Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
File: K-1ik1-0ivbkTLoZQm76tR8cVBA.mft (raw, json)
Hash identifier: CsWPbXC0mFvZWxUOTSAB59MAn2rDKB2trRG8SJU/SWw=
Subject key identifier: 29:85:7B:EC:40:BB:5E:BF:FE:01:23:AC:3C:DE:7F:00:90:C3:E3:47
Authority key identifier: 2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
Certificate issuer: /CN=2bed62935fb48af6e44cba19426efab51f1c5410
Certificate serial: 019D9A06AC6D0D5ABE1B89C2888ABDD98CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
Manifest number: 0FA8
Signing time: Fri 17 Apr 2026 06:00:21 +0000
Manifest this update: Fri 17 Apr 2026 06:00:21 +0000
Manifest next update: Sat 18 Apr 2026 06:00:21 +0000
Files and hashes: 1: K-1ik1-0ivbkTLoZQm76tR8cVBA.crl (hash: mK/ElGCtF5dPmfklVvosaYa5S+ADoqERQL+axBlOX/Q=)
2: j9BouMciNW9kiR4MYbw5nEI18Lk.roa (hash: 0POuwWC/mY+BSIA395HwTOeczjcetqnwxmUcBFaUV1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:ac:6d:0d:5a:be:1b:89:c2:88:8a:bd:d9:8c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bed62935fb48af6e44cba19426efab51f1c5410
Validity
Not Before: Apr 17 06:00:21 2026 GMT
Not After : Apr 18 06:00:21 2026 GMT
Subject: CN=29857bec40bb5ebffe0123ac3cde7f0090c3e347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:3f:b5:6e:0f:3f:6a:6f:d5:16:a9:0f:c5:
2e:53:62:46:0d:2e:99:87:6d:7a:98:5c:30:0b:3c:
00:0e:c6:9a:bd:76:49:70:7e:dd:1b:bc:4a:a0:ee:
f4:d3:5f:88:41:e6:61:4d:c3:96:12:70:b3:52:e0:
d0:f1:37:50:66:fa:cc:5c:c9:b8:17:d0:cf:e5:95:
48:0b:e3:81:c9:66:5d:01:bd:bb:44:a1:c8:b8:8d:
b4:59:2e:d1:28:d9:c3:97:3a:dc:15:d4:68:49:7e:
28:78:4d:84:35:f5:9d:2c:0f:6a:10:13:7c:17:cd:
c5:88:c4:4b:ad:2b:d5:5a:a9:dd:44:ab:f3:a6:4e:
bb:12:2c:5f:b7:dd:5c:05:a6:7b:b2:69:66:06:5a:
0f:72:67:69:bb:04:41:e4:c0:3d:75:fe:26:ac:09:
e8:38:c3:68:c7:7b:a8:6d:83:3d:b1:59:4a:22:01:
21:ed:54:8b:bb:5a:68:9c:a7:ea:38:e7:94:92:62:
c7:4a:3d:2e:f9:36:41:ac:68:37:8d:3c:0a:6f:1a:
79:73:f9:08:3b:af:e8:b0:77:b1:c0:b4:25:45:db:
80:71:c9:ab:ea:52:bb:55:a6:9e:45:a8:78:d8:de:
c6:04:af:53:ef:14:36:03:23:10:95:f7:5e:a7:6c:
66:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:85:7B:EC:40:BB:5E:BF:FE:01:23:AC:3C:DE:7F:00:90:C3:E3:47
X509v3 Authority Key Identifier:
keyid:2B:ED:62:93:5F:B4:8A:F6:E4:4C:BA:19:42:6E:FA:B5:1F:1C:54:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-1ik1-0ivbkTLoZQm76tR8cVBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9b81c8-732c-43f2-b6ab-484014a4d94e/1/K-1ik1-0ivbkTLoZQm76tR8cVBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:dd:67:77:9d:3a:9e:c0:a1:61:22:68:53:e2:de:74:4d:67:
f2:62:00:34:b4:01:78:f4:bd:95:50:ea:65:29:1d:20:00:0b:
f1:05:6d:3b:73:cc:29:8a:d6:22:96:6f:46:69:17:02:72:4b:
bb:9a:48:ea:09:72:24:66:af:bb:76:af:8b:b1:19:a8:8d:0e:
a1:71:6e:77:4b:f8:2e:5f:46:1c:9a:52:ea:4a:19:66:b7:d0:
7c:73:d4:8f:af:ef:5b:19:8e:63:22:21:86:f5:87:b7:be:d4:
a7:93:92:61:52:f3:d9:56:d5:14:a3:c6:86:07:5a:af:a3:af:
59:8e:83:fd:9a:08:63:d8:8e:dd:27:2a:28:28:c0:4b:70:fe:
61:3d:2e:e4:0a:07:33:89:29:0e:85:62:34:85:08:be:fa:0e:
73:28:d6:6b:3a:a8:ce:09:d8:9b:de:b1:38:dd:14:e0:0b:45:
d5:c6:74:ce:61:c2:0b:fb:e9:ed:f5:48:b8:e1:9c:63:17:d5:
83:f2:28:c3:1e:fb:de:66:72:eb:3c:59:fc:95:cd:61:98:de:
a7:96:86:5f:83:5a:64:70:18:db:9d:cc:c5:72:91:4e:41:e4:
53:98:0d:41:2d:d3:6f:d7:fa:0e:f7:95:be:01:f5:ae:d1:56:
78:51:bf:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:42:55 2026 by rpki-client