Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
File: K1PcIaJCAlQoIMyobiZfioeX0lA.mft (raw, json)
Hash identifier: j/g0Cv5zZtAW6OTxstEomiFlulEKzPKlmnLGRJovk94=
Subject key identifier: 45:35:F3:56:9F:74:F2:F2:A9:8C:45:3C:B1:C1:8E:78:5B:61:2D:0E
Authority key identifier: 2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
Certificate issuer: /CN=2b53dc21a24202542820cca86e265f8a8797d250
Certificate serial: 01A0CA477F288FBC4484307A7D498027C51E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
Manifest number: 0280
Signing time: Tue 22 Sep 2026 18:01:18 +0000
Manifest this update: Tue 22 Sep 2026 18:01:18 +0000
Manifest next update: Wed 23 Sep 2026 18:01:18 +0000
Files and hashes: 1: K1PcIaJCAlQoIMyobiZfioeX0lA.crl (hash: iDFWMUGdkYZ1XI+DvtRlj2OKko+c0cj5M0mBklQZonw=)
2: kD6G2PoyT4Y9hFb7K8_JYQqd5fY.roa (hash: GDKNpiIO5829SnDrPg3nh1X5rP785rc0edBI69dLKGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:7f:28:8f:bc:44:84:30:7a:7d:49:80:27:c5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b53dc21a24202542820cca86e265f8a8797d250
Validity
Not Before: Sep 22 18:01:18 2026 GMT
Not After : Sep 23 18:01:18 2026 GMT
Subject: CN=4535f3569f74f2f2a98c453cb1c18e785b612d0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:5d:71:1b:eb:94:54:5b:ee:9b:90:6c:a3:
c1:88:36:2b:ff:d1:66:c9:26:31:01:85:c7:7e:d4:
e1:b2:94:ef:ff:83:33:ba:9c:9b:67:36:3f:e1:7b:
a6:cc:7b:0c:c1:b9:53:4c:34:9a:14:bd:c6:81:93:
38:86:62:a3:cb:ef:4f:26:2f:3f:da:46:84:12:82:
75:89:b6:01:a4:68:43:b9:fa:fe:04:08:cd:02:ef:
3f:aa:9f:91:95:83:ec:6b:fb:08:48:c0:c5:20:e9:
30:8f:26:8b:85:19:36:eb:f5:23:4d:b3:64:95:10:
87:d8:04:64:66:60:da:38:70:9d:bc:ec:06:73:e3:
16:7a:dc:77:2b:c3:7d:53:02:41:57:fb:da:da:6e:
09:d3:a7:da:cd:34:a0:4b:ad:b3:fc:1b:50:e6:79:
50:b6:bd:fa:89:9e:d8:5a:3e:be:f5:df:6c:ca:fe:
87:6c:c7:9b:cf:91:05:d1:3d:03:dd:2f:ba:92:a8:
25:49:b9:df:cd:a3:c2:19:b6:7e:aa:99:e0:25:93:
f3:9d:bc:96:f5:a7:db:3a:44:45:b1:24:02:bf:d0:
6a:63:ce:05:6e:c3:25:38:31:00:f0:69:c7:31:9e:
74:c5:bd:ab:30:2a:f1:81:e6:24:6c:f5:c5:57:87:
44:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:35:F3:56:9F:74:F2:F2:A9:8C:45:3C:B1:C1:8E:78:5B:61:2D:0E
X509v3 Authority Key Identifier:
keyid:2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:56:1e:5f:d7:43:8c:9f:af:7e:60:91:49:d3:ba:de:10:4a:
77:1e:b8:03:87:8b:e9:e8:ff:ad:e1:b0:b9:ab:e9:f8:d0:0f:
17:ae:d1:20:a7:cb:bd:a4:61:e8:69:1d:64:f2:df:6b:a9:c7:
b4:18:ba:55:e3:99:28:32:58:e6:cf:7d:09:c5:39:84:b1:f8:
5c:21:21:f2:1a:67:00:8b:89:79:ff:87:a4:0d:db:f5:88:1f:
10:5d:44:7e:d3:9e:c6:23:96:5a:41:1a:87:1b:09:cd:46:e2:
3f:39:57:a5:de:d9:39:3b:f1:e2:69:a3:cc:4f:49:06:cb:bc:
dd:b0:be:a7:79:e3:ef:41:1f:db:ec:b6:f0:6b:e8:bd:7c:14:
89:39:a0:42:20:2c:37:28:91:18:c9:21:ed:4d:ac:02:d4:aa:
d0:39:0f:9d:fa:cf:a9:20:15:fe:c3:61:3f:53:68:41:11:fd:
b5:7a:cc:79:db:42:17:db:e7:10:e2:51:06:7d:8c:c6:29:d3:
ce:eb:d0:33:84:4a:1c:41:97:cc:8d:01:19:46:f7:c7:e2:d0:
6b:29:6c:74:3a:e3:57:44:1c:a8:9a:5d:bf:6c:76:84:8e:a7:
20:df:4b:3a:76:fb:d2:3f:f6:89:92:b6:14:ce:aa:f9:4a:9f:
cb:98:f0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:08:55 2026 by rpki-client