Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/K-q9pFRBcaKTws0q8dSKmL4rryo.mft
File: K-q9pFRBcaKTws0q8dSKmL4rryo.mft (raw, json)
Hash identifier: DubxJNoCulmFyeTiypnZGb24UpBYeppHQT+waBxPdwA=
Subject key identifier: FA:78:4D:DE:B1:47:4A:9E:FE:91:6E:D0:71:FF:D2:F4:A0:59:A6:62
Authority key identifier: 2B:EA:BD:A4:54:41:71:A2:93:C2:CD:2A:F1:D4:8A:98:BE:2B:AF:2A
Certificate issuer: /CN=2beabda4544171a293c2cd2af1d48a98be2baf2a
Certificate serial: 01A0E550B79B58CB6BBFA03A04D2EAACDF0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-q9pFRBcaKTws0q8dSKmL4rryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/K-q9pFRBcaKTws0q8dSKmL4rryo.mft
Manifest number: F0
Signing time: Mon 28 Sep 2026 00:01:07 +0000
Manifest this update: Mon 28 Sep 2026 00:01:07 +0000
Manifest next update: Tue 29 Sep 2026 00:01:07 +0000
Files and hashes: 1: FbeOe8y40igE6yHs5ZpBOEJpYHs.roa (hash: rOTURWQFdRZR99D8f6iu/wrgrcROGJZKmSGhgZIhz28=)
2: K-q9pFRBcaKTws0q8dSKmL4rryo.crl (hash: E6yJREdwYlLMyJ3T6Z2xquRAbbin8/T5h7zcE3Yluvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/K-q9pFRBcaKTws0q8dSKmL4rryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/K-q9pFRBcaKTws0q8dSKmL4rryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-q9pFRBcaKTws0q8dSKmL4rryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:50:b7:9b:58:cb:6b:bf:a0:3a:04:d2:ea:ac:df:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2beabda4544171a293c2cd2af1d48a98be2baf2a
Validity
Not Before: Sep 28 00:01:07 2026 GMT
Not After : Sep 29 00:01:07 2026 GMT
Subject: CN=fa784ddeb1474a9efe916ed071ffd2f4a059a662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cc:09:1b:dd:7b:29:37:c0:fb:d8:5a:46:c1:
4d:0d:bd:f3:70:25:7d:02:86:48:5b:24:f6:a2:3a:
05:65:89:72:2c:db:59:59:eb:d1:81:0a:7a:e2:95:
e4:cb:a8:6c:a8:a5:1b:c2:2a:a5:91:39:f3:65:e2:
c7:f8:88:08:55:e5:09:ff:e5:ff:83:51:9e:70:20:
e4:9c:be:9d:74:3a:09:b3:87:99:3f:1d:d1:53:49:
67:cf:6b:87:cc:25:fd:1b:0e:68:f3:eb:62:13:81:
a5:34:2b:e3:f4:10:8a:a5:48:91:c8:b5:ee:ed:7b:
b2:36:7b:be:a7:0e:20:df:38:dc:5f:ae:20:16:e1:
9a:7c:ed:3c:45:7b:f1:9d:47:ca:90:cd:e9:2a:13:
3a:6c:38:56:0e:54:cb:5f:fa:00:a7:00:a0:0e:9a:
43:8c:1c:f1:68:bb:d6:cb:4f:c1:48:a0:52:17:83:
7e:db:27:d7:22:80:23:93:95:e5:23:c8:56:6c:50:
6d:af:f2:9c:8c:da:6b:10:21:12:74:e1:ae:d9:ce:
ab:70:34:ba:28:40:23:c4:95:b9:48:6a:2c:2d:8f:
74:1f:c3:0a:f9:dc:db:c2:40:35:ba:78:af:c4:84:
92:99:24:34:92:e3:33:5e:26:a0:6f:d1:23:77:49:
bd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:78:4D:DE:B1:47:4A:9E:FE:91:6E:D0:71:FF:D2:F4:A0:59:A6:62
X509v3 Authority Key Identifier:
keyid:2B:EA:BD:A4:54:41:71:A2:93:C2:CD:2A:F1:D4:8A:98:BE:2B:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-q9pFRBcaKTws0q8dSKmL4rryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/K-q9pFRBcaKTws0q8dSKmL4rryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/K-q9pFRBcaKTws0q8dSKmL4rryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:f4:1d:22:9b:d7:37:02:fe:65:82:a1:4e:38:a5:9b:3e:27:
48:52:91:76:26:d9:97:23:c5:3f:a1:7b:5d:ba:61:c2:61:c0:
3b:85:26:ad:2c:fd:3f:21:e3:7e:69:83:fb:6e:7d:82:ea:d7:
71:d8:d9:b4:8f:c1:0e:69:6b:8c:4c:91:84:dc:c3:95:a7:32:
e2:bd:99:97:c1:6f:b6:c7:5a:53:cb:e0:ab:3a:8a:99:9d:3d:
16:7f:56:2c:36:33:da:99:56:05:9b:7d:18:62:30:79:03:04:
d4:18:b4:0d:42:2d:2c:da:f9:7f:23:5c:36:bb:c7:7b:f5:70:
8e:15:63:6c:2f:90:99:68:bf:b3:76:0c:08:26:95:f5:77:a4:
2f:30:86:51:ff:6f:1a:3e:fc:43:3d:c9:07:c4:68:0c:25:24:
03:13:2e:eb:7b:a2:91:3a:76:3f:42:c7:5b:21:fc:2d:36:59:
c7:e7:8d:ac:cb:d8:db:62:71:d9:64:5d:86:9a:bc:4c:2f:a1:
84:f3:bf:ea:e1:06:5e:22:ab:50:fd:08:6d:55:d3:17:2c:de:
30:f6:6b:c0:f5:6e:51:82:86:2f:18:f5:5b:91:73:fb:f3:e6:
1e:43:1f:09:ed:d6:d3:f7:10:0e:54:37:d4:a3:c3:f1:ef:6f:
c8:bb:03:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:29:53 2026 by rpki-client