Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
File: K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft (raw, json)
Hash identifier: ct5WoQxiQ9EmW+LYDlouclbZDRgo0D9vj5GPjjDl2zE=
Subject key identifier: 9E:02:64:C2:85:B8:D5:36:04:07:72:1B:D5:E1:0D:8D:CA:99:42:23
Authority key identifier: 2B:44:DF:4E:07:2E:18:78:63:E8:2E:4F:BE:3A:7A:CE:AF:44:96:63
Certificate issuer: /CN=2b44df4e072e187863e82e4fbe3a7aceaf449663
Certificate serial: 019FAC75F00B1AFCF4E18E7EA7F6ADA0A636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:38 +0000
Manifest this update: Wed 29 Jul 2026 06:00:38 +0000
Manifest next update: Thu 30 Jul 2026 06:00:38 +0000
Files and hashes: 1: K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl (hash: HIV1UT/tRL2nrnf9E8+9Y2BcnC3v8f1ACyQ/iNwdCDo=)
2: MCJHMq3DaEcsDlBngovhIGwxerY.roa (hash: ceSH2iap4Ad4G5FgYSyum63drzQRVImpBZ3iM3Jeasw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:f0:0b:1a:fc:f4:e1:8e:7e:a7:f6:ad:a0:a6:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b44df4e072e187863e82e4fbe3a7aceaf449663
Validity
Not Before: Jul 29 06:00:38 2026 GMT
Not After : Jul 30 06:00:38 2026 GMT
Subject: CN=9e0264c285b8d5360407721bd5e10d8dca994223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:18:52:f3:d4:dc:13:f0:75:32:f3:e5:6c:ab:
96:00:c4:0e:ff:35:c0:f1:92:84:ec:4e:d9:32:f6:
39:12:4a:55:2b:7c:38:5d:06:30:ef:1c:50:45:b8:
65:8d:8c:a2:51:70:77:3a:cb:d7:f7:bb:7a:98:fe:
db:3e:9a:78:d4:75:36:b9:97:bc:e3:bc:ea:e0:a1:
71:5d:27:21:41:7a:31:00:2c:6d:51:6e:15:dd:88:
be:36:ea:58:a1:41:61:31:c3:b9:da:67:26:af:4e:
23:f2:9e:49:22:70:8e:a1:f9:72:0d:4a:d8:ff:98:
85:d6:cc:8c:d8:39:a5:e0:84:50:54:46:b9:bd:40:
71:10:48:34:82:f2:df:1a:61:7a:4f:ee:b6:1a:ef:
e8:40:b9:cf:03:44:82:69:f2:c5:e5:da:e3:f6:a4:
41:2b:da:bb:22:1d:03:d4:81:0c:37:b7:d0:e4:86:
66:61:fb:b3:88:b3:56:f1:35:bc:ba:72:0a:f2:97:
92:77:c7:a4:57:f3:e2:7c:1e:55:29:4c:e8:16:17:
73:e4:c8:42:72:d0:78:05:89:d6:da:44:d1:f4:ca:
00:1c:b1:98:ad:94:0f:b1:be:ec:43:72:ae:32:0c:
53:30:36:61:62:93:92:b9:1a:db:ed:f4:b2:d3:46:
1e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:02:64:C2:85:B8:D5:36:04:07:72:1B:D5:E1:0D:8D:CA:99:42:23
X509v3 Authority Key Identifier:
keyid:2B:44:DF:4E:07:2E:18:78:63:E8:2E:4F:BE:3A:7A:CE:AF:44:96:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:97:9a:e6:67:ab:6b:60:4c:57:9f:73:4c:c9:97:b1:bd:6f:
14:fe:19:42:ca:82:69:c1:c7:d4:ec:1c:5e:ba:f0:2c:04:e2:
f0:ae:2d:cc:35:38:87:1b:21:fe:b5:2a:48:c9:6a:0d:f6:2a:
7b:2a:59:07:48:60:3d:2c:0f:23:2b:76:ba:02:b6:5c:9b:a7:
b2:e7:e7:2f:10:30:c2:11:a0:83:9e:36:03:59:1b:a4:62:e0:
b8:4d:b8:06:5e:60:50:a8:83:e2:af:aa:ce:3d:a0:61:f5:6b:
54:5b:39:3c:40:a9:f5:58:c9:92:22:d5:e3:8d:cd:4e:78:a2:
9b:40:7d:74:38:05:13:06:18:5a:df:c4:4e:25:16:d5:46:78:
a0:be:cd:f5:44:6e:50:ba:2e:d3:da:97:6d:51:05:16:73:cb:
69:43:1b:3f:70:75:db:24:fd:11:73:b1:57:fd:75:0a:3f:01:
8b:07:c9:f6:2b:a2:99:cb:d7:0b:4b:cd:7d:1e:67:2a:57:04:
d6:e4:be:4c:1a:fd:56:03:e1:16:8b:0b:47:9a:df:47:f7:69:
c4:13:a4:ed:42:2c:29:94:91:62:e8:76:9b:30:f4:11:e4:a4:
0a:46:67:24:fa:85:7f:25:5c:1e:2c:4d:1f:e5:63:fa:28:ab:
d8:2c:18:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:19:19 2026 by rpki-client