Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
File: K1iORmAJUgViBhvvZbf0gpgomGU.mft (raw, json)
Hash identifier: 3d+2D2hnk2SKgyBb/QRL+zf+DV1Nv/d7bZDLd1L5yc4=
Subject key identifier: 23:DD:A9:12:DF:99:FA:AF:74:30:78:F9:42:33:4B:CD:2B:E9:82:31
Authority key identifier: 2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
Certificate issuer: /CN=2b588e466009520562061bef65b7f48298289865
Certificate serial: 019CAA8FB4AE687D61AC96F3BC53BA0C2E5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
Manifest number: 6E
Signing time: Sun 01 Mar 2026 18:01:10 +0000
Manifest this update: Sun 01 Mar 2026 18:01:10 +0000
Manifest next update: Mon 02 Mar 2026 18:01:10 +0000
Files and hashes: 1: BTaxjaAuAYx2Mtyrjvy8RsSBVlA.asa (hash: lfaIjF7uiHYdFf+hzTjn5HPdY1nfdVq2QswXgCrjp4s=)
2: K1iORmAJUgViBhvvZbf0gpgomGU.crl (hash: sPUFfEyHp6/g3o/AFp0WgJ2VXxkh5AjHx7jlR2LAaWw=)
3: z2WbFotJlc5p1cMGvSPUFFihXt0.roa (hash: dUVgzJ6l/KKfEgalE16Upz4cVUb7zxRYQ46guX2wkl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:b4:ae:68:7d:61:ac:96:f3:bc:53:ba:0c:2e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b588e466009520562061bef65b7f48298289865
Validity
Not Before: Mar 1 18:01:10 2026 GMT
Not After : Mar 2 18:01:10 2026 GMT
Subject: CN=23dda912df99faaf743078f942334bcd2be98231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:2d:74:27:a3:fc:5f:12:ba:d2:a7:24:41:
80:7a:d6:04:e1:89:cc:04:40:43:a0:23:a5:8b:59:
c6:4f:66:4e:55:f3:7a:b9:1a:28:04:5c:ab:89:cc:
a9:36:b0:87:c8:3c:8f:a7:7d:22:7c:68:28:80:05:
9e:ef:f8:41:eb:8d:19:6f:c7:4f:27:8e:6f:ff:ac:
a1:83:45:17:54:f9:0e:83:48:7a:58:95:74:0e:56:
06:aa:f4:4f:a3:43:31:6a:e6:18:59:d1:7a:e6:d6:
7d:b6:b1:6a:f6:48:70:84:89:8a:3e:f4:31:a6:f5:
d8:e6:a6:ac:f6:28:70:63:b4:ec:63:96:c5:3c:3c:
d0:eb:e1:00:10:92:ef:95:f3:5b:2c:29:48:d3:03:
b8:53:43:92:b4:e9:7b:61:87:a6:87:14:9d:eb:de:
52:45:9c:6b:cc:fa:20:82:d8:0a:0e:ca:a8:b2:db:
16:a0:1d:0b:85:be:18:62:bc:25:3b:36:fd:a3:96:
88:a0:24:19:c1:bf:16:ec:88:4a:a7:ee:51:9a:f0:
01:cc:5a:12:9d:7f:bb:ff:4f:0c:5d:e9:46:5a:c2:
c7:5b:cb:5e:ee:c5:d5:1f:91:29:6f:30:7e:58:6c:
25:78:b5:52:cc:fe:87:b6:3a:0d:c2:a0:76:cf:7f:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DD:A9:12:DF:99:FA:AF:74:30:78:F9:42:33:4B:CD:2B:E9:82:31
X509v3 Authority Key Identifier:
keyid:2B:58:8E:46:60:09:52:05:62:06:1B:EF:65:B7:F4:82:98:28:98:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1iORmAJUgViBhvvZbf0gpgomGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/375f16-6aee-462a-a6f8-ccafb82473a5/1/K1iORmAJUgViBhvvZbf0gpgomGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:ee:4c:ca:a0:69:6e:8b:f8:b2:16:ff:ad:a8:a3:7d:a8:f5:
5c:a4:81:5e:f9:fe:cf:25:e6:ee:09:98:6c:fc:ff:a9:ca:98:
86:4b:f6:3e:f7:50:d8:08:91:f4:6f:dc:94:17:50:ab:ee:21:
7b:24:a9:3b:12:a8:f1:8f:be:72:23:74:df:7c:d2:64:91:25:
ed:f6:e9:da:e4:93:0a:87:cc:7d:ff:3a:02:d2:27:c2:02:b9:
88:1d:32:3e:5a:95:28:9c:f7:6b:8f:83:61:7c:c7:e6:87:02:
8f:ab:df:b1:ba:ea:e1:80:a1:cf:56:c4:04:05:74:6d:84:0a:
70:35:45:cc:19:05:bc:03:06:23:05:30:1b:66:58:8e:d2:5f:
86:ea:4f:64:7c:05:0e:06:38:9b:d3:a2:70:49:b7:d3:c1:f4:
26:d6:7a:f1:0d:fb:de:cb:28:ae:1d:21:31:0f:ae:7b:d0:fd:
10:8b:b9:88:f2:1a:fe:04:03:cc:d8:34:68:11:c9:22:e7:a4:
08:8e:77:99:21:15:69:15:e6:99:4a:4a:2d:f0:80:0e:25:e7:
07:e1:0b:cd:f6:b1:da:11:e7:d3:23:9c:5c:6c:f5:41:26:02:
25:14:d8:c8:e4:0c:35:d9:6c:8e:ba:db:0c:02:29:0a:80:ef:
d2:72:01:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:32:30 2026 by rpki-client