Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: RYLt0rfTJqvLblj5Vatzz2b02PM5bqooYucJdyKzz9E=
Subject key identifier: 05:DA:D7:3B:C4:38:8E:45:C3:F8:D9:A4:5A:A1:DC:FF:5D:A1:B7:22
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 01A1DD26CACBB17755C8A9BB5544F2A6F321
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 03:01:09 +0000
Manifest this update: Sun 15 Nov 2026 03:01:09 +0000
Manifest next update: Mon 16 Nov 2026 03:01:09 +0000
Files and hashes: 1: HXApDbBFjZ5P8YYPxxOP43B_61E.roa (hash: PABHtWG+f2nnmj23DcOFA1VpAaq32GiJAfPfR67Vqzs=)
2: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: Z/B+R0ifLByFsh3moYweBpEQPThwg8UYUtm5T3Tk48A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:ca:cb:b1:77:55:c8:a9:bb:55:44:f2:a6:f3:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Nov 15 03:01:09 2026 GMT
Not After : Nov 16 03:01:09 2026 GMT
Subject: CN=05dad73bc4388e45c3f8d9a45aa1dcff5da1b722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:94:9e:c5:78:69:7f:4e:a1:00:1b:d7:11:
b1:b3:b1:d4:c4:d8:ff:37:f2:63:2f:49:83:83:b8:
43:e6:f1:f9:62:4d:12:39:1c:2a:c9:f5:82:19:4f:
1f:49:f8:9f:47:60:f0:e0:6f:f5:ac:0c:c6:23:9e:
cf:1a:a1:45:9e:06:eb:1a:af:a1:d1:cd:f4:26:71:
e6:cf:88:3b:b6:74:f2:d3:1e:e6:4d:73:36:0b:3a:
4b:98:9b:0f:6f:c7:4a:a3:4d:3a:bb:32:96:bb:ed:
3e:4a:b0:9b:04:84:96:e3:58:74:91:95:b0:65:1f:
ea:a8:2e:ea:6c:93:8e:26:0f:9f:f2:b7:91:04:e5:
21:9a:e8:d2:32:52:15:1b:d8:67:2d:c4:53:16:77:
b1:71:64:a3:e8:4a:68:d0:93:ba:38:d2:08:8f:e8:
ea:f7:67:fb:77:24:a3:4e:92:df:c3:b5:0b:77:cb:
b6:d6:b0:6f:b2:04:61:77:ba:f1:62:67:65:f7:a1:
40:e3:42:de:a7:9e:14:a4:a9:89:6d:5a:a1:6c:8b:
f8:79:56:13:69:4d:96:45:54:80:fa:75:78:e0:30:
ba:b6:0f:89:7e:be:0f:4e:73:f7:dc:3d:47:4e:a1:
31:0e:57:97:98:d9:aa:5d:c8:db:23:1d:12:2f:fb:
aa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DA:D7:3B:C4:38:8E:45:C3:F8:D9:A4:5A:A1:DC:FF:5D:A1:B7:22
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:78:aa:bd:72:2f:59:ae:d1:52:70:61:9d:57:22:64:97:79:
c2:c6:84:aa:46:04:6c:07:01:82:04:3b:4a:b6:75:0f:a7:94:
04:16:0a:85:da:48:7b:9c:ac:74:88:62:7d:bb:5d:23:ec:9c:
5d:45:43:75:f2:dc:52:c4:e8:f7:00:5c:8d:92:87:20:35:13:
b5:4c:2c:61:09:04:03:c5:72:e3:25:c7:35:9c:e3:32:90:18:
c9:df:16:80:13:fb:47:d3:78:c7:46:90:65:5a:ca:33:15:0c:
41:6a:2b:e2:fe:c4:31:85:52:d1:6a:44:a0:23:cd:d0:80:a7:
20:3a:09:7c:8f:50:27:4c:b4:ba:50:19:9b:0d:f0:ef:17:e3:
d4:fd:59:56:a1:34:07:ce:8e:4a:63:06:c3:09:7d:a1:49:c1:
49:69:49:29:93:64:a6:21:35:d9:a6:11:01:58:7d:5e:05:ac:
a1:d4:34:bb:af:24:30:3f:fc:21:3c:34:9d:5b:21:ca:a3:60:
46:fe:82:93:15:d3:1e:53:72:2c:04:28:f5:c8:73:a1:2c:5d:
2d:3f:c5:c1:2d:c3:b6:b3:68:51:7e:cb:72:77:5c:95:b5:12:
78:38:e1:00:8a:e4:67:d8:35:c8:eb:18:51:35:1a:16:58:6c:
63:2e:7f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:08:32 2026 by rpki-client