Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
File: K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json)
Hash identifier: OxezprgAZvCy7SFoFb5Qmvss2YaMgFjRW7FPpMgJRGE=
Subject key identifier: 8C:05:19:E5:9E:88:0B:0B:96:0E:48:E0:F3:44:F5:24:29:DF:6C:5F
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial: 019CAC7DB64EE9741F72595CE58ABAC598BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
Manifest number: 0F2D
Signing time: Mon 02 Mar 2026 03:00:45 +0000
Manifest this update: Mon 02 Mar 2026 03:00:45 +0000
Manifest next update: Tue 03 Mar 2026 03:00:45 +0000
Files and hashes: 1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: zvW1QfEI6E7rJr6trGv+O90iCWz1bjBYq2CRKSw+ZtQ=)
2: j9BouMciNW9kiR4MYbw5nEI18Lk.roa (hash: 0POuwWC/mY+BSIA395HwTOeczjcetqnwxmUcBFaUV1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:b6:4e:e9:74:1f:72:59:5c:e5:8a:ba:c5:98:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
Validity
Not Before: Mar 2 03:00:45 2026 GMT
Not After : Mar 3 03:00:45 2026 GMT
Subject: CN=8c0519e59e880b0b960e48e0f344f52429df6c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5d:7a:da:7d:9a:a6:ef:18:00:35:db:2e:97:
56:fc:4a:7b:0b:0c:67:ab:1c:0c:e6:1f:0d:f4:32:
df:c5:1c:47:1f:7a:ce:d7:79:34:9d:ac:a4:3b:56:
37:e4:72:a9:6f:0e:8f:98:be:43:20:19:5d:a0:4e:
e8:dd:1c:f5:24:b8:1b:de:d9:1e:0f:bc:0b:ab:5f:
73:9b:e3:fd:bc:a9:a6:8a:f3:08:0b:9c:e0:9c:bd:
d6:45:64:d1:1c:dc:35:e5:97:b3:a2:51:78:d6:3a:
4c:07:cb:72:8e:7b:48:c9:04:43:2e:89:0e:eb:5e:
e4:36:6d:d2:69:6d:04:88:68:96:c2:5c:77:45:4d:
d3:05:ca:82:b4:04:d0:f1:f1:46:d4:4e:71:51:57:
a8:c2:42:3c:92:2d:09:de:92:ed:f9:b3:ba:fa:04:
39:82:29:cf:fb:cb:b9:5e:6c:66:3e:b4:87:ae:4e:
c1:28:10:2f:94:82:a8:68:7b:b3:4a:12:a4:3f:77:
63:3b:b3:a3:95:19:c8:e5:8a:99:74:4a:47:7a:1e:
f2:65:ef:ac:7d:49:dd:f0:d7:66:56:b3:32:6e:c0:
49:ed:47:71:9c:ef:d0:cb:a9:01:cd:3f:8b:df:39:
9c:11:f4:db:cd:18:a1:d2:aa:3a:3c:b7:dd:1f:b0:
b7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:05:19:E5:9E:88:0B:0B:96:0E:48:E0:F3:44:F5:24:29:DF:6C:5F
X509v3 Authority Key Identifier:
keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:01:24:52:3f:d9:c5:97:06:23:c5:05:4b:c6:7e:e7:77:9e:
f4:59:b6:11:04:81:3a:c2:a5:76:a7:da:55:bd:87:01:9c:c0:
41:d1:d2:07:73:b3:8b:08:d0:36:4c:8c:cb:50:30:50:ac:c7:
e0:aa:4c:17:dd:94:bd:3b:8c:21:28:cc:08:8d:a4:35:4a:f9:
05:0e:11:f7:0b:5f:71:97:e5:8b:25:e7:b5:0b:81:a7:18:e7:
d9:b1:ec:61:02:b5:d4:43:2e:d2:29:8b:fe:25:6e:f8:b4:29:
ff:93:bd:60:22:03:0c:c0:78:70:67:f1:08:fc:72:a2:c4:5f:
24:02:eb:0a:e8:72:99:2b:e5:72:04:53:c5:aa:b4:6c:c3:92:
62:24:22:e9:0f:85:04:f2:41:f9:8c:4d:3f:75:90:44:0d:5e:
7f:ed:19:72:2d:b3:15:38:19:36:fc:d7:cd:d2:f7:4c:9b:26:
32:1c:42:59:5b:77:2f:a5:60:0f:4e:6f:f8:55:ed:92:12:2c:
ab:85:70:0a:0b:bf:47:86:7b:13:a3:32:eb:07:cf:1a:db:15:
2b:43:f1:3c:79:c9:61:cf:55:20:c1:4a:02:8a:73:04:0b:c4:
f2:e9:a3:07:97:08:76:7a:93:ea:5e:89:74:2a:21:73:40:38:
12:d3:39:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:21 2026 by rpki-client