Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
File: K1PcIaJCAlQoIMyobiZfioeX0lA.mft (raw, json)
Hash identifier: xAah6IVjewDgzAR9YcD0d9WzUzKDBSgHniktkVHkaMU=
Subject key identifier: 7F:E4:67:99:10:DE:5D:AC:AF:0A:22:35:91:ED:17:74:E2:E4:CD:0E
Authority key identifier: 2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
Certificate issuer: /CN=2b53dc21a24202542820cca86e265f8a8797d250
Certificate serial: 019FAA87D3CEB0A759F56BD7758590E4716B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
Manifest number: 01EB
Signing time: Tue 28 Jul 2026 21:00:56 +0000
Manifest this update: Tue 28 Jul 2026 21:00:56 +0000
Manifest next update: Wed 29 Jul 2026 21:00:56 +0000
Files and hashes: 1: K1PcIaJCAlQoIMyobiZfioeX0lA.crl (hash: OybuQg9kDA2cynYrPIDUY6lckILsjVEUwRMEV0voYUk=)
2: kD6G2PoyT4Y9hFb7K8_JYQqd5fY.roa (hash: GDKNpiIO5829SnDrPg3nh1X5rP785rc0edBI69dLKGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:d3:ce:b0:a7:59:f5:6b:d7:75:85:90:e4:71:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b53dc21a24202542820cca86e265f8a8797d250
Validity
Not Before: Jul 28 21:00:56 2026 GMT
Not After : Jul 29 21:00:56 2026 GMT
Subject: CN=7fe4679910de5dacaf0a223591ed1774e2e4cd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e9:b3:e5:7f:01:e4:ef:c0:9f:bd:94:7e:e4:
00:a1:5a:9c:45:29:56:88:3e:d2:52:f7:ba:11:48:
a1:ef:66:46:67:90:bd:37:65:1a:38:54:3c:6e:4b:
ec:c0:a5:04:20:d3:46:86:02:1c:61:f8:f9:b4:29:
69:16:54:4f:21:77:0d:eb:11:4d:90:48:f1:9b:ff:
72:89:ba:54:40:8b:29:8a:60:32:33:34:d6:4c:15:
c6:1a:ce:4a:c8:b2:3d:1a:60:64:da:d8:b3:5b:b3:
85:53:3d:5d:b0:57:ee:62:f7:4f:6a:c9:fd:2a:10:
d5:ea:75:50:5c:8e:79:94:99:20:d4:2d:34:6b:9c:
44:6f:b4:26:36:cf:47:27:b8:9c:0e:47:ed:e5:1b:
aa:09:4e:6c:12:ac:e2:bf:22:0b:e1:63:8f:a0:6a:
7f:d6:4b:e4:aa:0d:12:5f:26:4a:3b:72:53:cc:18:
98:6b:55:04:9c:96:8e:5b:0d:dc:9a:c6:42:17:7d:
9a:63:ff:0a:b9:34:a0:75:53:41:85:b3:0e:eb:6d:
6b:2b:86:0b:9b:e4:f2:79:c5:33:4c:fb:1b:27:ee:
74:ec:df:c9:54:e9:6a:43:88:7e:80:5e:6b:4d:a8:
07:54:18:fa:d4:a6:c9:a4:2c:bf:1e:4a:fd:d6:05:
ae:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E4:67:99:10:DE:5D:AC:AF:0A:22:35:91:ED:17:74:E2:E4:CD:0E
X509v3 Authority Key Identifier:
keyid:2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:cc:54:25:0f:5d:77:f0:c5:22:55:f0:01:e6:65:30:66:0f:
75:4b:03:94:c1:1b:c4:09:ce:d4:b3:3c:df:2e:24:0b:0b:2e:
