Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
File: K1PcIaJCAlQoIMyobiZfioeX0lA.mft (raw, json)
Hash identifier: AmPK6WaAskPduStoAJs+1Y8khsLN3TpHCn3Ebj7NLpc=
Subject key identifier: 64:A1:56:8C:BC:CC:1D:A5:23:AB:CA:66:80:22:FE:2E:9D:11:08:DB
Authority key identifier: 2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
Certificate issuer: /CN=2b53dc21a24202542820cca86e265f8a8797d250
Certificate serial: 019DA4F962CD9B78F7116DE9923F571888EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
Manifest number: DF
Signing time: Sun 19 Apr 2026 09:01:40 +0000
Manifest this update: Sun 19 Apr 2026 09:01:40 +0000
Manifest next update: Mon 20 Apr 2026 09:01:40 +0000
Files and hashes: 1: K1PcIaJCAlQoIMyobiZfioeX0lA.crl (hash: IddvtT/3oSv1SUmaSTrGckzL+yTQ9/6krKbBUsyV94w=)
2: kD6G2PoyT4Y9hFb7K8_JYQqd5fY.roa (hash: GDKNpiIO5829SnDrPg3nh1X5rP785rc0edBI69dLKGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f9:62:cd:9b:78:f7:11:6d:e9:92:3f:57:18:88:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b53dc21a24202542820cca86e265f8a8797d250
Validity
Not Before: Apr 19 09:01:40 2026 GMT
Not After : Apr 20 09:01:40 2026 GMT
Subject: CN=64a1568cbccc1da523abca668022fe2e9d1108db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:49:93:44:fc:2a:ae:a0:60:30:24:d5:6b:
bf:b9:0b:f6:e4:0a:0c:d2:9b:78:6a:a2:80:26:65:
b9:ad:c9:93:55:72:f7:5b:d8:e3:3a:7a:a1:95:fc:
91:2a:68:b2:50:38:9f:99:52:0a:07:1d:6b:a3:c2:
0c:79:3b:88:62:fe:c3:66:c0:b2:31:58:8c:4f:c0:
b2:70:2b:b1:9c:31:c0:32:be:c2:b5:b3:ab:f4:b0:
6d:fc:b9:10:25:d1:47:1c:a6:95:b4:60:2b:4c:1c:
37:3a:01:60:6c:a4:fd:2a:4b:11:3e:fd:5f:a1:0f:
3a:d9:f1:50:dd:24:4b:79:90:cd:13:0c:3e:e8:a4:
0b:7f:b6:93:d7:52:65:72:c2:ca:56:66:27:f9:b3:
01:78:64:ee:4e:d7:98:4e:8e:0f:76:5c:3d:94:4d:
18:0f:0d:77:c6:50:03:1c:12:c1:af:05:47:81:e7:
4b:26:4f:04:a0:df:38:54:4f:be:fb:d8:b6:fb:7b:
5f:ef:1e:6d:54:43:b3:43:11:f2:ad:50:87:aa:e9:
6f:dc:30:4b:0f:01:41:60:5b:3f:5b:e4:5b:aa:f0:
3d:82:b9:53:ca:93:cf:77:af:cc:3b:a2:4f:4f:23:
71:ed:b4:95:69:b0:37:ac:de:95:7d:dc:98:03:a6:
d4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A1:56:8C:BC:CC:1D:A5:23:AB:CA:66:80:22:FE:2E:9D:11:08:DB
X509v3 Authority Key Identifier:
keyid:2B:53:DC:21:A2:42:02:54:28:20:CC:A8:6E:26:5F:8A:87:97:D2:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1PcIaJCAlQoIMyobiZfioeX0lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/54bcdb-b5e2-4377-b530-83593afbb753/1/K1PcIaJCAlQoIMyobiZfioeX0lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:2b:3e:1a:c0:32:fe:ea:9f:2e:d0:31:7a:64:16:36:b8:6f:
df:58:fa:9e:21:c2:e8:74:21:f7:c2:0f:97:97:55:11:42:c3:
4b:4e:da:6e:97:a9:2c:70:14:ed:67:21:22:5a:30:61:ae:83:
1d:d7:d2:25:55:27:d0:a3:a7:45:27:fb:b5:f1:94:1a:a3:cc:
1e:1b:6b:f7:f6:cf:6f:d1:1d:a5:e3:ac:da:e1:29:45:48:1a:
ab:9f:ba:2e:c1:68:3c:41:11:e3:25:b0:45:86:be:30:b3:57:
df:de:c1:e3:57:8c:07:bd:61:62:67:d8:e7:db:91:5a:76:35:
f3:99:0b:85:ab:bc:36:12:e2:e8:36:0b:3e:6b:90:d0:90:59:
60:42:f7:13:86:92:6d:8c:48:33:8e:97:e6:14:8c:cc:0b:4b:
0f:05:dd:d8:83:34:4f:75:12:91:61:e7:4f:50:fd:da:e1:d3:
3e:23:1e:dc:d8:96:65:4a:16:0d:a9:09:44:f9:25:5a:d3:93:
31:80:e1:c2:c7:e1:2d:0b:9c:dc:ed:d5:74:36:e5:7c:56:c4:
a6:18:55:e7:c2:19:c0:09:4a:91:2e:93:9b:c6:20:e3:3c:42:
d2:30:ae:af:ee:33:98:eb:bd:15:cb:27:db:64:d0:0a:3a:0d:
ab:fd:54:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:44:04 2026 by rpki-client