Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
File: K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft (raw, json)
Hash identifier: pCVPuFeNBjro+x32McDtA4jzYhzMTvYJP18Cfsn2I9w=
Subject key identifier: 35:F6:F9:C6:2B:10:25:33:0B:ED:40:4F:14:94:6A:A7:6E:0B:3A:9A
Authority key identifier: 2B:44:DF:4E:07:2E:18:78:63:E8:2E:4F:BE:3A:7A:CE:AF:44:96:63
Certificate issuer: /CN=2b44df4e072e187863e82e4fbe3a7aceaf449663
Certificate serial: 01A0D7CCA93C5702FC2FFA8686CA8A93718C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
Manifest number: E9
Signing time: Fri 25 Sep 2026 09:01:49 +0000
Manifest this update: Fri 25 Sep 2026 09:01:49 +0000
Manifest next update: Sat 26 Sep 2026 09:01:49 +0000
Files and hashes: 1: K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl (hash: ceEwA+oyr2TP5TCQhM7bSVqTprRadIF3t2bKMuBqfl0=)
2: MCJHMq3DaEcsDlBngovhIGwxerY.roa (hash: ceSH2iap4Ad4G5FgYSyum63drzQRVImpBZ3iM3Jeasw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cc:a9:3c:57:02:fc:2f:fa:86:86:ca:8a:93:71:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b44df4e072e187863e82e4fbe3a7aceaf449663
Validity
Not Before: Sep 25 09:01:49 2026 GMT
Not After : Sep 26 09:01:49 2026 GMT
Subject: CN=35f6f9c62b1025330bed404f14946aa76e0b3a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ff:0f:b9:ee:2c:41:ab:3b:e5:c5:07:c9:44:
d5:d5:4d:db:c5:6e:54:e8:d2:24:2d:cd:cd:95:4b:
77:6e:4e:cf:15:64:a9:12:af:a6:e9:78:72:b8:fc:
2c:89:99:6a:e0:cf:14:5c:ae:4e:08:97:d2:1c:66:
94:8a:bf:3f:d5:59:14:43:b5:9b:03:f5:df:06:9e:
19:30:1e:79:12:cc:01:e8:1e:90:33:03:72:47:45:
da:4f:12:10:c9:e6:6c:6c:d1:17:ca:f4:7d:2d:58:
f2:ad:af:ad:3c:45:7f:3a:8c:d2:a4:90:72:3e:55:
72:f2:94:03:52:1c:29:42:10:61:c8:cd:99:fa:ff:
0d:ea:8b:7e:6a:89:e5:ee:d9:51:86:92:9f:18:ec:
94:ca:da:f6:5f:94:9f:e4:e3:c2:1b:f2:80:ac:9e:
32:7a:e3:70:6b:d8:f4:04:7a:47:a7:3a:90:34:40:
30:95:a1:62:6a:05:e9:2d:55:19:ba:cc:3d:59:9f:
39:68:b5:48:13:80:5a:58:87:48:03:f1:4a:65:d0:
de:de:b6:1f:77:91:ea:58:42:2f:da:e2:11:43:78:
35:db:43:e6:3f:2d:4e:3d:fc:ec:86:5c:3f:b4:4a:
58:a7:37:a5:6f:b6:33:76:95:cb:f1:0a:92:0c:7a:
37:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F6:F9:C6:2B:10:25:33:0B:ED:40:4F:14:94:6A:A7:6E:0B:3A:9A
X509v3 Authority Key Identifier:
keyid:2B:44:DF:4E:07:2E:18:78:63:E8:2E:4F:BE:3A:7A:CE:AF:44:96:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/K0TfTgcuGHhj6C5Pvjp6zq9ElmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b0:b7:ed:8b:8e:e3:0d:a2:05:6f:30:77:df:b7:a4:e7:49:
4b:fc:41:4e:dd:6b:5c:38:b6:d8:a4:69:2f:d2:94:d9:07:3a:
cc:84:f8:f4:65:5d:5c:92:c4:be:d1:61:e0:36:97:15:fb:cc:
7f:2b:1f:39:5c:24:3d:e9:f1:dd:8a:6c:6d:83:97:3c:6f:57:
71:f1:fd:2e:5d:09:f2:19:c1:d8:55:c0:dc:5a:09:7e:88:73:
1d:13:f0:33:d5:b2:c5:4e:a7:8a:ed:74:97:d3:fe:20:4c:c1:
29:9f:8c:d5:30:fe:4f:46:0c:d6:30:c7:52:34:88:41:af:f8:
59:62:71:2a:63:24:cd:bd:b5:84:9c:74:15:34:ca:ff:c0:25:
93:9c:05:8d:35:02:0a:39:8c:63:f2:33:38:06:d5:42:66:68:
b9:3b:13:db:14:c0:8b:c6:86:4c:06:97:c5:12:7b:2b:0f:33:
7c:43:78:16:83:f3:fe:ff:27:a4:3f:15:94:77:a5:50:f1:3c:
9f:2a:7c:7e:b2:d1:3c:33:a0:2e:dc:7a:d3:c8:94:b5:9a:36:
c3:df:4d:bc:99:2d:a8:62:72:dc:c9:65:3c:67:e2:df:f0:9e:
a1:98:cf:8a:17:a7:af:3e:8d:dd:93:33:b5:9a:d5:5c:a7:e9:
cc:fd:8f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:54:58 2026 by rpki-client