Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: MmDclKeEcsARlCkW6zSLx1DIqu1wHJQ3tHHHcmpk5AM=
Subject key identifier: 34:06:50:95:DB:6D:64:84:7C:08:31:C9:01:6E:58:6E:5D:8E:EA:1B
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 019EC180361D12B77FEC7C760EBDEDB02351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 15:01:05 +0000
Manifest this update: Sat 13 Jun 2026 15:01:05 +0000
Manifest next update: Sun 14 Jun 2026 15:01:05 +0000
Files and hashes: 1: 4o_tAUtgP-njAXhmOmcH5E-LEBE.roa (hash: fh84+EgF1SEM+SjNNhOt/IByRahwjmYLOKwI1U+RRhc=)
2: AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa (hash: qSJNJwwtc55ywmper0Gkw+bq36i69BmtauWb1Skowaw=)
3: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: UQXpPsF8BMDCtgBgGLF+uygtOVaP90B7THr9TyhdKmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:36:1d:12:b7:7f:ec:7c:76:0e:bd:ed:b0:23:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Jun 13 15:01:05 2026 GMT
Not After : Jun 14 15:01:05 2026 GMT
Subject: CN=34065095db6d64847c0831c9016e586e5d8eea1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:fb:49:db:eb:68:6c:c6:fd:6e:01:f6:e2:
f3:b5:1f:3a:85:f5:37:ee:27:5e:33:e6:a5:d3:63:
60:1a:95:56:9e:ac:87:b5:e7:f4:ca:f0:d9:05:00:
2e:26:24:32:af:91:85:6d:bb:15:0e:e6:b2:5e:97:
96:f2:02:84:57:0d:d6:af:2c:3e:fc:8f:07:bf:95:
d8:b2:76:f6:65:6d:93:d8:f9:54:d6:0b:3b:4f:76:
56:e3:2a:f7:30:9c:3a:71:96:ff:04:5b:17:e7:44:
c3:b2:71:46:69:3d:d8:51:65:55:6f:04:72:a1:84:
0e:13:05:f1:b9:81:b5:71:46:87:25:19:35:f8:73:
0e:20:a5:59:1f:c0:40:4d:56:12:d4:5a:05:9d:aa:
ad:79:0d:5d:5d:8a:42:fe:b3:00:66:72:36:3a:6c:
61:38:f6:ab:7e:9b:74:37:02:95:e7:3f:76:01:67:
a2:e3:79:04:82:9b:a9:23:2e:58:9f:47:77:d4:9f:
e7:98:fe:df:7d:66:6e:75:66:1d:44:18:1f:19:30:
d6:49:81:45:ef:34:d9:f1:c4:9c:92:c4:f2:d2:26:
0a:50:76:11:3e:7d:80:72:25:c9:e3:97:84:d3:33:
0b:f0:94:06:af:29:19:22:77:22:0b:43:5f:cc:b4:
21:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:06:50:95:DB:6D:64:84:7C:08:31:C9:01:6E:58:6E:5D:8E:EA:1B
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:31:2b:03:bc:78:60:72:22:b3:29:f4:fe:8b:6b:d5:46:73:
4f:f0:d8:7d:97:a6:91:4f:dd:1d:46:01:7e:ce:47:07:ad:67:
32:d9:5d:13:8e:21:7f:55:22:86:bd:87:95:80:91:6b:b7:61:
13:f3:6d:a3:c7:b9:ab:ae:e1:82:ee:7d:f3:9e:9b:94:3c:17:
c5:58:17:8f:22:0e:cc:42:ce:35:d2:af:36:93:c3:ef:f0:44:
46:66:fd:c0:77:06:63:de:7d:c0:f0:03:61:8b:37:19:d8:28:
57:ef:5d:08:e4:5c:e4:50:47:ae:7c:c2:7c:ac:cb:4a:67:d0:
cd:82:53:91:43:10:2b:34:ac:03:0a:56:e5:9d:61:8a:fd:b7:
a1:7f:1d:3d:dd:60:22:73:2d:5e:a3:7f:e6:46:c2:86:01:5f:
df:21:35:18:0c:59:fb:84:fa:16:24:f7:5d:fe:35:47:ad:e9:
20:a7:21:bc:72:b2:69:c9:1d:f5:29:3f:ec:99:ba:59:8c:07:
dd:de:c4:21:db:48:10:4a:f5:6a:bd:de:d5:c4:ba:7f:55:05:
08:d8:f5:c9:10:81:85:ed:f5:4e:cc:cb:55:08:d7:f3:a7:5a:
fc:ae:b6:0c:e8:a4:0c:ef:d1:43:bd:d7:02:c0:39:44:cb:6f:
5a:e2:af:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:08:57 2026 by rpki-client