Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
File: K5X2grxtV338PBDs7icYOB_uOyM.mft (raw, json)
Hash identifier: RpyrFC3xObw2ydQsqX8pm31h6cfBmBO72fti/Rg/TZ8=
Subject key identifier: 17:1B:07:79:8C:23:3B:11:26:C0:A7:F4:0D:93:A9:2B:E4:EB:AF:83
Authority key identifier: 2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
Certificate issuer: /CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Certificate serial: 019CABD9F8B48108FA8289A7593B849C06E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:01:54 +0000
Manifest this update: Mon 02 Mar 2026 00:01:54 +0000
Manifest next update: Tue 03 Mar 2026 00:01:54 +0000
Files and hashes: 1: K5X2grxtV338PBDs7icYOB_uOyM.crl (hash: JRuDEi3GjVWmuixuzYc/tsB+VmrPM3vUGiW5HCXQytI=)
2: c289qpn3kfSqkxAic7Rhdy4xyoM.roa (hash: JY4yDIwrrSAVR6qr9xMoxwUu8BhoP0KRD9HYde2M8sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:f8:b4:81:08:fa:82:89:a7:59:3b:84:9c:06:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Validity
Not Before: Mar 2 00:01:54 2026 GMT
Not After : Mar 3 00:01:54 2026 GMT
Subject: CN=171b07798c233b1126c0a7f40d93a92be4ebaf83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:8b:5c:5d:eb:1e:90:0d:0f:8d:77:ae:60:ab:
b2:b9:a5:89:e9:d5:c3:d2:f5:23:1b:96:84:aa:85:
10:92:e7:3b:69:5f:5d:17:5b:56:45:d4:d2:74:89:
4a:d1:00:64:5c:80:45:d0:6e:18:14:5f:ae:4a:64:
d2:ff:b5:5b:03:6a:cb:f3:b6:d8:70:df:2f:b8:4a:
2e:cf:ba:56:e2:cb:ac:98:7b:7b:f2:af:c7:11:c1:
f9:83:e7:d5:94:05:1f:21:33:76:fa:fd:42:c4:fd:
2a:58:b8:79:c0:11:df:e8:13:3a:cd:a8:26:41:55:
84:45:6b:56:87:8c:af:5b:59:32:a0:1e:1b:28:a9:
b5:de:5d:e1:08:24:38:df:0a:1c:cb:bb:9a:86:dd:
6d:76:75:9e:17:24:2e:80:22:75:96:29:95:16:51:
02:11:64:17:e7:ee:0e:89:7f:42:f1:f2:fc:87:40:
c2:9b:d7:a3:c0:24:b9:e4:09:5f:d9:21:e8:bc:c9:
b1:7b:ac:ba:2f:87:41:1f:4d:7f:46:e6:32:99:fa:
ba:34:ac:df:67:87:f9:e1:8e:45:33:89:42:75:5d:
bf:d2:cb:17:41:88:f8:6c:fc:9e:7e:a1:c6:7b:60:
97:39:67:f8:37:b1:3f:f0:4a:f4:6a:8d:b6:aa:25:
63:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1B:07:79:8C:23:3B:11:26:C0:A7:F4:0D:93:A9:2B:E4:EB:AF:83
X509v3 Authority Key Identifier:
keyid:2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:e8:62:58:a6:f8:51:c0:19:ac:77:ae:f0:b6:b9:d0:95:7d:
8c:11:be:2c:bb:77:82:7e:33:b5:30:70:b0:b6:c6:cb:09:01:
35:44:19:a7:62:38:6d:39:c4:76:aa:d9:2a:22:6c:49:df:42:
7e:b3:62:f1:30:e3:da:7f:21:9e:e2:05:f8:c7:14:93:0c:25:
43:87:99:86:71:e0:9d:e4:87:f2:93:33:29:c1:68:41:40:a0:
68:ff:a3:70:2d:cb:e2:12:70:71:9d:47:91:a1:7f:ed:61:cb:
69:36:62:96:b8:72:27:3c:10:6f:87:df:20:b6:8b:37:b6:8a:
b1:22:2b:8e:8d:3f:2c:fb:f6:ab:3d:90:db:d9:ed:17:26:7b:
3b:db:e9:09:ce:a3:27:7e:03:12:9a:5f:92:b3:cd:fe:59:88:
90:c4:e6:55:67:76:26:cd:15:64:bb:7a:d5:58:dd:f6:2d:cf:
be:79:79:e5:06:68:1f:3e:c9:70:e8:91:0a:67:39:5e:77:2f:
2d:93:be:24:2d:40:d8:b2:1d:ed:be:4b:e7:15:d1:1d:ed:e8:
a2:07:da:f2:fe:66:00:38:44:b6:7a:de:46:c8:4b:83:6d:8d:
d3:06:01:c0:d8:da:26:b7:6b:30:3b:fc:c0:3b:60:17:08:ee:
c9:50:6b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:23:39 2026 by rpki-client