d:01:27:fa:
7d:3c:02:ac:fc:4c:73:5a:93:26:02:8b:a0:5b:6b:
fa:0b:6f:d1:88:9f:2c:95:49:9e:bb:87:53:9a:6b:
61:4e:69:e8:16:6e:60:21:92:0c:26:2b:e7:2a:d9:
66:8f:7c:e0:2c:fa:b2:6a:75:aa:0d:9f:66:49:fa:
fd:72:94:4b:c7:68:f3:a8:a1:35:6f:28:5d:95:4c:
f9:35:d7:b8:90:38:1c:fe:80:26:97:8b:fa:0a:6f:
bf:28:59:73:4b:80:29:5a:05:4c:11:e4:e0:e8:fd:
61:84:b9:f6:49:6e:af:a5:56:26:41:49:f3:9a:9e:
09:80:de:7e:ac:6a:7d:17:c4:99:2d:86:de:29:4c:
0b:31:70:76:e6:d8:15:fb:7c:4c:2e:f3:ab:81:5e:
bb:a5:54:17:29:aa:a4:56:0e:02:43:42:d3:e8:de:
bc:e0:85:ad:fe:cb:b7:3a:54:39:56:67:c7:4c:24:
4e:27:04:d1:ef:37:d6:ca:13:6e:c9:80:92:66:6b:
f0:5f:c7:a0:df:4a:38:12:84:5c:aa:71:a9:fb:17:
9f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:91:74:6E:9A:67:D2:EF:08:EF:C7:83:C8:F4:36:CD:2D:78:B1:6A
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:57:3b:22:50:95:70:a5:23:f6:0c:86:ca:4d:34:81:9e:67:
c3:2b:5d:e4:32:c5:3a:61:df:ad:a1:c9:90:09:2c:fd:19:1a:
8b:3a:78:df:b2:1a:2c:42:90:13:de:f0:cd:14:e1:57:30:01:
16:51:36:72:8f:64:34:bd:73:f3:7b:fe:f5:f7:55:73:6b:63:
4e:10:94:18:7b:35:a9:6a:4a:ae:27:56:b7:8c:13:bd:62:17:
93:1b:84:05:63:51:0c:82:86:e8:04:c4:44:ae:a1:ab:61:8c:
c6:3e:e6:83:fb:cb:2b:c7:b3:fa:9a:a7:1f:bb:4c:1d:0d:f3:
93:89:66:35:aa:55:a1:ab:93:c2:f5:71:9c:15:cb:b6:18:a4:
3d:2c:69:f8:4e:98:ca:1c:5f:f7:fd:04:a2:b9:9e:47:22:ac:
7b:70:a5:96:e7:17:b8:27:cb:f1:00:6b:53:a6:4d:d9:e9:71:
14:38:48:8d:a4:6a:9f:3d:1c:63:c3:59:64:a5:95:74:2e:16:
40:a6:4b:01:94:05:22:23:e0:76:0d:55:bf:e4:72:41:b2:51:
44:17:b7:ad:44:00:37:a6:40:58:8a:25:21:4b:ca:15:de:51:
bf:97:23:51:af:5a:cd:67:00:a5:3a:44:0e:ab:b5:49:de:64:
1c:a6:c4:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRvXUZNGk4VcBLj/ff3YIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYjMzMDk0MjI5OGY3NTgyM2NiYjk4MGM4ZWIyYWNmMGI3
YzBjMWIwHhcNMjYwMzAyMDIwMDU3WhcNMjYwMzAzMDIwMDU3WjAzMTEwLwYDVQQD
EyhhYzkxNzQ2ZTlhNjdkMmVmMDhlZmM3ODNjOGY0MzZjZDJkNzhiMTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIpov39VQEotb4LySC9rxvtV/sIW
dSV03o4Sn6FvHOiusGfBi4RPvn0BJ/p9PAKs/ExzWpMmAougW2v6C2/RiJ8slUme
u4dTmmthTmnoFm5gIZIMJivnKtlmj3zgLPqyanWqDZ9mSfr9cpRLx2jzqKE1byhd
lUz5Nde4kDgc/oAml4v6Cm+/KFlzS4ApWgVMEeTg6P1hhLn2SW6vpVYmQUnzmp4J
gN5+rGp9F8SZLYbeKUwLMXB25tgV+3xMLvOrgV67pVQXKaqkVg4CQ0LT6N684IWt
/su3OlQ5VmfHTCROJwTR7zfWyhNuyYCSZmvwX8eg30o4EoRcqnGp+xefawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKyRdG6aZ9LvCO/Hg8j0Ns0teLFqMB8GA1UdIwQY
MBaAFCuzMJQimPdYI8u5gMjrKs8LfAwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYt
NmIzYTQ3NjY3Y2E4LzEvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85OTA3NDctMzQ1NC00NDEyLThmMDYtNmIzYTQ3NjY3Y2E4
LzEvSzdNd2xDS1k5MWdqeTdtQXlPc3F6d3Q4REJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1c7IlCV
cKUj9gyGyk00gZ5nwytd5DLFOmHfraHJkAks/Rkaizp437IaLEKQE97wzRThVzAB
FlE2co9kNL1z83v+9fdVc2tjThCUGHs1qWpKridWt4wTvWIXkxuEBWNRDIKG6ATE
RK6hq2GMxj7mg/vLK8ez+pqnH7tMHQ3zk4lmNapVoauTwvVxnBXLthikPSxp+E6Y
yhxf9/0EormeRyKse3CllucXuCfL8QBrU6ZN2elxFDhIjaRqnz0cY8NZZKWVdC4W
QKZLAZQFIiPgdg1Vv+RyQbJRRBe3rUQAN6ZAWIolIUvKFd5Rv5cjUa9azWcApTpE
Dqu1Sd5kHKbEOA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:07:40 2026 by rpki-client