Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
File: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft (raw, json)
Hash identifier: AsSIMHsHFZW8DPaM9S3SAOOvhgZAAIgUYA8ye/g0Ts0=
Subject key identifier: 5B:45:CB:71:F7:EB:31:B7:67:79:45:1C:2E:AD:A5:02:4F:03:3A:A6
Authority key identifier: 2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF
Certificate issuer: /CN=2bc7b51dbf35aa4239abdad55f966945659401cf
Certificate serial: 019FA9750A795A07A68604A7A38CC7D508FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
Manifest number: 03A3
Signing time: Tue 28 Jul 2026 16:00:47 +0000
Manifest this update: Tue 28 Jul 2026 16:00:47 +0000
Manifest next update: Wed 29 Jul 2026 16:00:47 +0000
Files and hashes: 1: 86Fyb3G7SUYyzM6ueZuWLb_1Xuo.roa (hash: FgOm/4PuINnAyRzINOUNWX0n6lD1Ih45a+4EbNgehTY=)
2: K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl (hash: ebof0GLxyUrKhRgF0B3e2783AwwOPmUP6up0nJT7omE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:0a:79:5a:07:a6:86:04:a7:a3:8c:c7:d5:08:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc7b51dbf35aa4239abdad55f966945659401cf
Validity
Not Before: Jul 28 16:00:47 2026 GMT
Not After : Jul 29 16:00:47 2026 GMT
Subject: CN=5b45cb71f7eb31b76779451c2eada5024f033aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b1:74:9a:4e:a8:05:cc:19:b0:7a:2b:49:96:
af:0a:41:73:8a:90:0a:73:1b:c1:84:54:2c:b0:1f:
58:45:57:48:b9:23:ca:5f:57:d3:20:1d:ac:9d:4c:
6a:e1:19:f5:2e:c5:30:e1:b3:c5:5b:9b:ae:8c:f9:
c4:15:95:d1:cf:80:5b:68:f5:50:8b:af:6c:0a:f2:
56:8a:9e:dd:64:f9:51:b4:e8:0d:18:38:31:4c:3c:
a1:04:22:cc:67:96:b0:b0:fb:ca:0a:f7:75:b2:03:
c3:0e:04:1b:12:2e:e5:b3:3b:af:09:30:a5:15:f6:
ce:85:3e:eb:dc:06:d8:3c:bd:51:fd:2f:a4:69:62:
6b:d0:81:a3:d4:c0:56:92:8a:27:a4:58:3a:87:b6:
38:52:f9:7c:b8:d4:02:24:f1:d5:14:95:63:7f:7c:
8f:a9:4c:e6:ea:5e:36:4e:bd:31:84:ee:93:f3:db:
59:ce:ab:7b:c6:83:6f:05:db:32:23:dc:4c:53:fe:
8b:fb:ec:eb:7a:53:29:5d:d6:01:45:2b:a6:da:f5:
de:ca:83:0f:b3:0a:6e:6f:fe:81:a4:db:33:79:6c:
11:0e:43:5e:e7:07:4c:bc:53:91:1b:9e:55:40:5c:
38:77:9f:79:19:12:a6:97:8b:c7:68:be:3f:42:ae:
97:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:45:CB:71:F7:EB:31:B7:67:79:45:1C:2E:AD:A5:02:4F:03:3A:A6
X509v3 Authority Key Identifier:
keyid:2B:C7:B5:1D:BF:35:AA:42:39:AB:DA:D5:5F:96:69:45:65:94:01:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b1b91c-b52b-4bdf-ba0d-2a38124bad8c/1/K8e1Hb81qkI5q9rVX5ZpRWWUAc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c0:58:e9:43:c8:a0:c1:21:f6:8d:70:f7:fb:e0:49:f2:60:
d2:fd:a5:e9:1f:35:1f:25:61:44:91:2a:7b:cd:4e:4c:0a:ec:
90:99:e2:4c:73:59:d5:f8:67:8f:68:a0:9b:8d:15:11:8e:28:
29:29:93:a0:5b:55:c4:8c:ef:16:a1:e1:dd:53:5e:7d:ba:3e:
71:68:63:4f:28:5b:83:26:66:e9:ea:ea:54:0e:71:58:df:f0:
fa:df:a7:e4:7e:26:b7:b2:73:81:28:61:59:10:7d:e8:b8:8a:
f9:38:84:6b:ee:6d:6e:46:6a:a3:09:e9:ef:4b:97:06:32:eb:
13:69:b1:3e:39:30:7e:e9:3f:3e:ab:2b:49:24:1c:10:dc:b0:
5b:cc:11:70:9c:d9:b5:3c:55:5e:c7:a8:db:11:77:d3:34:8c:
83:c6:69:6f:b8:07:b5:ac:90:c9:24:31:4c:25:45:9e:37:2e:
43:0a:1b:9b:3c:65:2b:ce:f4:1b:08:7c:a3:18:b2:1d:33:fc:
bf:92:ad:ea:56:ab:72:2c:f7:d4:11:db:63:58:ab:dd:8e:b8:
da:56:15:dd:e6:3d:90:14:c2:90:35:3b:d8:02:67:26:a1:65:
4f:eb:b9:6b:9f:51:9d:77:6e:e8:63:22:f7:38:f9:7c:94:0b:
fe:2b:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:43:21 2026 by rpki-client