Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
File: K0bJzPf_e9zPg3dioOFXvcE1cOA.mft (raw, json)
Hash identifier: m97JZB/2f+2aagos3cpUH/z+8tf5pGKZPXQcSJoIvSw=
Subject key identifier: 2D:37:56:38:E0:57:51:F0:B9:34:B0:F1:E6:29:A6:82:B0:29:AB:F0
Authority key identifier: 2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
Certificate issuer: /CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Certificate serial: 019DA30A9DD17B6C8E1FD0A781026BB5F665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
Manifest number: 08D8
Signing time: Sun 19 Apr 2026 00:01:15 +0000
Manifest this update: Sun 19 Apr 2026 00:01:15 +0000
Manifest next update: Mon 20 Apr 2026 00:01:15 +0000
Files and hashes: 1: K0bJzPf_e9zPg3dioOFXvcE1cOA.crl (hash: PWkGlD7ie/ihWNyvjkbG+6T0l6/ujmg3o+7BYm3ULK4=)
2: Qf4dP42vzRBrZXFbcCRz-VSmv1M.roa (hash: A64N+3juau//kw/FqDqwxIYCtmtyAvH0se4IvywkAE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:9d:d1:7b:6c:8e:1f:d0:a7:81:02:6b:b5:f6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b46c9ccf7ff7bdccf837762a0e157bdc13570e0
Validity
Not Before: Apr 19 00:01:15 2026 GMT
Not After : Apr 20 00:01:15 2026 GMT
Subject: CN=2d375638e05751f0b934b0f1e629a682b029abf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:2e:a8:7d:e4:07:2d:d2:16:89:45:fe:9e:89:
7f:f7:cf:fb:64:56:b4:d0:3d:48:c9:71:4c:34:ce:
11:50:de:e3:1f:40:da:44:50:d7:72:c8:52:2b:03:
f9:cb:f5:77:39:49:56:50:c0:c5:5c:49:77:ee:e4:
f8:99:b9:73:4b:65:be:3f:4a:d5:b1:41:97:5f:c9:
6f:50:5e:22:0f:67:a2:06:56:48:13:ae:06:d1:1d:
91:79:df:36:63:b5:e9:dc:41:cd:87:fb:c8:ba:fd:
95:17:70:46:fa:33:08:f8:ed:b8:fb:60:f1:3a:1e:
37:09:cd:3c:fa:47:01:97:ec:7e:d3:ea:d5:34:e9:
e7:64:81:91:60:e1:b5:16:0e:51:8f:7f:aa:89:9c:
5a:92:4f:9f:63:a2:c5:1f:49:90:d7:bf:21:96:03:
8b:46:5c:b0:3c:bd:bf:58:7b:c8:2d:19:fc:98:60:
1c:d3:93:33:d4:2b:60:1c:18:81:f5:cc:46:89:80:
4f:63:3b:84:39:a8:92:a5:f3:1c:f2:2f:ee:46:5f:
0c:ba:ae:da:24:f0:ae:94:75:2d:36:af:46:b9:2b:
8f:de:1d:b2:3a:d5:d9:a3:4d:df:49:55:35:66:0c:
b0:4c:cc:b6:7a:dc:61:a4:08:fc:37:5a:70:eb:e0:
09:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:37:56:38:E0:57:51:F0:B9:34:B0:F1:E6:29:A6:82:B0:29:AB:F0
X509v3 Authority Key Identifier:
keyid:2B:46:C9:CC:F7:FF:7B:DC:CF:83:77:62:A0:E1:57:BD:C1:35:70:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0bJzPf_e9zPg3dioOFXvcE1cOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/34ccfe-80e6-4d96-b968-c7a2d5f9fd60/1/K0bJzPf_e9zPg3dioOFXvcE1cOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:12:18:3c:1d:04:9b:0e:76:2c:9f:d6:dc:5e:66:b0:0c:2d:
ca:fb:1c:18:0d:e2:48:f2:f7:aa:3e:97:db:31:aa:c0:66:51:
7a:32:ac:e2:55:2a:cb:59:84:3e:2c:87:7a:b7:7a:50:e7:de:
58:61:ca:f0:63:fd:23:f3:ae:13:28:5d:e7:ea:1a:ea:69:df:
f7:5c:7c:4c:c5:4d:e0:fe:d2:b9:33:bb:7a:8f:68:e9:55:75:
cf:f6:73:8c:0d:51:36:fc:d0:56:29:0c:5c:d6:d4:96:76:7c:
2f:85:8e:55:6e:69:bc:aa:80:b5:ba:3d:38:7e:7a:55:e0:6f:
b6:1c:3f:ad:bd:0a:c6:52:a1:21:6b:e3:8f:fd:46:3e:1e:3a:
8f:53:04:f1:57:04:a2:39:76:c8:13:35:1f:37:b6:ef:15:b9:
24:a9:3b:4e:e0:4e:90:7b:35:90:16:9a:57:76:e9:24:81:0a:
f4:be:7a:35:63:b0:5d:51:55:06:ed:34:66:ad:ac:33:af:68:
cf:3d:e9:2c:75:7a:8c:d1:8e:d2:ea:96:ac:03:b4:3e:14:90:
b2:6e:1d:81:99:5a:d2:86:c0:f8:d8:87:e6:0f:12:0e:23:18:
92:0a:b0:2e:e5:11:b2:07:eb:7b:1d:28:e3:33:ef:36:b8:4f:
ea:c0:5f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:46:57 2026 by rpki-client