2b:a9:23:88:80:9b:b7:b9:59:7b:06:a2:3b:c9:82:02:5b:77:
1b:3d:bf:ea:ea:c4:a6:75:05:0a:08:c2:43:34:ef:77:3b:8a:
40:83:2d:4e:6f:77:77:d8:cd:63:bc:c1:9e:a9:0b:ea:2a:9d:
50:18:b1:d8:ef:eb:c5:73:a1:8b:aa:8d:2e:33:f3:d5:34:61:
30:99:d6:c1:74:da:db:e3:66:4c:9e:d7:f7:10:45:25:da:ed:
20:e3:38:4b:49:a5:2f:4f:57:91:91:1f:51:2f:a2:b3:78:81:
a6:65:28:b7:d2:59:41:2a:02:98:5e:4d:90:80:e7:b7:0e:b5:
2f:8e:89:62:de:56:1a:30:b4:8c:8e:f9:9a:f4:2f:ac:2d:f4:
07:26:6a:2a:48:d4:57:97:00:40:a8:0d:64:05:ae:61:c9:3c:
93:28:f5:9f:46:be:64:0d:f2:1a:db:48:dc:12:df:15:c3:af:
2e:86:ae:33:62:56:70:04:f3:36:b7:88:06:4c:70:4e:ba:35:
af:ae:12:15:b4:03:a2:d9:71:1d:13:f5:e0:bd:2b:ce:eb:3b:
09:11:fd:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qh9POsKdZ9WvXdYWQ5HFrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiNTNkYzIxYTI0MjAyNTQyODIwY2NhODZlMjY1ZjhhODc5
N2QyNTAwHhcNMjYwNzI4MjEwMDU2WhcNMjYwNzI5MjEwMDU2WjAzMTEwLwYDVQQD
Eyg3ZmU0Njc5OTEwZGU1ZGFjYWYwYTIyMzU5MWVkMTc3NGUyZTRjZDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOmz5X8B5O/An72UfuQAoVqcRSlW
iD7SUve6EUih72ZGZ5C9N2UaOFQ8bkvswKUEINNGhgIcYfj5tClpFlRPIXcN6xFN
kEjxm/9yibpUQIspimAyMzTWTBXGGs5KyLI9GmBk2tizW7OFUz1dsFfuYvdPasn9
KhDV6nVQXI55lJkg1C00a5xEb7QmNs9HJ7icDkft5RuqCU5sEqzivyIL4WOPoGp/
1kvkqg0SXyZKO3JTzBiYa1UEnJaOWw3cmsZCF32aY/8KuTSgdVNBhbMO621rK4YL
m+TyecUzTPsbJ+507N/JVOlqQ4h+gF5rTagHVBj61KbJpCy/Hkr91gWuYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/kZ5kQ3l2srwoiNZHtF3Ti5M0OMB8GA1UdIwQY
MBaAFCtT3CGiQgJUKCDMqG4mX4qHl9JQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzFQY0lhSkNBbFFvSU15b2JpWmZpb2VYMGxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81NGJjZGItYjVlMi00Mzc3LWI1MzAt
ODM1OTNhZmJiNzUzLzEvSzFQY0lhSkNBbFFvSU15b2JpWmZpb2VYMGxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC81NGJjZGItYjVlMi00Mzc3LWI1MzAtODM1OTNhZmJiNzUz
LzEvSzFQY0lhSkNBbFFvSU15b2JpWmZpb2VYMGxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtsxUJQ9d
d/DFIlXwAeZlMGYPdUsDlMEbxAnO1LM83y4kCwsuK6kjiICbt7lZewaiO8mCAlt3
Gz2/6urEpnUFCgjCQzTvdzuKQIMtTm93d9jNY7zBnqkL6iqdUBix2O/rxXOhi6qN
LjPz1TRhMJnWwXTa2+NmTJ7X9xBFJdrtIOM4S0mlL09XkZEfUS+is3iBpmUot9JZ
QSoCmF5NkIDntw61L46JYt5WGjC0jI75mvQvrC30ByZqKkjUV5cAQKgNZAWuYck8
kyj1n0a+ZA3yGttI3BLfFcOvLoauM2JWcATzNreIBkxwTro1r64SFbQDotlxHRP1
4L0rzus7CRH9Hg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:26:10 2026 by rpki-client