Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
File: K_L644DF1MHigYEKNNuYg8nZ_y8.mft (raw, json)
Hash identifier: q5/qUObbZP6Clq1HeUw/NjBTtWVJbKs8YxPijtC0dz8=
Subject key identifier: A5:E5:42:66:69:75:64:0B:DD:6D:C4:C2:68:85:FD:AB:84:A4:D2:88
Authority key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Certificate issuer: /CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Certificate serial: 019DA4F8C3E97747CA83ECB5E80E9AB0E758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
Manifest number: 0850
Signing time: Sun 19 Apr 2026 09:00:59 +0000
Manifest this update: Sun 19 Apr 2026 09:00:59 +0000
Manifest next update: Mon 20 Apr 2026 09:00:59 +0000
Files and hashes: 1: K_L644DF1MHigYEKNNuYg8nZ_y8.crl (hash: RzWuJ8/Ch9a4uoyV9Nx7btUww6V6ipSCWNmIaWezFfM=)
2: NrFG9a7lhgdagV21jW_Y5WHIDU4.roa (hash: VxqOc7Zmm8Sw61vVYrF1hQBCY2BqNer2KY9Km2/+dR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:c3:e9:77:47:ca:83:ec:b5:e8:0e:9a:b0:e7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Validity
Not Before: Apr 19 09:00:59 2026 GMT
Not After : Apr 20 09:00:59 2026 GMT
Subject: CN=a5e542666975640bdd6dc4c26885fdab84a4d288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5d:01:02:7a:54:a1:5e:e0:17:ec:18:ac:88:
87:09:1a:02:27:7b:3a:7a:1b:de:d6:7d:c0:9a:2e:
90:73:cf:fa:ad:41:ba:fb:1e:97:19:c0:d6:4e:2e:
5d:61:d0:54:d9:52:8d:cf:1d:2f:27:6a:09:70:00:
f5:b4:0f:50:42:6d:0f:0a:2c:55:c0:28:13:65:f3:
7b:87:d4:77:1d:40:b4:e5:0e:1f:3c:37:81:eb:cc:
bb:4f:55:40:0c:a6:8b:40:99:c0:e5:79:ee:10:c9:
17:c6:42:13:6a:6e:b7:d7:81:80:53:36:09:0d:07:
a5:0e:fe:47:49:03:21:c2:a0:83:3a:59:5b:cc:fd:
65:89:c7:6a:ba:dc:44:ca:06:5f:df:1f:38:bf:b3:
c1:08:da:dc:12:d9:90:52:8c:ab:61:78:f2:77:b0:
66:57:96:4d:d5:f0:2f:8d:86:e8:23:2a:01:cc:dd:
a0:a4:b6:d5:22:5c:f0:94:8a:a4:1e:8d:e4:82:44:
6d:c8:1b:56:c8:a4:a7:9e:ee:27:5d:84:b5:84:9b:
c5:94:80:30:3c:12:79:55:f1:30:12:75:0f:79:32:
aa:61:5b:c3:a4:c1:79:50:7b:b4:ca:3c:c6:2f:2b:
3e:47:f1:02:18:b0:c8:1c:53:10:f1:f8:cf:24:b4:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:E5:42:66:69:75:64:0B:DD:6D:C4:C2:68:85:FD:AB:84:A4:D2:88
X509v3 Authority Key Identifier:
keyid:2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7b:ca:4a:a4:c3:95:e7:1a:2e:dc:36:4f:b1:66:c6:6f:9c:
44:c4:5b:01:db:07:a8:27:25:f1:24:1e:34:3b:30:e4:67:01:
db:f5:ef:7f:16:c6:98:d1:6d:08:47:ec:40:f8:15:75:3f:4d:
c7:05:d4:19:84:40:09:de:e5:bf:e3:61:00:82:f3:a9:75:8a:
20:8c:7a:b6:aa:b9:94:1b:c9:d3:e0:44:5d:a0:ab:ed:b4:a2:
40:15:1a:b9:a7:76:f0:72:f8:1e:6a:16:aa:08:d2:cc:ae:93:
32:25:a7:3f:5b:82:95:72:9c:84:f8:d0:ac:76:54:e1:96:0e:
44:5e:f3:8c:32:fb:89:54:e1:99:b2:48:23:cc:4e:78:86:4d:
69:e8:e2:e5:4e:13:48:32:d6:a5:0d:a2:bb:d9:06:54:b8:63:
97:34:dd:a7:e3:b5:3a:b5:ba:4b:1e:43:c5:1c:b5:2e:3f:84:
08:4e:f3:b9:fd:d2:8b:26:f2:30:e3:e7:1a:40:44:0d:f3:52:
c1:6d:2d:cf:2d:c2:26:da:15:ac:7c:c8:39:f0:9f:81:fc:31:
47:8f:b0:e7:34:d3:48:4f:d9:34:bd:a5:9d:f6:93:0c:b4:85:
cd:cb:67:f9:6d:93:54:a5:4d:9c:e2:0e:fe:74:c4:f2:99:b4:
6f:4f:1b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:07:01 2026 by rpki-client