Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
File: K1iORmAJUgViBhvvZbf0gpgomGU.mft (raw, json)
Hash identifier: B/n9bWAz2A9fZIYreaLky9jD7SX7dxt1Xh/ab9G50sg=
Subject key identifier: E5:E8:AD:B5:87:9A:47:9F:8B:D5:BC:75:D9:54:9F:3C:C9:81:A8:97
Authority key identifier: 2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
Certificate issuer: /CN=2b588e466009520562061bef65b7f48298289865
Certificate serial: 01A0BF5553375A7FF5578B75BE7F2BC1EC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
Manifest number: 028B
Signing time: Sun 20 Sep 2026 15:00:35 +0000
Manifest this update: Sun 20 Sep 2026 15:00:35 +0000
Manifest next update: Mon 21 Sep 2026 15:00:35 +0000
Files and hashes: 1: BTaxjaAuAYx2Mtyrjvy8RsSBVlA.asa (hash: lfaIjF7uiHYdFf+hzTjn5HPdY1nfdVq2QswXgCrjp4s=)
2: K1iORmAJUgViBhvvZbf0gpgomGU.crl (hash: OrdJIJK+xQidkAThItyzJ+/aRvZ/K09pafoyjgGSX4A=)
3: z2WbFotJlc5p1cMGvSPUFFihXt0.roa (hash: dUVgzJ6l/KKfEgalE16Upz4cVUb7zxRYQ46guX2wkl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:55:53:37:5a:7f:f5:57:8b:75:be:7f:2b:c1:ec:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b588e466009520562061bef65b7f48298289865
Validity
Not Before: Sep 20 15:00:35 2026 GMT
Not After : Sep 21 15:00:35 2026 GMT
Subject: CN=e5e8adb5879a479f8bd5bc75d9549f3cc981a897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e8:f0:31:32:a5:61:2d:30:d0:13:ed:b5:02:
73:7a:5c:e8:ac:ee:f5:c0:75:a4:cb:83:12:5b:9e:
87:c9:75:ea:ec:19:34:ad:ec:6b:48:3b:01:41:65:
92:65:f3:af:c0:9f:98:bc:d1:04:ab:17:18:a7:9d:
91:25:64:db:85:60:49:31:86:e8:cb:fd:e8:f3:cd:
8e:b0:b6:d0:51:75:b0:fc:58:b6:cb:63:5d:0b:65:
68:41:0c:56:97:78:86:a9:11:55:28:f2:61:85:1a:
9e:38:0d:27:29:c7:36:3e:37:93:c6:97:1c:5f:78:
7d:f1:ef:15:11:5b:45:30:29:d8:cd:55:55:70:a0:
9b:de:31:f1:18:e5:c0:a4:3b:9d:d1:a4:b7:b9:d2:
5a:cf:52:ee:af:28:07:c1:0c:d6:3b:ce:31:16:82:
ee:f5:33:67:91:71:ba:d0:b3:f0:b7:69:51:2c:f2:
cf:1f:9a:a7:07:8f:a6:17:8d:cb:17:22:41:40:61:
ca:18:2f:03:0e:e6:30:3d:ed:60:cc:ab:8b:a9:09:
86:7b:a1:06:90:ca:eb:48:7b:7f:6e:2f:53:5d:55:
00:7d:5b:80:82:3e:b9:08:c4:17:70:cc:d3:4d:45:
04:e7:ca:90:27:5d:16:ac:fb:66:1d:7f:ed:d4:6f:
12:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E8:AD:B5:87:9A:47:9F:8B:D5:BC:75:D9:54:9F:3C:C9:81:A8:97
X509v3 Authority Key Identifier:
keyid:2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2a:1a:88:4d:4d:b0:45:13:66:f4:da:be:a8:85:0e:20:e5:
6c:04:81:3e:24:64:ba:e5:b4:f9:15:6e:ad:ef:41:b2:6e:4b:
b2:ea:e4:7d:77:c9:51:7e:8d:35:f4:52:fc:ef:f5:81:14:4f:
8c:9e:e6:92:89:f0:88:bd:d3:e4:d8:22:d5:a1:12:f3:6e:2e:
25:19:0f:07:29:79:99:09:4f:a3:ac:53:14:33:b0:0a:1b:21:
19:dd:a5:d9:8f:f3:a0:24:2a:dd:50:ca:b8:93:9a:b7:be:d4:
87:c5:ba:e1:78:bf:ce:ac:7f:2d:a3:1b:2e:c5:0d:76:ef:e0:
d0:09:ef:ce:90:65:a5:04:6d:9f:c6:4c:94:a5:b2:8d:3b:f4:
bd:b7:7c:d8:18:36:20:f2:3c:49:e8:4c:57:2e:c2:a1:23:4b:
ba:6b:34:36:e1:0d:2a:cd:fd:91:5a:ca:cb:14:b0:55:f4:0f:
3b:d4:29:4f:83:e2:08:e9:b7:d7:58:6c:ce:3f:b3:e2:6c:91:
20:57:e3:e1:61:f2:a8:2a:a5:fc:c7:a3:02:7d:8a:62:74:2d:
54:e1:ec:57:cb:b9:bf:20:19:cd:80:60:74:ca:72:6b:f4:29:
02:0b:df:c1:45:2d:26:49:3a:c3:41:f4:60:dc:6e:57:75:ff:
76:7e:42:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:25:17 2026 by rpki-client