Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
File: K577WHjTs2NNwcy5CsSOC4nRyHk.mft (raw, json)
Hash identifier: lsroDhmnJebJfWBp/OM9RcZNqeWnMr6Q+wZcfL0e404=
Subject key identifier: E1:68:5F:47:DD:FF:6A:B5:2C:28:AB:ED:46:3C:D2:61:4F:0D:9F:8C
Authority key identifier: 2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
Certificate issuer: /CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Certificate serial: 019CAE6C010B9C051EBC58783856A86B3777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 12:00:39 +0000
Manifest this update: Mon 02 Mar 2026 12:00:39 +0000
Manifest next update: Tue 03 Mar 2026 12:00:39 +0000
Files and hashes: 1: 4o_tAUtgP-njAXhmOmcH5E-LEBE.roa (hash: fh84+EgF1SEM+SjNNhOt/IByRahwjmYLOKwI1U+RRhc=)
2: AyXjBRSmG4hGzU3wFKEtZjVmoZk.roa (hash: qSJNJwwtc55ywmper0Gkw+bq36i69BmtauWb1Skowaw=)
3: K577WHjTs2NNwcy5CsSOC4nRyHk.crl (hash: VwIF0mdMHwE1ABg6vEO5VDUrhdLqvkM9H8SOOqU5NcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:01:0b:9c:05:1e:bc:58:78:38:56:a8:6b:37:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9efb5878d3b3634dc1ccb90ac48e0b89d1c879
Validity
Not Before: Mar 2 12:00:39 2026 GMT
Not After : Mar 3 12:00:39 2026 GMT
Subject: CN=e1685f47ddff6ab52c28abed463cd2614f0d9f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:1a:03:b0:e7:bc:eb:7c:84:4a:a0:db:02:
02:5c:28:bb:4e:83:c0:25:ca:1b:17:b1:6c:ac:11:
9e:3d:59:08:d7:5e:3b:81:8b:59:77:a6:4c:aa:bf:
0f:65:6c:73:be:ec:75:6d:02:95:2c:75:8b:93:8f:
32:9d:a7:4d:e9:35:4d:3f:55:53:44:b9:f3:f5:0e:
fd:38:92:a5:fd:28:87:95:a8:db:b8:83:1c:7e:bc:
1c:a3:77:66:6d:7c:96:14:9e:b2:f2:93:85:ed:de:
fd:53:69:c8:e8:59:d1:1e:19:35:fb:2f:0c:a0:b9:
34:9a:47:7e:92:39:7a:0f:6d:2d:21:00:e5:13:3a:
6b:ff:f6:b3:c9:a4:f8:91:47:c9:00:29:3c:18:3e:
b2:66:b8:f3:29:18:c3:23:f8:12:a9:b5:fa:9a:70:
52:2b:c8:9c:04:27:99:0c:c7:32:fd:60:b5:0c:2c:
8b:7a:67:83:07:61:d9:21:42:33:7e:1b:1b:ca:18:
e6:85:96:64:2e:ea:f8:87:81:8e:4a:17:2e:22:2a:
74:07:b5:8c:12:80:af:a2:ce:02:5a:e3:a2:d7:1d:
48:3f:85:36:c5:75:be:35:c3:c4:b4:cd:ca:5c:7f:
e5:ec:19:72:b0:fc:ce:cb:c3:2e:3e:ba:de:79:cd:
5e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:68:5F:47:DD:FF:6A:B5:2C:28:AB:ED:46:3C:D2:61:4F:0D:9F:8C
X509v3 Authority Key Identifier:
keyid:2B:9E:FB:58:78:D3:B3:63:4D:C1:CC:B9:0A:C4:8E:0B:89:D1:C8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K577WHjTs2NNwcy5CsSOC4nRyHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d03608-3c67-423d-b18d-4bcd3d58463a/1/K577WHjTs2NNwcy5CsSOC4nRyHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6e:97:f7:17:bd:f9:ed:0d:de:30:a3:b6:37:e1:8e:ff:16:
ef:48:ea:dd:b8:da:27:8f:8d:34:2d:a3:93:a8:59:5f:95:25:
05:e0:8b:0c:16:bd:ff:59:06:de:cd:43:1a:40:8f:ec:c0:1e:
5f:2d:ed:98:0f:23:f2:30:9e:dc:4e:ed:2b:f1:88:6d:30:07:
dd:b2:a8:3f:5f:fb:9c:b1:3b:e9:33:5c:b0:29:c8:8a:d8:5b:
dc:f9:29:24:ba:06:3a:9f:1b:f6:e1:ac:36:e4:4d:84:6c:90:
ff:31:e0:e0:02:5d:bc:02:5d:7f:2d:cd:07:a1:d5:9a:83:bb:
5e:c0:07:fd:cf:ee:29:09:e8:d7:9c:0e:55:06:82:76:83:17:
4c:cb:52:96:8e:77:b3:58:81:5c:62:3b:91:58:0d:ad:c8:93:
39:46:05:df:b2:cc:8b:d7:6a:74:47:bb:f1:66:81:b9:09:ae:
93:0d:c4:02:81:dc:f6:62:a1:18:92:e2:cf:3b:75:4b:97:d3:
90:fb:03:37:82:c4:b2:9c:69:47:be:b6:e6:b6:60:ec:e9:cb:
97:c6:ef:b1:34:cc:46:c4:04:28:28:df:fb:6a:83:4f:71:72:
ca:9d:48:52:a2:6c:bf:d5:6a:cb:f3:88:bd:a3:81:5c:8d:07:
5b:74:f3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:41:04 2026 by rpki-client