Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
File: K5didVR7dd8rBMT5spHAcQxQd0A.mft (raw, json)
Hash identifier: 3FK0WvzfXYLrBc6OX3ko8O7/gEOb7nVHfq7TmO3I+Tw=
Subject key identifier: 79:0C:93:1D:C4:E0:49:28:B1:BD:E8:BA:BB:19:2C:CF:B9:09:4B:BB
Authority key identifier: 2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
Certificate issuer: /CN=2b976275547b75df2b04c4f9b291c0710c507740
Certificate serial: 01A0D1C95D0D60F1343EC4064FBB972F8C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 05:00:29 +0000
Manifest this update: Thu 24 Sep 2026 05:00:29 +0000
Manifest next update: Fri 25 Sep 2026 05:00:29 +0000
Files and hashes: 1: 267NH16MzH47Zyj0K4t3Pr0uSro.roa (hash: mBBDPMXvF9insE4ynTzv2acZX93bp3bRK4WTLefzCSs=)
2: K5didVR7dd8rBMT5spHAcQxQd0A.crl (hash: 1tHQebAnwUI3RcKTP9Dtg5cqX5eil2aXKu1DPSi39yI=)
3: Z6WV7_CviDtB4kK9RFUQZEfsld8.roa (hash: uV2rBVJavJc5cr+4rj8cgx9FhZFkKhWrOhtApw2SKC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:5d:0d:60:f1:34:3e:c4:06:4f:bb:97:2f:8c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b976275547b75df2b04c4f9b291c0710c507740
Validity
Not Before: Sep 24 05:00:29 2026 GMT
Not After : Sep 25 05:00:29 2026 GMT
Subject: CN=790c931dc4e04928b1bde8babb192ccfb9094bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:ee:ce:c8:7c:6c:73:16:20:f8:f7:c5:c9:
ab:76:c0:60:b8:25:ae:cd:68:c7:d9:c3:c2:94:90:
73:43:9f:e6:56:f7:84:e9:ae:89:99:75:ce:c5:8a:
3d:26:5c:16:dd:90:84:7e:2c:59:31:1b:75:95:28:
03:a4:76:11:81:78:2a:5d:2b:74:d5:58:52:4c:94:
29:20:30:56:a9:5f:f4:e3:d0:19:1d:4c:0b:21:d6:
3c:55:01:19:dd:9b:f1:3f:24:33:5f:14:ab:4b:19:
40:dd:4b:2c:fb:ff:de:0d:ae:83:fa:c1:95:dd:df:
e2:44:84:1e:c4:6d:79:ba:97:1b:fb:50:6f:76:9c:
8a:b7:79:39:44:d2:93:87:ec:ec:ce:d5:a1:76:29:
62:45:ed:6d:1b:6d:d2:17:e0:8a:b5:b6:ca:bd:3c:
f9:50:9d:0a:89:7e:7c:85:b3:92:9d:3f:64:63:88:
1f:b0:43:fb:88:60:6e:4e:66:b2:17:23:a0:ca:16:
00:78:75:34:57:b9:d8:b0:22:98:28:c7:14:40:43:
bd:3d:02:9a:be:2c:cb:5f:ef:a8:b6:66:d3:92:0f:
98:3c:38:a9:ba:4b:6b:57:3f:4e:4e:18:47:f1:70:
56:95:d6:12:31:9e:67:f7:6f:8e:a4:89:d8:40:99:
95:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:0C:93:1D:C4:E0:49:28:B1:BD:E8:BA:BB:19:2C:CF:B9:09:4B:BB
X509v3 Authority Key Identifier:
keyid:2B:97:62:75:54:7B:75:DF:2B:04:C4:F9:B2:91:C0:71:0C:50:77:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5didVR7dd8rBMT5spHAcQxQd0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/58f45f-8b07-4e6a-9548-d5b0f91d97c2/1/K5didVR7dd8rBMT5spHAcQxQd0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0e:42:0d:ed:1b:a3:23:aa:70:0d:ca:ce:84:26:14:a0:61:
f8:3c:18:1b:c9:b7:54:96:9f:c4:41:e8:26:65:32:e7:f9:d0:
ca:e9:17:b4:4e:0e:76:b7:3c:2f:a6:d4:b9:b6:38:1a:cc:4c:
d9:23:e3:cc:c4:28:e8:f6:de:4d:1e:14:38:ed:1b:d4:cc:cc:
03:04:97:7a:50:74:e9:16:58:8c:c3:3c:5e:30:1f:56:1e:52:
d2:22:24:98:ac:ae:13:3a:61:be:4c:8b:7f:89:99:fe:67:74:
59:8c:18:9d:e0:05:b9:27:ad:5c:b0:a3:4c:eb:57:d8:f0:13:
31:cd:36:85:62:cd:e7:cc:e9:fb:30:1f:a3:61:60:fa:d5:ab:
de:ee:8b:4b:bf:64:25:84:4f:7a:08:67:30:ca:1d:e6:c7:59:
6c:76:fe:c3:7f:02:dc:75:71:12:17:37:77:e0:49:1c:b9:5b:
bb:f6:25:52:18:b3:15:1d:2d:07:3c:71:cc:65:5a:16:e5:56:
63:08:12:14:26:ba:cc:7b:8e:eb:ba:29:62:1a:60:97:fc:00:
1d:b1:d0:c0:7b:30:21:a9:c0:95:51:42:9b:b2:27:55:ee:5d:
a5:5c:41:e7:cc:ca:53:e9:5f:95:85:a7:26:a3:5f:1b:c2:53:
6a:70:65:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:42:04 2026 by rpki-client