Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: 1oV/bc7Olt9zK9z27R5vkBNab0PX9mWDlRqgxPoEfrM=
Subject key identifier: 6D:1F:D9:0E:7B:41:58:C0:FB:23:A4:FD:D3:48:0D:D8:BB:EC:E5:6D
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 01A0C143FE589809D2E9F2D8DD2D0A3C0FB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 00:00:53 +0000
Manifest this update: Mon 21 Sep 2026 00:00:53 +0000
Manifest next update: Tue 22 Sep 2026 00:00:53 +0000
Files and hashes: 1: HXApDbBFjZ5P8YYPxxOP43B_61E.roa (hash: PABHtWG+f2nnmj23DcOFA1VpAaq32GiJAfPfR67Vqzs=)
2: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: fA8OFxW0Pgo29fui3am4Rj1eM2RQHdvMClRIN/OK0qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:43:fe:58:98:09:d2:e9:f2:d8:dd:2d:0a:3c:0f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Sep 21 00:00:53 2026 GMT
Not After : Sep 22 00:00:53 2026 GMT
Subject: CN=6d1fd90e7b4158c0fb23a4fdd3480dd8bbece56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cb:a6:0c:c0:6d:bd:2c:3c:4b:66:57:8d:6a:
14:18:6c:56:07:9f:f6:6a:92:36:fe:74:44:ec:c1:
55:44:71:b4:99:64:12:82:08:c1:eb:60:92:eb:28:
57:b8:e2:51:d8:09:ed:b6:65:95:1b:64:df:59:36:
d2:85:3d:2e:34:fe:0b:86:28:ed:64:fe:60:80:e7:
a7:21:13:b7:0d:6a:a4:67:24:16:4e:b1:0a:f6:d8:
b9:74:7e:d4:d2:cd:d3:5f:ff:91:5a:31:df:db:ce:
7c:b3:83:8e:c8:df:3a:64:08:51:1e:56:24:02:fb:
1a:86:4b:1c:fc:54:22:11:b6:7c:65:53:a9:16:5e:
e0:df:0a:32:c8:77:8b:d2:19:4d:24:01:05:73:1e:
9a:85:29:9e:60:5a:45:e9:c1:54:a0:d4:a1:88:b9:
27:97:ea:0d:58:93:9e:ca:9c:5e:83:c9:29:97:6f:
dc:d2:7e:71:03:49:1b:56:ef:82:5a:9c:fa:ff:a2:
dd:75:9a:65:bb:1b:32:99:f9:82:aa:1c:bc:00:b0:
6c:92:68:1d:12:31:04:b7:b3:cb:59:f3:a0:a2:f6:
aa:62:a7:52:bf:1a:9e:48:83:7b:41:c5:63:12:8e:
33:11:53:a1:cd:73:fe:2f:a2:e7:12:97:fb:f4:8b:
24:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1F:D9:0E:7B:41:58:C0:FB:23:A4:FD:D3:48:0D:D8:BB:EC:E5:6D
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:45:a4:63:ea:3b:8a:96:ec:ea:ed:64:3a:bc:c0:23:06:4f:
cc:38:53:f5:83:dc:5d:e6:43:be:d8:d5:70:3d:90:f1:4b:57:
fb:e3:56:c4:7b:6b:70:71:7c:53:44:99:a4:c4:5d:11:3c:14:
c9:d0:6a:21:96:2f:24:61:48:b0:8a:8e:2c:10:80:67:66:98:
1a:a0:c6:1f:e3:ed:be:19:89:cb:64:48:b2:c1:9d:2a:70:17:
53:48:72:00:11:53:ee:ba:65:6d:2f:0d:e0:55:70:25:95:c6:
8c:47:3b:2e:0a:68:ad:2a:8a:66:a3:7e:f8:85:5f:00:93:8d:
cb:c0:25:23:61:71:6a:2c:4c:95:4a:03:c3:be:34:80:ac:80:
71:48:0e:fe:db:d4:72:02:b6:b4:39:90:ec:89:c7:91:c2:21:
b3:3d:d5:1d:83:cc:06:2d:d2:49:68:53:81:25:b1:1e:b6:c6:
12:35:83:c3:55:8e:6b:f0:5e:87:f1:f9:f6:3b:80:f0:03:e0:
e8:79:d1:21:fe:e6:fe:f2:d4:a4:5a:94:b1:37:5e:95:eb:f6:
3d:e3:f5:b0:b7:2d:09:b2:b1:89:c4:98:6a:3e:a3:4e:d3:4c:
2f:de:bf:26:04:61:e0:a5:83:4b:22:e2:ab:3e:b9:5e:ab:c0:
94:20:1d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:28:15 2026 by rpki-client