Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
File: K2ePFPiyKI1JVXym-xvfR5OSfc4.mft (raw, json)
Hash identifier: vU5oGXop7L14gp0FWW2BX0Iik9nKQNRpj4EHSeEQ0c0=
Subject key identifier: 5A:EF:5C:27:BC:A3:69:1F:64:83:C5:40:50:45:A9:3D:75:3A:AA:42
Authority key identifier: 2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
Certificate issuer: /CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Certificate serial: 019D98F5347FF77B3AD1DC99F46E4EF38251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
Manifest number: 108F
Signing time: Fri 17 Apr 2026 01:01:39 +0000
Manifest this update: Fri 17 Apr 2026 01:01:39 +0000
Manifest next update: Sat 18 Apr 2026 01:01:39 +0000
Files and hashes: 1: K2ePFPiyKI1JVXym-xvfR5OSfc4.crl (hash: 9aD6HRoDWKqnR5+n6y6cZ/kIJvTA1u01rXV/usxXTEM=)
2: tpy9FJHevA7odk2TH7YsmtN7UFs.roa (hash: HA5XrfWMN5EyPeGIHUHIkCKTU3wDBfCSNcRoSlAlDv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:34:7f:f7:7b:3a:d1:dc:99:f4:6e:4e:f3:82:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b678f14f8b2288d49557ca6fb1bdf4793927dce
Validity
Not Before: Apr 17 01:01:39 2026 GMT
Not After : Apr 18 01:01:39 2026 GMT
Subject: CN=5aef5c27bca3691f6483c5405045a93d753aaa42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:2d:c4:ce:1f:d6:da:ac:62:a7:07:14:bb:
58:6a:45:b7:9a:c8:be:ac:a7:34:20:5b:c6:13:fd:
4a:30:fa:a0:0a:d6:23:00:db:1e:6f:92:9c:1d:f1:
10:04:ca:ae:fe:d3:3d:c6:f7:62:a1:e7:ca:ef:3d:
0f:88:93:12:de:3c:6c:ab:24:0d:df:47:38:ce:ee:
89:9c:62:12:34:3f:96:91:75:88:b9:4f:58:f8:aa:
5b:af:e4:4a:10:24:95:35:1d:7d:8e:57:48:13:b1:
8e:fc:19:a1:a5:e5:51:77:3c:a1:3a:99:cf:7d:8f:
58:3f:01:6f:ec:c0:3f:90:89:0f:bd:83:cf:a8:75:
c5:67:c7:01:a2:9a:0d:b1:51:43:bc:f9:5e:04:5f:
1b:02:a2:04:22:f1:28:a7:7b:df:e6:ea:42:7e:51:
51:c0:c3:53:8c:15:b8:2a:e0:79:9c:18:43:08:73:
5f:3d:e6:ad:f2:c7:38:00:41:46:f7:79:78:e9:44:
e1:f8:bd:70:48:bd:af:34:71:c9:cb:04:d3:9f:fa:
42:d7:ba:84:0a:2c:a7:e6:e1:69:cd:52:2e:4a:c4:
29:8d:ea:bf:34:7a:b3:61:5f:ba:3d:3f:64:59:01:
57:5b:f0:bb:42:a9:6a:e4:68:11:d5:e3:6c:a6:ce:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EF:5C:27:BC:A3:69:1F:64:83:C5:40:50:45:A9:3D:75:3A:AA:42
X509v3 Authority Key Identifier:
keyid:2B:67:8F:14:F8:B2:28:8D:49:55:7C:A6:FB:1B:DF:47:93:92:7D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2ePFPiyKI1JVXym-xvfR5OSfc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/bba9ed-da21-4919-a831-f1cc873c2e27/1/K2ePFPiyKI1JVXym-xvfR5OSfc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:04:57:4a:7f:60:25:47:a3:93:93:3f:46:2b:07:ac:05:96:
3f:ab:bc:54:0b:1b:a6:f4:5a:d7:5f:5a:e5:9a:f3:92:08:62:
5f:52:86:24:0c:98:65:ab:65:b3:07:85:75:29:7d:4a:ce:38:
bb:5f:d8:f2:c6:8e:b7:a6:51:1a:78:fb:8a:91:f6:98:86:8f:
98:d3:1c:e7:1b:a6:ed:74:5c:a3:ef:08:82:d9:d5:b7:27:7a:
bd:a6:c5:45:95:f3:09:47:ff:1e:5f:1c:b5:c5:be:d1:93:5b:
f4:bb:4d:13:48:99:b8:73:27:dc:5e:58:f6:df:a6:23:0d:6a:
8c:53:57:bb:6f:05:72:93:f6:b2:be:7c:43:e6:b3:26:6e:0f:
14:67:d6:69:b7:6d:97:7f:b9:a8:a9:37:36:30:05:30:f8:ea:
14:f5:65:13:7d:6e:85:85:ff:76:55:e2:25:78:01:dd:b9:6c:
6b:3a:e2:1f:1a:a0:cd:ee:ae:fa:48:8c:fc:ca:1a:9e:2c:8b:
57:a0:26:45:7c:51:f4:24:6b:0e:01:8f:9a:ca:90:0b:5e:0b:
a5:45:35:05:7e:4b:9d:aa:22:ab:5c:5a:91:c8:e2:4d:87:69:
ba:96:f6:50:6d:1c:36:e7:72:40:1d:df:38:e2:4a:91:95:db:
39:39:f3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:10:33 2026 by rpki-client